last executing test programs: 5m39.460687016s ago: executing program 32 (id=102): syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x20, 0x1d, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "059e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x4, 0x6, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xea, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x7, 0x5, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x0, 0xf}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0xc7, 0x7, 0x10, 0x1}, 0x4e, &(0x7f00000000c0)={0x5, 0xf, 0x4e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "1d524ed7069e60e36dc04494d389fb55"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x0, 0x0, 0x9, [0xff1fbf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x6, 0x40, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x85, 0x9, 0x1, 0x9, 0x81}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0x2a9661783b8cdcef, 0x80, [0x7e00]}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40e}}, {0xde, &(0x7f0000000200)=@string={0xde, 0x3, "2862441905102af65570bb64527753aff754ce6b4f40148517b10af3f6212f18007752ed8546db9e19e03a8c6d775d975cbaaa969145ed2595bf7bf624a5abb1923d5b3e58643710e8fc3f782ec2333c13af889a5fd999b338eabf0440825e6128fcafff107206e02a176ac6b217d7605c9523ff62a5fae31f3e038ab83a963789669bf9e0e0b3be22c59af156f09b44e09c2f1ff55358e6d7d3acfa8007554fd547cf7ff7967f145dec52463c9f6c5c8b69eb6beb6650f04f4a7256a6d838fa46f7485e69c785a688c498e2dbec86f8c10e61855cb83ab350d52e1f"}}, {0x34, &(0x7f0000000300)=@string={0x34, 0x3, "e29d377516f7986e84bb286c6766529c8fc31a7460344cd34c9c793577ec08fe9a3ebab017cb9e66ff805b38a240aa100930"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x412}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "f6a7a3d8b8875f7d3ab12cd9c5ab7f051d8a309200eed4"}}]}) (async) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x20, 0x1d, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "059e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x4, 0x6, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xea, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x7, 0x5, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x0, 0xf}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0xc7, 0x7, 0x10, 0x1}, 0x4e, &(0x7f00000000c0)={0x5, 0xf, 0x4e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "1d524ed7069e60e36dc04494d389fb55"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x0, 0x0, 0x9, [0xff1fbf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x6, 0x40, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x85, 0x9, 0x1, 0x9, 0x81}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0x2a9661783b8cdcef, 0x80, [0x7e00]}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40e}}, {0xde, &(0x7f0000000200)=@string={0xde, 0x3, "2862441905102af65570bb64527753aff754ce6b4f40148517b10af3f6212f18007752ed8546db9e19e03a8c6d775d975cbaaa969145ed2595bf7bf624a5abb1923d5b3e58643710e8fc3f782ec2333c13af889a5fd999b338eabf0440825e6128fcafff107206e02a176ac6b217d7605c9523ff62a5fae31f3e038ab83a963789669bf9e0e0b3be22c59af156f09b44e09c2f1ff55358e6d7d3acfa8007554fd547cf7ff7967f145dec52463c9f6c5c8b69eb6beb6650f04f4a7256a6d838fa46f7485e69c785a688c498e2dbec86f8c10e61855cb83ab350d52e1f"}}, {0x34, &(0x7f0000000300)=@string={0x34, 0x3, "e29d377516f7986e84bb286c6766529c8fc31a7460344cd34c9c793577ec08fe9a3ebab017cb9e66ff805b38a240aa100930"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x412}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "f6a7a3d8b8875f7d3ab12cd9c5ab7f051d8a309200eed4"}}]}) 5m19.392014809s ago: executing program 33 (id=119): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48080) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$int_in(r7, 0x541b, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x80, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4m21.476748056s ago: executing program 34 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000180)=""/225) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000054) 4m9.971869476s ago: executing program 35 (id=307): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ioctl$int_in(r9, 0x541b, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r7, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x90, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4m6.959574051s ago: executing program 36 (id=316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x87002, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xd000) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x63, &(0x7f0000003c00)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa8c01) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYRESOCT=r6], 0x0) write$sndseq(r6, &(0x7f0000000080)=[{0xfd, 0xeb, 0x0, 0xfd, @tick, {}, {}, @quote={{0x81, 0xd}, 0x812, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x5, @tick, {0x47, 0xf8}, {0x5, 0xb}, @queue={0x3, {0x1, 0x3a1}}}}}], 0x1c) 4m0.547992914s ago: executing program 37 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000035c0)=@mmap={0x4, 0x5, 0x4, 0x10, 0xd535, {0x77359400}, {0x4, 0xc, 0x9, 0x1, 0x8, 0xf3, "a70ff65f"}, 0x9, 0x1, {}, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@initdev}, &(0x7f0000000280)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x20048854) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$key(r3, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x578410eb) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) 4m0.537954794s ago: executing program 38 (id=334): socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0xffffffff, 'geneve0\x00', 'wlan1\x00', {0xff}, {}, 0x5c, 0x2, 0x33}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x3]}}}, @common=@unspec=@devgroup={{0x38}, {0x6, 0x9, 0x3, 0x0, 0x4000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) 3m12.986835399s ago: executing program 39 (id=463): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(0x0, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000002030101dc03000e00000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000000000029e5d436ffbaed0d40d4e1dbdd962277861d7fcaeb19d00721115445ad61e3967f981150788bc84a3d029e58f12cfbee3763dcd745a70039ea285093db158420b03e07ce64c8aefb83ca294c62e57c3f1f4f871d541da1419736e841368f4891a8f61a89ad201d5467105c9bea7b"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x70, 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585611, &(0x7f0000000400)={0x0, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x18) 2m51.766688698s ago: executing program 40 (id=525): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r2, @ANYBLOB="14001d810c000080060005000200000004"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000200)={0x3}) 2m36.534425746s ago: executing program 41 (id=567): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(0x0, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000002030101dc03000e00000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000000000029e5d436ffbaed0d40d4e1dbdd962277861d7fcaeb19d00721115445ad61e3967f981150788bc84a3d029e58f12cfbee3763dcd745a70039ea285093db158420b03e07ce64c8aefb83ca294c62e57c3f1f4f871d541da1419736e841368f4891a8f61a89ad201d5467105c9bea7b"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x70, 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585611, &(0x7f0000000400)={0x0, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2m27.390962263s ago: executing program 8 (id=592): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x71e, &(0x7f0000000800)="$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") (fail_nth: 7) 2m26.290704799s ago: executing program 8 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 2m26.07615292s ago: executing program 8 (id=599): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000200), 0x18, &(0x7f0000000280)={0x0}}, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x5}}, 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r8, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0xb80b}, 0x1c) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x3}, 0xff}, 0x18) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @dev}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m23.829886631s ago: executing program 8 (id=601): r0 = syz_open_dev$media(&(0x7f00000010c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfffffffffffffed3, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000010000000011,iocharset=cp948,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYRES8=r1], 0x2, 0x1510, &(0x7f00000037c0)="$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") mount$nfs(&(0x7f0000001980)='\xd1\xaey\x99\xb3\xd72\"\xf4_\xf60\f)/\xadN\x80\xf0\xc4Fj[\xfeC\xf4,\t[\x02\xca\x94\x06\x95\xea\x99\x1e\xb5\x8e\xe4\x82y-\xd9\xf1\x90\x91I\xb9\x00\xe3\xef\v\x14\xef\xe0b+\t\'\xe4\xb6B CL\x94\x86i\xfe\x99\x88\xbf\xbdeY\xe3S\xb1\x0e\xe4\xdf\x1dd\xdb\x9e\xc1\x1d\x938JQ\x94)\xa3\x80\xe0f\x8cW5\x18p\xd5\xce\xcc\xf7\x94\xc3\x8aO\xe4>\x96o\x9c-\xf6Cw\x84~\xe3zu\x9aP&Sel$<\xf1\xcbk4\xe7\xd4\x83y\x13\x05I\xe83\xe7\xf8x\x86\\{c\xe7\xf9\xb4\xf0\xf9\xad\x83\xf0m\xb2\xb9$\xec\xe4\x0ejC)\xcb\vkv\x1c5\xac0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724", 0x8) splice(r3, 0x0, r2, 0x0, 0x4ffdc, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc048aec8, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0xffffff80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1000, 0x20000) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000080)={0x0, 0x9, 0x7, 0x5, 0x3, [], [0x4d17d687, 0x20, 0xfffffffa], [0x5, 0x1, 0x3, 0x3f], [0x6, 0x7, 0x7, 0x36fc6ede]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000100)={0x8, 0xd, 0x1f}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f0000000140)) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002002100400004803c0001800b0001006578746864720000000008000140000000000500020000000000080006400000000408000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0x3) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "eca41ddd2bccc4a9"}}}, 0x11) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000240)) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x410a00, 0x0) openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2m11.549810214s ago: executing program 5 (id=646): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast2}, {@broadcast, 0x8000}, {@multicast1, 0xffd200}]}, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x87, r5}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m11.273160776s ago: executing program 43 (id=646): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast2}, {@broadcast, 0x8000}, {@multicast1, 0xffd200}]}, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x87, r5}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m7.096631697s ago: executing program 9 (id=659): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat$cgroup_ro(r3, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000600600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e222ffc28d084c9130194"], 0x0) r5 = dup(r2) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff42, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa8e6}]}, 0x1c}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r10, 0x4004743a, &(0x7f0000000380)) ioctl$PPPIOCCONNECT(r5, 0x40047435, &(0x7f00000002c0)=0x2) 2m6.287143892s ago: executing program 9 (id=660): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x8b, 0x2c4, &(0x7f00000003c0)="$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") syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f0000000280)={[{@skip_balance}, {@autodefrag}, {@noacl}, {@subvol={'subvol', 0x3d, 'discard=async'}}, {@rescue={'rescue', 0x3d, 'nologreplay'}}, {@rescue={'rescue', 0x3d, 'ibadroots'}}, {@nodiscard}, {@compress_force}, {@acl}, {@discard_async}, {@ssd_spread}]}, 0x9, 0x55cb, &(0x7f0000007900)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEXoBAajA02Gga04YEMYlCYIG5t2zOkcmTTMMdb5wkAqYOxqdMXEDNFFjFOZLA4bRuQlixMXWGFEJZnO9N77XO49l7Z3bFnn9vmQ9tzn/s7znOeenD/u99Ln3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACiKDq4ctE/1v9o5bcfvObF6ZvuO33/idpnH988+a75u8cdvn/15R2nWlpKX33uzHVL7n2oauSJPQsPRVEi1S+R6X/TZ6bNWTL3plkDwoB116e3FRXdHTLd9Vi60T/vya5++T8LoygqjQ2QzGxrBue0E/EDRA2FA/Zoe9WE1UM3TZ25pWzasMXJ+ubCl06XAX09gb6Sua5euHAtVad+l8T2yLZzLr1E3iWa7h+/4N6SFwEAvC6VtalN9u1o5i1utt0Yr8fa1bF2U6wd3iE05TYuRXrc/t3N86p4vY/mWZ2OCmXdzjNWz5z/bLs23j/WjkWN1zHP/F0zkWZAd/Osj9X7ap4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbyd3Hb/56ZLNP/nA8g1jk8eHj/rl11se/UFNZ/n0b+zb2PHH9mff19JS+upzZ65bcu9DVSNP7Fl4KIoqUv0S6e6JBTvaN/581fQ1v5j/SOvZ99++K5kZN2z75ewcdYQHnyyPoi/mVF4Iw54cEkW1+YVUM3qksLA09WB6KAAAAPBOMjz1uyTbTsfB0rx2IpUmE6l/QTosbq+asHropqkzt5RNG7Y4Wd986ePVdjNe9UXHy7YrLvwkcoJxiL/x8S7Uw64NBeP0LD5iPM+PG3n+8JFvrty4rnnwi/sHDk3W/PqrdcMvmz/+lasnTrj17w/vKMj/FT3n/3Dm5H8AAADeCPk/Pk7Pesv/o47cd/rOkz9bX/e5bQuOT/5W3ZD3VK79S+tHv7Bh1Iyp/Y5d/mhB/r8q75AF+T/MOOT/kujS8j8AAAC8nb2x/N8/6i3/VxeM07Pe8v+KtWP+OfP83KlPTDr/49N3jPjVwSPR3sYxX2q77UP75w0a0vTTgvxfWVz+75c77fDkH8KEl5VHUWXxJxUAAADIE/7f/cJHCyGvpz85iOf1+ecO1txY+sCZj827euS2oyN2dZ7717KVm8+Pb509uuqzT1dsLMj/1cXl/9K35uUCAAAARXhq6adu2BnNqvlI9d2H9y/a/nDjinUNy5vLEjP+29Bx7X9a+xfk/9ri8n9Z37wcAAAA4CIOfWXb7tfmrGgf3Vp2buufXvvr41eOXnOgpfJow++Glq5qr1takP/risv/gzLbzMqHdKf94a8QHiyPogFdD+rThd9GTZ/OFgAAAIA3Scjp/z7WMXbnNWW/eeqHL2+Z+73vDtv7ndkHm78/ZfDNUx84MPvAk3UF+b++5/v/hzsdhPX/eff/K1j/n1NI3/VvohsDAAAA8G5UuJ4/3B4//c0F3X3/frHr/6//cvtLx29b+LXO9464YcXLt152yycmn/zzrDuSOyfdWTJjxkunCvJ/Y3H5P5m7fTO//w8AAAAuwf/b9//NKxinZ73d/3/OY3cf7fzb85PGzGleNyDT57HdVVeeXXTjwA8/s3xvQf5vKi7/h+3g3Je3L5yfe8qj6IquB5m7Ce4K010WK7SV5hTSJz7WY27okSm0leUUUupjPcaVR9EHux40xgpDQ6EpVugckilsjRWeCYXM9ZAttMYK+8KVtnlIZrrxwp5QyCywaAsrKAZnl0TEerzSXY+uwkV7PJ89OAAAwLtKCM+ZLFua34ziUbYt0dsOg3rboaS3HZK97dAvtkN8x+6ej+ryC+H5c2uf+H3lx0s+f+iW26eMHrt4/T1NEw8kF0y59skdA8+uOjV+TUH+31pc/g+non960936/yis/898r2F2/X9dKFTECm2hUBu/Y0BtOEY67G4Ix6iozfTovCJbAAAAgHe08LlAso/nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2Lv3OKmqO0Hgp5t+0NA0LSZiIomtrq3o0DQoxk/wgZqJBljTKDszLj4aoVGkFUSYiGsU1OwmcTCKStSZUViFkVUcfAFZTUCNaCIajaOZUccQjDrujh/FEf3MGsN+um+doupWl128lHa+3z+6TtXvPG89us69t84FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiPYcNjNx35dxc/NWb0xvkDVrz6tf/+Uf3hyxe/+7/+8Nz1t+87/wcbVi9dWvmHFzadPOV7N36tceOqiS+G0NJZriwpXnbGkpU/Wn3ht77z0Ok33/PePnOWVWXqzcRD344/5Zk7V8VWf98vhFVlIVSkA0Nqk0Bl5n5trG9QbQh7hK2BbIm2PkmJdMPh8ZoQFoWtgWxVP6kJoTYnMP7Xj66Z35G4oSaEA0MI1ek2/rk6aaMmHWisSgJ90oHpFUngwy2JbGB1eRKAHRbfDNkX/YqW/Az1XZcr8vqr3Gkd+2ylh9crJuqL53v7uF3cqRxV6QdaduhpK6huR7pCUQVvj7XebT3g3Vawna/1tOV+kcp8Q9myNVQdyie3TZk4u31WfKQ8NDX1KlbTLnqeX9p06aRtSfeY12HsQP1OeR0+ccGguxY2jt3rlkc2Tnmj6rmFO9rNYpt3V6sOmddcj3keo1E+T3rA26/gm07DZ/ala3dyxwmb3/n9y+P+728eembI+98edvbQF18dVnfL96f3+/Nz/k/lrdM2Fcz/6z95/h9fzvG2PC93bPWjumRuHh+pjYl36pK5OQAAAPQYPWGv6ZsjD3mndn3DI/t/c+WU8xfPf/2M8/5Y9fO+Ew856dRhP7zzpmmnF8z/G4rN/3vlHf+Ph/xrc0e7NoRRnYkr+4ewd+fjSWBZ7M7Z/UPYrzPVkh84LhVYG8KXOhODs1WlSvSOJRpSgTfrMoFRqcC6GGhJBZbEwLWpwFUxsCIVmBQDa1OB42MgTM0fxyF1mXGUHKiJgdZkI66IZyH8W11sLbWtXs5WBQAAsJNkZoeV+XdzznXY0QxxermiprsM8QzsohmqUzWkZ7DZaVXRGiq6q6G8uxqy4577ycMvqLmsu5oLTsMoy8/w/sH3z1vz4D/99KaJRzx9yEetZ76yYfVjYzb3+qt3x/70svELhk8omP83f/Lx/+ouOlJWcPw/hHGdf2Pu8kykPRtvbcnLAAAAAOyAiteXnfKreR+XLf3FuZsO/NPTx1/Te+X++w9Yd+j9/6/hrQEnrD6wYP4/qrTz/+M+kV45mcP6uBtiWv8QmvMDSbUjCwPJUe++mQAAAAD0BNnj8dlj4VMzt8kp2un5dGH+lm3MHw/8j+oy/5Dx16xvXnPHqVNHHr527eYz93pl+canv3jguy8efMoZJz4wreHegvl/S2nr//XJv006sS724vr+IfTOCTwRe9kR6NQQAxuOzQ9kxr8uboCrY1WZExOyVV0dS7TGQHMqsKhYiWezJfbOD2SerGzjV2bHMTVTIicAAAAAn7q4OyAel4/n/z9zXr/H/nb5rZc+tHR96HvOil9dfsyIQQuG9H57+rOHPfqX750yrWD+37pt5/93zoMLTu9v7xvC0IoQeqV/GLC+T7IwYAzUlmUSP+2T1NUrXdUVfUIY2TGwdFUbM+v/V6TXGHy+JqkqBvbe/85NjR2JO2pCGJobeHHC4hEdidmpQLbxP6sJYd+O0aYbX9k7abwy3fhNvUP4ak4gW9Wk3iF0NFaVruqx6sx1DNJVragOYc+cQLaqr1WHMCcA0FPF/6WTcx+8aM4l0ya2t7fN3IWJuBO/JkyZ2t7WNGl6++TqIn2anOpz3jpG8wrHVOqlb17JrFF09+im/qWksz8UbM5tK7Mjv+DMwcz9+GWosnOcwyvz7h6WHvLBBxQ2EXK+ShUbcvkuHnKf3Eq2PokF9cf8VaFv6D37oraZTRdPnDVr5rDkb6nZhyd/43GmZFsNS2+rPl31rYSXR9HlslK2d1s15lYydNb5M4ZeNOeSIVPPn3hO2zltFxwx4ogjjxx++OEjhnYMqjn5281IG7uqOTXSLYtLHNZOHOmXK3Iq+TQ+NCQkJHpaYvW/fOmVY7647Acrb10y85ftR7f98pt77jl2adW3X9x82eUHPvM/PiyY/8/45Pl//NSJH/yZ9RmKHf+vj4f5k8e3HuZvjYFFpR7/ry92ND97YkBDKjA3BuY6zA8AAEDPU9PFY3F3ZNybGXdKP7pg4D/cNf7+sQs2HPrU+ufLNvQ59K8/+tfyysvH/5djH2y4/ft/UTD/n1va7/930vr/2aXrRxdb5n9wLNFcbP3/9DL/2fX/5xZb/z+9zH92/f9Fn8H6/7OzgdQm+Tfr/wMAAJ8Hn976/90u75++QEBBhm6X909fICA/Q1XBqLf/AgHbvP7/ow2HjPrZmu/9rnH5hdPf/W9D7x8zYJ+Gf3n0K1dNnjZqzJiRQ/6hYP5/bWnzfwv3AwAAwO7joEnHPb1p8r7HXfM/b9/jSz9r/e5eR3zxh8uPaluwecOkv7j9vXP/vGD+v6i0+f+nv/5fKHb+f0OxQEuxhQGt/wcAAEAPVWz9v2E3feeK15Yc/8C9V0wf3do6Yc6V1xyw5qDq08LLYxY0/MnM+z4umP+vKG3+H0+7KM/LHXvzUV2ypl1Ir2n3Tl32JwMAAADQM5SHpqbKEvPmLYx63La1Mzcn/VJmKdBPSud66qEDXnjw6yNPWrCk6prXywYO3/L0DbMOPeEbP35t01cuvfO88w8omP+vLW3+n/e7jN4XDLprYePYvT665ZGNU96oem7h1uP/AAAAwK5T6n4JAAAAAAAAAAAAAADgs3fiIz+75p1JS78xd9Gv9/p5r3HPrdg4e27TnNobXvvxdb858q5Hxhf8/j+M6yxX7Pf/8bp/8fcFX8jLHVvtfv2/zP3xY+6Z07lk4fq6EA7IDUy7YtoeIXNt/oNyA2vOGDywI3FFusTDrx7/ekfirHTgpCEDPuhIHJUKtMZFEr+UDsSrKn7QLxWIyys+nw7E7bEiHYhXf/xBv2QcZelt9VZtsq3K0tvqpdoQ+ucEsttqVW3SRll6gDekAtkBXpgOxAGenAmUp3t1T9+kVzFQG4ve1jfpFQAAu634LbAyTJna3tYcv8LH2y9X5N9GeUuWzSustqzE5l/JLE129+im/qWke6W/i2691nhlqO4YwrCCr6u5Wco6R7lzaulm032hyJC7W+2tvEi5tG3ddFXFR1STjKhp0vT2yZXdDvyw7rMMr+g2y7CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9PQbrQ57uXhGl/l4/d52/Yq+C3DxPvdX+9JN//8Kq/Z744zPnfPhnk7972fyzz3zvqHOr/+Y/lz3zXwftWTD/ry9t/l+dO64PMhcDmBuvrDeyfwitJY4IAAAAPv/OveDVBd9/7Lo3N7Q0vj596HVr/nHOTZdU1C276k9fevgvN0+45qwdjb/1yzv3e2TKxGe/cN5hy098Y79DL2886+37/2T++Ieu7nvrjxfc+aOC+X9DafP/uAcrcyg42duxNl7//8r+IXReWr8+CSyLwz27fwj7daZaYonkgvqjY4nmJLAs7jAZHEu0tuRX1TsGVqQCb9ZlAmtTgXUxkNlLcWfI7Mq5ri6EEZ2pcfklZsQS9anAt2OgIRVoioHmVKBfDIxKBf61XybQkgo8FQNhav62ur9fZlsBAABsi8w8qzL/bkjP81Z0m6Gsuwx9ustQ3l2G6u3tZLx/X8xQmTp5pSwnU2W61ppULQUZ4sXwt3/jZQ//P5ufM12woOl4/kH2fIOy/AwPnvL1e69eOGVw+W8+Xres9f0HJq28bc4xq859+K+enLz/4rtv2Ldg/t9c2vy/T/5t0vq6OP/fev2/JPBE7N718dTxhhjYcGx+ILNjYF2c7F6draolUyIzab86lhgVAw2pwIwYGJUKtI7LBBYN7HwqsoHMTDvb+JXZxqdmSuQEwjacAwUAAAClufGTw3EiGn/DE+f//778uaMfr1h89z++NuHu++a+fe99P7/33tvuG3PH5m8+f+Ul7138ccH8f1Rp8//YXt/cxq6Kvfl9vxBWlW3tTTYwpDYJxP0YtfHn8YNqQ9gjZwdHtkRbn6REVarh8HhN8gv1qnRVP6lJ1hiI98f/+tE18zsSN9SEcGDO3pdsG/9cnbRRkw40ViWBPunA9IokEPf8ZAOry5MA7LDsXsH4gsqc6pJV33W5Iq+/z8s1QdPDK9gH2kW+rn5ztatUpx/I7FPN2ranraA6domCt8da77ae+G6r927L/SKV+YayZWuoOpRPbpsycXb7rPhI7i9ZC+y053lL3rpBub9SLSW9na/D3Ltzt6W326o63YHm1MdHc9flun4dlsXqnrhg0F0LG8fudcsjG6e8UfXcwpK7UUT8ofCzVQPqczfvrlYdMq+5Hvd50uLzpCf+G2jwtIUQNl524vWjqmZcuWrMYUd95fXTT62e9f78v37g5Qff2/9vV04a/o0BBfP/ltLm/xWp207/HjfmRf1DODhn466Pm/+E/snnYE4g+ZTcszCQHHJ/ra7oJycAAADsbNndHdn9BVMzt8kJ4el5cmH+lm3MH/dXjOoyf6n9/sngU7/ywMB7xl932tE3//3vxvXbNOGlpceubD26cdkxv/hPZ9XML5j/t37y/L93qpuO/zv+zy7i+H+Xdvdd0b3TD8zdoV3RBdWxSzj+36Xd/d3m+H+XdsPj//k+peP/uRz/d/y/W47/d2l3f9oKviXN8KUrhDB87JlDau8e8uQHg9b89smnp/7TvNaJ937r6lv32fLd+iUL6/fqWzD/z2y2zJS+6Pzf+n9dL9qXXf+vtdj6fzOKrf831/p/AADALlVkobn0PK9g9b6CDOnV+woydLtAYEV3Gaz/t83r/z1+9FETVoxZ8tu1+4496PK+8+ad9sWnbn6pZdYHNbd/+MHAXx08umD+P7e0+X98OfTNbb2nrP/XMK5IVdfGwIyB+YFtXhgQAAAAdoViOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4bO194/UTjm2uPvl3J1xWM+aHD68/qPraV0+7bPnE2yZ/9Y4LBs9euXRp5R9e2HTylO/d+LXGjasmvhjC1M5yZUnxsjOWrPzR6gu/9Z2HTr/5nvf2mbOsOlNvZeZ2n7zcsdWP6kJYlPNIbUy8U9dxZ2tg/Jh75lR0JNbXhXBAbmDaFdP26EgsqQvhoNzAmjMGD+xIXJEu8fCrx7/ekTgrHThpyIAPOhJHZQJl6e7+Tb+ku2Xp7s7vF0L/nEC2u+f1y68q28aJmUB5uo2/q03aiIHaWPSm2qSNGGiPJab2DmFoRQi90lX9ojqpqle6qv9dnVTVK13V5dUhjAwhVKSr+m1VUlVFeuTPViVVxcDe+9+5qbEjsbgqhKG5gRcnLB7RkZiZCmQbP7UqhH07XjLpxu+vTBqvTDd+Y2UIXw0hVKVLbK5ISlSlS2ysCGHPnMDWjVgRwpzA50P89Jmc++BFcy6ZNrG9vW3mLkxUZdqqCVOmtrc1TZrePrk61adiynLSW+Zt/9hf2XTppI7bu0c39S8lXZEpV9nR5Y+3JDJ32w7b3Xsf+9Unt5Ktz0dB/TF/Vegbes++qG1m08UTZ82aOSz5W2r24cnfXplosq2G9ZRt1ZhbydBZ588YetGcS4ZMPX/iOW3ntF1wxIgjjjxy+OGHjxjaMajm5O/OGOniT3+kX67IqeTTeP9LSEj0tER53qdb8+7+OV7wRX9rRytDdecHdMG0IjdLWecod8agj9vOEW/P15RuRzSsYOJQkGV491kOK5hMbM1Sk2Tp/FpXMDnMram8c5PG++WhqalXse1Qn383d/O+vQOb96XMpis1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmbx1GzwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMClAAAA//9WSSRs") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f00000000c0)=""/8) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 2m4.73806461s ago: executing program 9 (id=664): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000002030101dc03000e00000000000000000800010001"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x70, 0x0, &(0x7f0000000580)) 2m3.612812525s ago: executing program 9 (id=665): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@lazytime}, {@delalloc}, {@resuid}]}, 0x1, 0x3e0, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0x40086607, 0x1000000000000) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 2m2.088709603s ago: executing program 9 (id=669): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f0000000000)="81", 0x1) close(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x100000000080, 0x9, 0x0, 0x2a, 0x401, 0x3}) 2m0.204781133s ago: executing program 9 (id=673): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x169a82, 0x0) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x2020) 1m59.644684126s ago: executing program 44 (id=673): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x169a82, 0x0) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x2020) 1m9.364595254s ago: executing program 1 (id=797): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x87002, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xd000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x63, &(0x7f0000003c00)) 1m8.11386804s ago: executing program 1 (id=800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9@\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xf4\xa6I\v\x86EZ\x96\x00\x01OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;\x9f\xa0\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xdb\xaf\x12$\x8d\x16%\x8b\x00', 0x6) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x40001141, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @mcast2, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x280481, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000d80), 0x208e24b) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16}}}}}, 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0xffffffff, 0x0) syz_emit_ethernet(0x1ae, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9c0200009078000001080a00000001000000060303060000211b47e1d654c5e7c089374c48545ee2207b1ce719456c4c5de5e708f02f4925be397b90e66f9cc23c118329f566dc82c0a1481983d4ede09362d93c45686790238e19d79dd4311bba1b24df6c06f53ebf2dae5a592e7aaa17126af534dd34ed4a64453b56fc22c9b823d10d0aa00dda21e2f57442e3741777ddcedaab4d7bd8db16d471ee5f2d7c1c5ad7b3fde566775b25b0ec5a921dcea1dfa8ed5fcce7fd798ac87e09174c3f32b44244bb37486a13957e4b17ea0f672ae7de7b9932dfedaae8dcaa25291957c5aca8bc5d3bb681c2a1d4ddeb5fce80c759933dc32eb69fc98a2838cdff2ad69d35582e776a775f541724d75baefd1a0eb8525bebe29dde07f884d6cbd68e4a264bab74f7d3774009f96c021b70fc71306328d1786674786069615e487865c7c838f449e2105e8d67d6e267c9e9c2277a0b19aef6e105e5ba3d8ecaf65cb9f73576a0464a80aadf61858d75b12a8b3597a69cba5e850d47e288364fbe4d388c"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000400)={0x3, 0x8}, 0x10) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 1m6.107296981s ago: executing program 1 (id=809): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x0, 0x1501, &(0x7f0000002a80)="$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") r1 = open(&(0x7f0000000080)='./bus\x00', 0x1cf542, 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0x96ef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000a40)={'#! ', './file0', [{0x20, '{{#'}, {0x20, '@'}, {0x20, '@'}]}, 0x13) rmdir(&(0x7f0000000040)='./file0\x00') 1m4.057938581s ago: executing program 1 (id=814): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendto$packet(r0, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x11, 0x6, @broadcast}, 0x14) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000004c0)='./file0/file0/file0\x00', 0x1000a05, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0, 0xc55, &(0x7f0000004100)="$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") r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000640)={0x9, {{0x2, 0x0, @multicast2}}, 0x11000000}, 0x90) chdir(&(0x7f0000000380)='./file0\x00') r3 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r3, &(0x7f0000000140)=""/102) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000d34144909e58017bc29dded23bf72397c40b27a0515b5d58f5116f182327536738a24662c0d74c27f1ad5f434298e9bf887235fab81f6083212320708c820e0129ad7b3a08d1b9709a0cba935cd9f3a01237ee9bd180da993da8b9785afa7804ca063f205aaba3cb9c7d3b9480b7cd9ee9b8d32815023465f795bbf78387886f9c9ed57eaa7b88c672509b46c705792a71b78a1bd34bd760a43a175480fe9f1d4987aa9222297ae54e9bf6dafe71240f3da1fd1cd223f9c5635577ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000300)=@arm64={0x5, 0xe9, 0x0, '\x00', 0xf}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xf}}, {@debug}, {@jqfmt_vfsold}, {}, {@nomblk_io_submit}, {@nouid32}]}, 0x1, 0x5f5, &(0x7f0000000bc0)="$eJzs3c9vVNUeAPDvnU5LS3mvhby893iLRxNjIFFaWsAQ4wK2hjT4I27cWGlBpEBDa7RoQklwY2LcGGPiyoX4XyiRLStduXDjypAQNSxNGHOn95b+uNPfndtwP59k6LnnzO05l+m358zpOXcCqKyB9J9axMGImEoi+pK5hbJ6ZIUD88979OdH59NHEo3Ga78nkWR5+fOT7GtvdnJ3RPz4QxIHOlbWOz174/LY5OTE9ex4aObK1ND07I2jl66MXZy4OHF15IWRUydPnDw1fGxT13WzIO/s7Xff7/tk9M1vvvorGf72l9EkTsfL2RMXX8d2GYiB5v9JsrKo99R2V1aSjuznZPFLnNRLbBAbkr9+nRHxn+iLjnjy4vXFx6+U2jhgRzWSiAZQUUmr+K+3uSFAm+XjgPy9/fL3wbVSRiVAOzw8Mz8BsDL+6/Nzg9HdnBvY+yiJxdM6SURsbmZuqX0Rcf/e6O0L90Zvxw7NwwHF5m5FxH+L4j9pxn9/dEd/M/5rS+I/HRecy76m+a9usv7lU8XiH9pnPv67V43/aBH/by2K/7c3Wf/Ak+Q7PUviv2ezlwQAAAAAAACVdfdMRDxf9Pf/2sL6nyhY/9MbEae3of6BZccr//5fe7AN1QAFHp6JeKlw/W8tX/3b35Gl/tFcD9CZXLg0OXEsIv4ZEUeic096PLxKHUc/PfBlq7KBbP1f/kjrv5+tBcza8aC+Z+k542MzY1u9biDi4a2I/xWu/00W+v+koP9Pfx9MrbOOA8/eOdeqbO34B3ZK4+uIw4X9/5O7ViSr359jqDkeGMpHBSv9/8PPvmtV/2bj3y0mYOvS/n/v6vHfnyy+X8/0xus4PltvtCrb7Pi/K3m9ecuZrizvg7GZmevDEV3J2Y40d0n+yMbbDE+jPB7yeEnj/8gzq8//FY3/eyJibtn3Tv5Yuqc49+/Hvb+2ao/xP5Qnjf/xDfX/G0+M3On/vlX96+v/TzT7+iNZjvk/mPdFHqZdS/MLwrFeVNTu9gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA06AWEfsiqQ0upGu1wcGI3oj4V+ytTV6bnnnuwrX3ro6nZc3P/6/ln/TbN3+c5J//37/oeGTZ8fGI2B8Rn3f0NI8Hz1+bHC/74gEAAAAAAAAAAAAAAAAAAGCX6G2x/z/1W0fZrQN2XL3sBgClKYj/n8poB9B++n+oLvEP1SX+obrEP1SX+IfqWnf8Nx43mna2OUAb6f+husQ/AAAAAAA8VfYfuvtzEhFzL/Y0H6murKyz1JYBO61WdgOA0rjFD1SXpT9QXd7jA8ka5d0tT1rrzNVMnd/CyQAAAAAAAAAAAABQOYcP2v8PVWX/P1SX/f9QXfn+/0MltwNoP+/xgVhjJ3/h/v81zwIAAAAAAAAAAAAAttP07I3LY5OTE9cl3tgdzWhnotFo3Ex/CrbyffKV4bvgctZMPG7M26Eq8qXwu+BKixL5Xr/1nVXO7yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGClvwMAAP//4ygs8Q==") fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 1m1.155995876s ago: executing program 1 (id=824): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(0x0, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000002030101dc03000e00000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000000000029e5d436ffbaed0d40d4e1dbdd962277861d7fcaeb19d00721115445ad61e3967f981150788bc84a3d029e58f12cfbee3763dcd745a70039ea285093db158420b03e07ce64c8aefb83ca294c62e57c3f1f4f871d541da1419736e841368f4891a8f61a89ad201d5467105c9bea7b"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x70, 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585611, &(0x7f0000000400)={0x0, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 56.985011578s ago: executing program 1 (id=836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x87002, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xd000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x63, &(0x7f0000003c00)) 56.5895897s ago: executing program 45 (id=836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x87002, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xd000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x63, &(0x7f0000003c00)) 28.996665371s ago: executing program 6 (id=930): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, 0x0, 0x0) 28.869000532s ago: executing program 6 (id=931): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) keyctl$session_to_parent(0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x4040001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000400)=@ethtool_stats}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$key(0xf, 0x3, 0x2) 27.527647989s ago: executing program 6 (id=943): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x40804800, &(0x7f0000000240)="87c662f6d0b1eb954de4c0df1ad5cdc3a125f4876a7223c7bb7723c412b304d49d83", 0x22, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/100, 0x64, 0x200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.855360132s ago: executing program 6 (id=945): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xf}}, {@debug}, {@jqfmt_vfsold}, {}, {@nomblk_io_submit}, {@nouid32}]}, 0x1, 0x5f5, &(0x7f0000000bc0)="$eJzs3c9vVNUeAPDvnU5LS3mvhby893iLRxNjIFFaWsAQ4wK2hjT4I27cWGlBpEBDa7RoQklwY2LcGGPiyoX4XyiRLStduXDjypAQNSxNGHOn95b+uNPfndtwP59k6LnnzO05l+m358zpOXcCqKyB9J9axMGImEoi+pK5hbJ6ZIUD88979OdH59NHEo3Ga78nkWR5+fOT7GtvdnJ3RPz4QxIHOlbWOz174/LY5OTE9ex4aObK1ND07I2jl66MXZy4OHF15IWRUydPnDw1fGxT13WzIO/s7Xff7/tk9M1vvvorGf72l9EkTsfL2RMXX8d2GYiB5v9JsrKo99R2V1aSjuznZPFLnNRLbBAbkr9+nRHxn+iLjnjy4vXFx6+U2jhgRzWSiAZQUUmr+K+3uSFAm+XjgPy9/fL3wbVSRiVAOzw8Mz8BsDL+6/Nzg9HdnBvY+yiJxdM6SURsbmZuqX0Rcf/e6O0L90Zvxw7NwwHF5m5FxH+L4j9pxn9/dEd/M/5rS+I/HRecy76m+a9usv7lU8XiH9pnPv67V43/aBH/by2K/7c3Wf/Ak+Q7PUviv2ezlwQAAAAAAACVdfdMRDxf9Pf/2sL6nyhY/9MbEae3of6BZccr//5fe7AN1QAFHp6JeKlw/W8tX/3b35Gl/tFcD9CZXLg0OXEsIv4ZEUeic096PLxKHUc/PfBlq7KBbP1f/kjrv5+tBcza8aC+Z+k542MzY1u9biDi4a2I/xWu/00W+v+koP9Pfx9MrbOOA8/eOdeqbO34B3ZK4+uIw4X9/5O7ViSr359jqDkeGMpHBSv9/8PPvmtV/2bj3y0mYOvS/n/v6vHfnyy+X8/0xus4PltvtCrb7Pi/K3m9ecuZrizvg7GZmevDEV3J2Y40d0n+yMbbDE+jPB7yeEnj/8gzq8//FY3/eyJibtn3Tv5Yuqc49+/Hvb+2ao/xP5Qnjf/xDfX/G0+M3On/vlX96+v/TzT7+iNZjvk/mPdFHqZdS/MLwrFeVNTu9gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA06AWEfsiqQ0upGu1wcGI3oj4V+ytTV6bnnnuwrX3ro6nZc3P/6/ln/TbN3+c5J//37/oeGTZ8fGI2B8Rn3f0NI8Hz1+bHC/74gEAAAAAAAAAAAAAAAAAAGCX6G2x/z/1W0fZrQN2XL3sBgClKYj/n8poB9B++n+oLvEP1SX+obrEP1SX+IfqWnf8Nx43mna2OUAb6f+husQ/AAAAAAA8VfYfuvtzEhFzL/Y0H6murKyz1JYBO61WdgOA0rjFD1SXpT9QXd7jA8ka5d0tT1rrzNVMnd/CyQAAAAAAAAAAAABQOYcP2v8PVWX/P1SX/f9QXfn+/0MltwNoP+/xgVhjJ3/h/v81zwIAAAAAAAAAAAAAttP07I3LY5OTE9cl3tgdzWhnotFo3Ex/CrbyffKV4bvgctZMPG7M26Eq8qXwu+BKixL5Xr/1nVXO7yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGClvwMAAP//4ygs8Q==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005b90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000300)=""/133, 0x85}], 0x2) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 25.046793922s ago: executing program 6 (id=953): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) keyctl$session_to_parent(0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x4040001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000400)=@ethtool_stats}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$key(0xf, 0x3, 0x2) 24.348275926s ago: executing program 6 (id=955): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xf}}, {@debug}, {@jqfmt_vfsold}, {}, {@nomblk_io_submit}, {@nouid32}]}, 0x1, 0x5f5, &(0x7f00000005c0)="$eJzs3c9vVNUeAPDvnU5LS3mvhby893iLRxNjIFFaWsAQ4wK2hjT4I27cWGlBpEBDa7RoQklwY2LcGGPiyoX4XyiRLStduXDjypAQNSxNGHOn95b+uNPfndtwP59k6LnnzO05l+m358zpOXcCqKyB9J9axMGImEoi+pK5hbJ6ZIUD88979OdH59NHEo3Ga78nkWR5+fOT7GtvdnJ3RPz4QxIHOlbWOz174/LY5OTE9ex4aObK1ND07I2jl66MXZy4OHF15IWRUydPnDw1fGxT13WzIO/s7Xff7/tk9M1vvvorGf72l9EkTsfL2RMXX8d2GYiB5v9JsrKo99R2V1aSjuznZPFLnNRLbBAbkr9+nRHxn+iLjnjy4vXFx6+U2jhgRzWSiAZQUUmr+K+3uSFAm+XjgPy9/fL3wbVSRiVAOzw8Mz8BsDL+6/Nzg9HdnBvY+yiJxdM6SURsbmZuqX0Rcf/e6O0L90Zvxw7NwwHF5m5FxH+L4j9pxn9/dEd/M/5rS+I/HRecy76m+a9usv7lU8XiH9pnPv67V43/aBH/by2K/7c3Wf/Ak+Q7PUviv2ezlwQAAAAAAACVdfdMRDxf9Pf/2sL6nyhY/9MbEae3of6BZccr//5fe7AN1QAFHp6JeKlw/W8tX/3b35Gl/tFcD9CZXLg0OXEsIv4ZEUeic096PLxKHUc/PfBlq7KBbP1f/kjrv5+tBcza8aC+Z+k542MzY1u9biDi4a2I/xWu/00W+v+koP9Pfx9MrbOOA8/eOdeqbO34B3ZK4+uIw4X9/5O7ViSr359jqDkeGMpHBSv9/8PPvmtV/2bj3y0mYOvS/n/v6vHfnyy+X8/0xus4PltvtCrb7Pi/K3m9ecuZrizvg7GZmevDEV3J2Y40d0n+yMbbDE+jPB7yeEnj/8gzq8//FY3/eyJibtn3Tv5Yuqc49+/Hvb+2ao/xP5Qnjf/xDfX/G0+M3On/vlX96+v/TzT7+iNZjvk/mPdFHqZdS/MLwrFeVNTu9gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA06AWEfsiqQ0upGu1wcGI3oj4V+ytTV6bnnnuwrX3ro6nZc3P/6/ln/TbN3+c5J//37/oeGTZ8fGI2B8Rn3f0NI8Hz1+bHC/74gEAAAAAAAAAAAAAAAAAAGCX6G2x/z/1W0fZrQN2XL3sBgClKYj/n8poB9B++n+oLvEP1SX+obrEP1SX+IfqWnf8Nx43mna2OUAb6f+husQ/AAAAAAA8VfYfuvtzEhFzL/Y0H6murKyz1JYBO61WdgOA0rjFD1SXpT9QXd7jA8ka5d0tT1rrzNVMnd/CyQAAAAAAAAAAAABQOYcP2v8PVWX/P1SX/f9QXfn+/0MltwNoP+/xgVhjJ3/h/v81zwIAAAAAAAAAAAAAttP07I3LY5OTE9cl3tgdzWhnotFo3Ex/CrbyffKV4bvgctZMPG7M26Eq8qXwu+BKixL5Xr/1nVXO7yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGClvwMAAP//4ygs8Q==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 24.048101086s ago: executing program 46 (id=955): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xf}}, {@debug}, {@jqfmt_vfsold}, {}, {@nomblk_io_submit}, {@nouid32}]}, 0x1, 0x5f5, &(0x7f00000005c0)="$eJzs3c9vVNUeAPDvnU5LS3mvhby893iLRxNjIFFaWsAQ4wK2hjT4I27cWGlBpEBDa7RoQklwY2LcGGPiyoX4XyiRLStduXDjypAQNSxNGHOn95b+uNPfndtwP59k6LnnzO05l+m358zpOXcCqKyB9J9axMGImEoi+pK5hbJ6ZIUD88979OdH59NHEo3Ga78nkWR5+fOT7GtvdnJ3RPz4QxIHOlbWOz174/LY5OTE9ex4aObK1ND07I2jl66MXZy4OHF15IWRUydPnDw1fGxT13WzIO/s7Xff7/tk9M1vvvorGf72l9EkTsfL2RMXX8d2GYiB5v9JsrKo99R2V1aSjuznZPFLnNRLbBAbkr9+nRHxn+iLjnjy4vXFx6+U2jhgRzWSiAZQUUmr+K+3uSFAm+XjgPy9/fL3wbVSRiVAOzw8Mz8BsDL+6/Nzg9HdnBvY+yiJxdM6SURsbmZuqX0Rcf/e6O0L90Zvxw7NwwHF5m5FxH+L4j9pxn9/dEd/M/5rS+I/HRecy76m+a9usv7lU8XiH9pnPv67V43/aBH/by2K/7c3Wf/Ak+Q7PUviv2ezlwQAAAAAAACVdfdMRDxf9Pf/2sL6nyhY/9MbEae3of6BZccr//5fe7AN1QAFHp6JeKlw/W8tX/3b35Gl/tFcD9CZXLg0OXEsIv4ZEUeic096PLxKHUc/PfBlq7KBbP1f/kjrv5+tBcza8aC+Z+k542MzY1u9biDi4a2I/xWu/00W+v+koP9Pfx9MrbOOA8/eOdeqbO34B3ZK4+uIw4X9/5O7ViSr359jqDkeGMpHBSv9/8PPvmtV/2bj3y0mYOvS/n/v6vHfnyy+X8/0xus4PltvtCrb7Pi/K3m9ecuZrizvg7GZmevDEV3J2Y40d0n+yMbbDE+jPB7yeEnj/8gzq8//FY3/eyJibtn3Tv5Yuqc49+/Hvb+2ao/xP5Qnjf/xDfX/G0+M3On/vlX96+v/TzT7+iNZjvk/mPdFHqZdS/MLwrFeVNTu9gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA06AWEfsiqQ0upGu1wcGI3oj4V+ytTV6bnnnuwrX3ro6nZc3P/6/ln/TbN3+c5J//37/oeGTZ8fGI2B8Rn3f0NI8Hz1+bHC/74gEAAAAAAAAAAAAAAAAAAGCX6G2x/z/1W0fZrQN2XL3sBgClKYj/n8poB9B++n+oLvEP1SX+obrEP1SX+IfqWnf8Nx43mna2OUAb6f+husQ/AAAAAAA8VfYfuvtzEhFzL/Y0H6murKyz1JYBO61WdgOA0rjFD1SXpT9QXd7jA8ka5d0tT1rrzNVMnd/CyQAAAAAAAAAAAABQOYcP2v8PVWX/P1SX/f9QXfn+/0MltwNoP+/xgVhjJ3/h/v81zwIAAAAAAAAAAAAAttP07I3LY5OTE9cl3tgdzWhnotFo3Ex/CrbyffKV4bvgctZMPG7M26Eq8qXwu+BKixL5Xr/1nVXO7yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGClvwMAAP//4ygs8Q==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 9.335861703s ago: executing program 7 (id=1043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 8.444659877s ago: executing program 2 (id=1051): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a3281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002001100007006000000002000020d3"]) 8.339258518s ago: executing program 7 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x24000000) 8.315656988s ago: executing program 2 (id=1053): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x10, 0x0, 0x0, @u64=0x100004}]}]}, 0x28}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000980}, 0x44020) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x40, 0x102) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x2808816, &(0x7f00000000c0)=ANY=[], 0x1, 0x2e5, &(0x7f0000000200)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x41, 0x41, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x6d}, @datasec={0x2, 0x3, 0x0, 0xf, 0x1, [{0x2003, 0x4, 0x101}, {0x2, 0x20000, 0x9}, {0x3, 0x6, 0x3}], '\x00'}]}}, &(0x7f0000000000)=""/140, 0x5e, 0x8c, 0x1, 0x0, 0x0, @void, @value}, 0x28) 8.114106449s ago: executing program 7 (id=1055): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000001c0)='!\x04%{@]/\x00', 0xffffffffffffffff) 7.057751294s ago: executing program 7 (id=1057): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) 7.057580154s ago: executing program 3 (id=1058): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000001c0)=0x8) 7.053348774s ago: executing program 0 (id=1059): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 6.905097955s ago: executing program 0 (id=1061): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x638a, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r2, 0x3}, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "621105b0ae0282d478b6b01305946c17afcea96765fbac1cd8aabe71d5522a79da5a1d57b5fc633203000000ab6e543ac6e500"}, 0x48}}, 0x0) 6.894907135s ago: executing program 7 (id=1062): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000040)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b8882800000f23c80f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb97b0b00000f323ed3db", 0x64}], 0x1, 0x0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.836770515s ago: executing program 3 (id=1063): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mount(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x10010, 0x0) 6.797533256s ago: executing program 0 (id=1065): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0xd}, {0x1, 0xa}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.644722686s ago: executing program 3 (id=1067): memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f", 0x32}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.595832907s ago: executing program 0 (id=1068): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@lazytime}, {@delalloc}, {@resuid}]}, 0x1, 0x3e0, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0x40086607, 0x1000000000000) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 6.574156756s ago: executing program 2 (id=1069): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x16c2, 0x2853, 0x2, 0x0, 0x7}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000001000)={[{@resuid}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@noblock_validity}], [{@flag='lazytime'}, {@obj_user}, {@obj_role={'obj_role', 0x3d, ',\x00\x00\x00'}}, {@flag='silent'}, {@smackfsroot={'smackfsroot', 0x3d, 'minixdf'}}, {@smackfsroot={'smackfsroot', 0x3d, 'max_dir_size_kb'}}, {@fsmagic={'fsmagic', 0x3d, 0x40}}]}, 0x3, 0x472, &(0x7f0000000640)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) add_key$user(0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x44011805}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0xf4, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0xe0, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:tetex_data_t:s0\x00'}, @NFTA_SECMARK_CTX={0x35, 0x1, 'system_u:object_r:systemd_passwd_agent_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x27, 0x1, 'system_u:object_r:fonts_cache_t:s0\x00'}, @NFTA_SECMARK_CTX={0x23, 0x1, 'u:r:untrusted_app:s0:c512,c768\x00'}, @NFTA_SECMARK_CTX={0x2d, 0x1, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x158}, 0x1, 0x0, 0x0, 0x40080c0}, 0x800) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl(r2, 0xfffff000, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000000a0601010000000000000000000000000500010007000000100008800c80078008001c40000000000900020073797a3200000000080009"], 0x40}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000232000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0xd8fd5000) 6.431582807s ago: executing program 7 (id=1080): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x67, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x31, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08a5"}]}}}}}}, 0x0) 4.113078879s ago: executing program 2 (id=1073): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9300a0006000500000d02"], 0xf) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 4.02368491s ago: executing program 4 (id=1076): socket$inet(0x2, 0x2, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x28100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.391529163s ago: executing program 0 (id=1077): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x2}) 1.792044201s ago: executing program 4 (id=1078): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000018c0)={&(0x7f0000000480)={0x1, 0x9af, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x1c, 0x0, 0x0, 0x0, "320d553ad0f9a658acb72498ae37dcfd39732a642f86b0e5ac12b8d1d386476fa3d5596b2d22487de03410de3badebb929ac424048a053d7084de8b344dba25b"}}, 0x80}}, 0x0) 1.616265162s ago: executing program 3 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x81, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000ae0000000000000718000000000000000000000000000000957ab1206d3d4b8a52e7556f08d928bfa8dce8717bde5a1c13a380dd7f24052af298864a65dc7da89a252d323d9812dbd6cb3ad336a3221091a554a8f35dc756637104759ea370c4c8f8f731f8252eb1375728ab892062f8bd6cb3e570e99e59374a172fd8acfe32baeb1acf08b30594dbeb7f7f5000d4ffeaa34590cce6f0c139e78d1e3c1879fad5939396c6612735844a50f7dc0ff5853c943152a8ac4f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{0x4, 0xb, 0x1, 0x1}, {0x46e1, 0x81, 0x8, 0xfffffff9}, {0x81, 0x7, 0x4, 0x8}, {0x4, 0x80, 0x9c}, {0x6, 0xf, 0x3, 0x5}, {0x5, 0xb3, 0x2, 0x9}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r1}, 0x10) r2 = socket(0x1d, 0x3, 0x1) getpid() syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x8}}}, 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getsockopt$nfc_llcp(r2, 0x65, 0x4, 0x0, 0x20001008) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, 0x0, 0x20000000}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@random="bcd2e8078a24", @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @random="9e52fe9307b4", @dev={0xfe, 0x80, '\x00', 0x44}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) 1.516139453s ago: executing program 4 (id=1081): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.257510534s ago: executing program 2 (id=1082): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) keyctl$session_to_parent(0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x4040001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000400)=@ethtool_stats}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$key(0xf, 0x3, 0x2) 1.208240544s ago: executing program 4 (id=1083): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120300", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b2d}}}}}}, 0x0) 1.065173455s ago: executing program 4 (id=1084): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 972.124685ms ago: executing program 3 (id=1085): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') renameat(r0, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') 720.639497ms ago: executing program 4 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x40) 633.762237ms ago: executing program 0 (id=1087): r0 = mq_open(&(0x7f0000000000)='](\x00', 0x40, 0x10a, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x3164}], 0x1, 0x0, 0x0, 0x0) 107.825259ms ago: executing program 47 (id=1087): r0 = mq_open(&(0x7f0000000000)='](\x00', 0x40, 0x10a, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x3164}], 0x1, 0x0, 0x0, 0x0) 2.095171ms ago: executing program 3 (id=1089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 0s ago: executing program 2 (id=1090): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@rand_addr=0x64010102, @empty, 0x1, "25b87d6416dfc8e74a08eea1d4c511cb27cc671c81639c938aabf09580e27e87", 0x2, 0x3, 0x25, 0xfff}, 0x3c) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 338.660328][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.670956][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.682829][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.743943][ T7835] netlink: 'syz.2.676': attribute type 1 has an invalid length. [ 338.846599][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.880614][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.967518][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.077705][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.216678][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.358243][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.471334][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.593013][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 339.617646][ T7845] loop2: detected capacity change from 0 to 4096 [ 339.629960][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.654418][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.687011][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.700193][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.779442][ T7441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.818856][ T7848] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.833890][ T7441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.842640][ T7441] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.885288][ T7441] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.056339][ T7852] loop7: detected capacity change from 0 to 4096 [ 340.131087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.142361][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.169313][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.188436][ T7852] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 340.287380][ T4757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.302932][ T4757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.355601][ T7852] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 340.383745][ T7827] chnl_net:caif_netlink_parms(): no params data found [ 340.412867][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.439703][ T5274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.464287][ T5274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.608684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.695342][ T4281] ntfs3: loop7: ntfs3_write_inode r=5 failed, -22. [ 340.732275][ T5567] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 340.743632][ T7875] loop6: detected capacity change from 0 to 64 [ 340.824437][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.866124][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.885084][ T7827] device bridge_slave_0 entered promiscuous mode [ 340.938659][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.014017][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.053430][ T7827] device bridge_slave_1 entered promiscuous mode [ 341.058118][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.682'. [ 341.104855][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.119801][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.152705][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.682'. [ 341.299600][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.352424][ T7620] device veth0_vlan entered promiscuous mode [ 341.400915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.433062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.464987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.490753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.624443][ T7561] Bluetooth: hci2: command 0x041b tx timeout [ 341.632098][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.669437][ T7620] device veth1_vlan entered promiscuous mode [ 342.022499][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 342.603298][ T26] audit: type=1326 audit(1732173423.846:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe803819 code=0x7ffc0000 [ 342.651880][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f593c00: rx timeout, send abort [ 342.691200][ T26] audit: type=1326 audit(1732173423.886:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0dbe803819 code=0x7ffc0000 [ 342.745316][ T7827] team0: Port device team_slave_0 added [ 342.837274][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 343.076063][ T26] audit: type=1326 audit(1732173423.886:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe803819 code=0x7ffc0000 [ 343.169898][ T7827] team0: Port device team_slave_1 added [ 343.537725][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f593c00: abort rx timeout. Force session deactivation [ 343.572325][ T7890] loop7: detected capacity change from 0 to 32768 [ 343.671604][ T7916] input: syz0 as /devices/virtual/input/input6 [ 343.673909][ T26] audit: type=1326 audit(1732173423.926:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0dbe803819 code=0x7ffc0000 [ 343.706015][ T7548] Bluetooth: hci2: command 0x040f tx timeout [ 343.715973][ T7620] device veth0_macvtap entered promiscuous mode [ 343.753244][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.767797][ T7890] JBD2: Ignoring recovery information on journal [ 343.804007][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 343.804432][ T26] audit: type=1326 audit(1732173423.926:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0dbe835905 code=0x7ffc0000 [ 343.886841][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.943677][ T7890] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 344.025362][ T7620] device veth1_macvtap entered promiscuous mode [ 344.061764][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.069944][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 344.086024][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.093008][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.214112][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.233856][ T26] audit: type=1326 audit(1732173424.286:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0dbe803819 code=0x7ffc0000 [ 344.274744][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.519663][ T26] audit: type=1326 audit(1732173424.856:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe803819 code=0x7ffc0000 [ 344.638376][ T5567] ocfs2: Unmounting device (7,7) on (node local) [ 344.807347][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.071815][ T26] audit: type=1326 audit(1732173424.856:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe803819 code=0x7ffc0000 [ 345.122080][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.153834][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.417306][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.448478][ T13] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.459366][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.468313][ T13] usb 3-1: Product: syz [ 345.472673][ T13] usb 3-1: Manufacturer: syz [ 345.477819][ T13] usb 3-1: SerialNumber: syz [ 345.530302][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.612008][ T7937] program syz.6.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.621776][ T7937] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 345.654441][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.789365][ T7548] Bluetooth: hci2: command 0x0419 tx timeout [ 345.947873][ T13] usb 3-1: can't set config #1, error -71 [ 346.343946][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.428136][ T13] usb 3-1: USB disconnect, device number 10 [ 346.457322][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.516070][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.555225][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.555254][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.555272][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.559455][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.559548][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.560264][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.589396][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.589422][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.589438][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.589456][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.589470][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.589487][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.589502][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.589518][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.602037][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.607536][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.608414][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.130957][ T7827] device hsr_slave_0 entered promiscuous mode [ 347.137330][ T7827] device hsr_slave_1 entered promiscuous mode [ 347.151883][ T7827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.152642][ T7827] Cannot create hsr debugfs directory [ 347.656365][ T7620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.656408][ T7620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.656440][ T7620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.656470][ T7620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.452065][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.452153][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.486484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.632349][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.632438][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.670116][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.812149][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d246c00: rx timeout, send abort [ 348.851156][ T7971] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 348.858554][ T7971] loop4: detected capacity change from 0 to 512 [ 348.982792][ T7971] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 349.024645][ T7971] EXT4-fs (loop4): orphan cleanup on readonly fs [ 349.057474][ T7971] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 349.057796][ T7971] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 349.057835][ T7971] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.648: Failed to acquire dquot type 1 [ 349.103320][ T7971] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.648: bg 0: block 40: padding at end of block bitmap is not set [ 349.103738][ T7971] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 349.125480][ T7971] EXT4-fs (loop4): 1 truncate cleaned up [ 349.126324][ T7971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 349.312212][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d246c00: abort rx timeout. Force session deactivation [ 349.761196][ T7827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.836679][ T7827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.891188][ T7827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.933078][ T7827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.049329][ T7993] loop4: detected capacity change from 0 to 2048 [ 350.195123][ T7975] loop2: detected capacity change from 0 to 32768 [ 350.218007][ T7993] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 350.223092][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.249428][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.270938][ T7993] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.285624][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.309491][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.371211][ T7975] JBD2: Ignoring recovery information on journal [ 350.433676][ T8009] loop7: detected capacity change from 0 to 512 [ 350.467330][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.549607][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.555167][ T7975] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 350.573154][ T8009] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 350.575943][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.587490][ T7561] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 350.593977][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.595485][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.635940][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.645469][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.652618][ T4756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.660539][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.673565][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.686703][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.706294][ T8009] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.750372][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.780177][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.835578][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.866048][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.879078][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.888519][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.900708][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.915279][ T7827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.927500][ T7561] usb 7-1: Using ep0 maxpacket: 8 [ 350.952103][ T7156] ocfs2: Unmounting device (7,2) on (node local) [ 350.993744][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.009708][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.021046][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.098360][ T7561] usb 7-1: descriptor type invalid, skip [ 351.104137][ T7561] usb 7-1: descriptor type invalid, skip [ 351.130428][ T7561] usb 7-1: descriptor type invalid, skip [ 351.193717][ T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.280266][ T3505] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 351.314652][ T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.361508][ T7561] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.372647][ T7561] usb 7-1: config 0 has no interfaces? [ 351.388952][ T8038] loop2: detected capacity change from 0 to 128 [ 351.622156][ T7561] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 351.673020][ T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.756143][ T7561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.978724][ T7561] usb 7-1: Product: syz [ 353.003511][ T3505] usb 5-1: config 1 has an invalid interface number: 254 but max is 2 [ 353.030009][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.059618][ T3505] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 353.116141][ T3505] usb 5-1: config 1 has no interface number 1 [ 353.150576][ T3505] usb 5-1: too many endpoints for config 1 interface 254 altsetting 0: 187, using maximum allowed: 30 [ 353.179933][ T7561] usb 7-1: Manufacturer: syz [ 353.185261][ T7561] usb 7-1: SerialNumber: syz [ 353.205019][ T7561] usb 7-1: config 0 descriptor?? [ 353.219953][ T3505] usb 5-1: config 1 interface 254 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 353.281384][ T3505] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.290968][ T8053] loop7: detected capacity change from 0 to 128 [ 353.303743][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.313224][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.337123][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.354222][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.410145][ T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.424317][ T4171] usb 7-1: USB disconnect, device number 4 [ 353.442170][ T8056] loop2: detected capacity change from 0 to 128 [ 353.490978][ T3505] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.500115][ T3505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.544148][ T3505] usb 5-1: Product: syz [ 353.560241][ T3505] usb 5-1: Manufacturer: syz [ 353.575109][ T3505] usb 5-1: SerialNumber: syz [ 353.643604][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.663435][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.698394][ T7827] device veth0_vlan entered promiscuous mode [ 353.740724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.769078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.773577][ T8060] loop7: detected capacity change from 0 to 4096 [ 353.788650][ T7827] device veth1_vlan entered promiscuous mode [ 353.815469][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.867153][ T8022] loop4: detected capacity change from 0 to 256 [ 353.933373][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.941085][ T8060] ntfs: (device loop7): parse_options(): Unrecognized mount option lo. [ 353.963739][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.005463][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.026581][ T7827] device veth0_macvtap entered promiscuous mode [ 354.075225][ T7827] device veth1_macvtap entered promiscuous mode [ 354.256630][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.336963][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.381221][ T8022] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 354.414260][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.430156][ T8075] loop7: detected capacity change from 0 to 256 [ 354.473369][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.515371][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.555124][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.627202][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.701027][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.719426][ T3505] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 354.746500][ T3505] hub 5-1:1.254: bad descriptor, ignoring hub [ 354.771930][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.814650][ T3505] hub: probe of 5-1:1.254 failed with error -5 [ 354.846609][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.879324][ T8075] exfat: Deprecated parameter 'namecase' [ 354.890528][ T3505] usb 5-1: USB disconnect, device number 14 [ 354.919536][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.974297][ T8075] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x6f11e9c0, utbl_chksum : 0xe619d30d) [ 354.992405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.002396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.051830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.128462][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.168249][ T4617] udevd[4617]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.320231][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.385081][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.460605][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.471303][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fd2d400: rx timeout, send abort [ 355.615545][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.703447][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.792487][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.810831][ T8093] loop4: detected capacity change from 0 to 512 [ 355.872026][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.925492][ T1107] Bluetooth: hci5: command 0x1003 tx timeout [ 355.932213][ T4184] Bluetooth: hci5: sending frame failed (-49) [ 355.989330][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.999315][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.009883][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fd2d400: abort rx timeout. Force session deactivation [ 356.240523][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.326304][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.371381][ T8093] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 356.459455][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.468300][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.494632][ T8093] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.571241][ T7827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.641515][ T7827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.760480][ T7827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.850488][ T7827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.430869][ T5274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.508636][ T5274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.596730][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.634299][ T1500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.698143][ T1500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.888405][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.968632][ T8108] loop4: detected capacity change from 0 to 4096 [ 358.136306][ T4255] Bluetooth: hci5: command 0x1001 tx timeout [ 358.142980][ T4184] Bluetooth: hci5: sending frame failed (-49) [ 358.158916][ T8108] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 358.770739][ T8108] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 359.171153][ T8108] ntfs3: loop4: Failed to load $Extend. [ 359.535063][ T9] device hsr_slave_0 left promiscuous mode [ 359.556416][ T9] device hsr_slave_1 left promiscuous mode [ 359.617356][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.705927][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.785354][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.857478][ T8128] loop1: detected capacity change from 0 to 4096 [ 359.903717][ T8128] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 359.913079][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.007524][ T9] device bridge_slave_1 left promiscuous mode [ 360.017126][ T8136] loop7: detected capacity change from 0 to 16 [ 360.027562][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.072864][ T8136] erofs: (device loop7): mounted with root inode @ nid 36. [ 360.094212][ T9] device bridge_slave_0 left promiscuous mode [ 360.168502][ T8128] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 360.175144][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.211990][ T8128] ntfs3: loop1: Failed to load $Extend. [ 360.282701][ T9] device veth1_macvtap left promiscuous mode [ 360.334907][ T9] device veth0_macvtap left promiscuous mode [ 360.357449][ T4213] Bluetooth: hci5: command 0x1009 tx timeout [ 360.405386][ T9] device veth1_vlan left promiscuous mode [ 360.433041][ T9] device veth0_vlan left promiscuous mode [ 361.416720][ T8151] loop1: detected capacity change from 0 to 47 [ 361.863255][ T4255] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 362.322980][ T4255] usb 2-1: config 1 interface 0 has no altsetting 0 [ 362.546915][ T4255] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 362.556001][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.578956][ T9] team0 (unregistering): Port device team_slave_1 removed [ 362.665879][ T4255] usb 2-1: Product: syz [ 362.670086][ T4255] usb 2-1: Manufacturer: syz [ 362.721692][ T4255] usb 2-1: SerialNumber: syz [ 362.794137][ T9] team0 (unregistering): Port device team_slave_0 removed [ 362.889134][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.012141][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.553713][ T4255] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 363.726350][ T9] bond0 (unregistering): Released all slaves [ 364.150561][ T26] audit: type=1326 audit(1732173444.492:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.7.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f8e7fb819 code=0x0 [ 364.265409][ T13] usb 2-1: USB disconnect, device number 5 [ 364.322548][ T8151] MINIX-fs: deleted inode referenced: 9 [ 364.374766][ T8148] usblp0: removed [ 364.396283][ T8164] binder: 8160:8164 ioctl c0306201 20000240 returned -14 [ 364.628493][ T8171] loop4: detected capacity change from 0 to 512 [ 364.693742][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fa22c00: rx timeout, send abort [ 364.826507][ T8171] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 364.826507][ T8171] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 364.826507][ T8171] [ 364.971865][ T8171] EXT4-fs (loop4): Unrecognized mount option "fscontext=sysadm_u" or missing value [ 365.144272][ T8182] FAULT_INJECTION: forcing a failure. [ 365.144272][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 365.227362][ T8182] CPU: 0 PID: 8182 Comm: syz.2.726 Not tainted 5.15.173-syzkaller #0 [ 365.235500][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 365.245569][ T8182] Call Trace: [ 365.248864][ T8182] [ 365.251805][ T8182] dump_stack_lvl+0x1e3/0x2d0 [ 365.256507][ T8182] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 365.262162][ T8182] ? panic+0x860/0x860 [ 365.266243][ T8182] ? validate_chain+0x112/0x5930 [ 365.271288][ T8182] ? arch_stack_walk+0xf3/0x140 [ 365.276164][ T8182] should_fail+0x38a/0x4c0 [ 365.280602][ T8182] should_failslab+0x5/0x20 [ 365.285119][ T8182] slab_pre_alloc_hook+0x53/0xc0 [ 365.290168][ T8182] ? vm_area_alloc+0x20/0xe0 [ 365.294811][ T8182] kmem_cache_alloc+0x3f/0x280 [ 365.299691][ T8182] vm_area_alloc+0x20/0xe0 [ 365.304132][ T8182] mmap_region+0xad4/0x1670 [ 365.308670][ T8182] ? file_mmap_ok+0x150/0x150 [ 365.313347][ T8182] ? cap_mmap_addr+0x15e/0x2d0 [ 365.318179][ T8182] ? bpf_lsm_mmap_addr+0x5/0x10 [ 365.323070][ T8182] ? get_unmapped_area+0x317/0x380 [ 365.328189][ T8182] do_mmap+0x78d/0xe00 [ 365.332262][ T8182] vm_mmap_pgoff+0x1ca/0x2d0 [ 365.336855][ T8182] ? account_locked_vm+0xe0/0xe0 [ 365.341800][ T8182] ? __lock_acquire+0x1ff0/0x1ff0 [ 365.346861][ T8182] ksys_mmap_pgoff+0x13e/0x780 [ 365.351641][ T8182] ? print_irqtrace_events+0x210/0x210 [ 365.354869][ T8183] loop1: detected capacity change from 0 to 2048 [ 365.357121][ T8182] ? mmap_region+0x1670/0x1670 [ 365.357289][ T8182] ? syscall_enter_from_user_mode+0x2e/0x240 [ 365.357317][ T8182] ? lockdep_hardirqs_on+0x94/0x130 [ 365.357348][ T8182] do_syscall_64+0x3b/0xb0 [ 365.357368][ T8182] ? clear_bhb_loop+0x15/0x70 [ 365.357390][ T8182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.357415][ T8182] RIP: 0033:0x7f0dbe803853 [ 365.357436][ T8182] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 365.357454][ T8182] RSP: 002b:00007f0dbc67ae18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 365.357478][ T8182] RAX: ffffffffffffffda RBX: 000000000000071c RCX: 00007f0dbe803853 [ 365.357494][ T8182] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 365.357508][ T8182] RBP: 0000000020000802 R08: 00000000ffffffff R09: 0000000000000000 [ 365.357522][ T8182] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 365.357536][ T8182] R13: 00007f0dbc67aef0 R14: 00007f0dbc67aeb0 R15: 00000000200007c0 [ 365.357567][ T8182] [ 365.471335][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fa22c00: abort rx timeout. Force session deactivation [ 365.518665][ T8187] loop7: detected capacity change from 0 to 256 [ 365.971201][ T8183] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.186615][ T8183] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.312345][ T8167] loop6: detected capacity change from 0 to 32768 [ 367.491909][ T8167] JBD2: Ignoring recovery information on journal [ 367.509450][ T8200] loop4: detected capacity change from 0 to 4096 [ 367.631141][ T8200] ntfs3: Unknown parameter 'windows_names' [ 367.688860][ T8167] JBD2: recovery failed [ 367.697886][ T8167] (syz.6.723,8167,0):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 367.739453][ T8167] (syz.6.723,8167,1):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5 [ 367.785864][ T8167] (syz.6.723,8167,1):ocfs2_check_volume:2485 ERROR: status = -5 [ 367.866084][ T8167] (syz.6.723,8167,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 367.875238][ T8200] loop4: detected capacity change from 0 to 256 [ 368.005103][ T8167] (syz.6.723,8167,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 368.923055][ T8233] loop4: detected capacity change from 0 to 4096 [ 369.048868][ T8243] program syz.2.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.058510][ T8243] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 369.329625][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806271ac00: rx timeout, send abort [ 369.338557][ T8233] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 369.871921][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806271ac00: abort rx timeout. Force session deactivation [ 369.903920][ T8233] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 369.915046][ T8215] loop1: detected capacity change from 0 to 32768 [ 369.937694][ T8233] ntfs3: loop4: Failed to load $Extend. [ 370.151478][ T8215] JBD2: Ignoring recovery information on journal [ 371.042852][ T8215] JBD2: recovery failed [ 371.124746][ T8215] (syz.1.732,8215,0):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 371.179409][ T8215] (syz.1.732,8215,0):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5 [ 371.211738][ T8215] (syz.1.732,8215,0):ocfs2_check_volume:2485 ERROR: status = -5 [ 371.258731][ T8215] (syz.1.732,8215,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 371.538403][ T8215] (syz.1.732,8215,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 372.239394][ T8269] loop4: detected capacity change from 0 to 1024 [ 372.412904][ T8269] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.742: Invalid block bitmap block 0 in block_group 0 [ 372.444127][ T8269] Quota error (device loop4): write_blk: dquota write failed [ 372.454030][ T8269] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 372.464444][ T8269] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.742: Failed to acquire dquot type 0 [ 372.496091][ T8269] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.742: Freeing blocks not in datazone - block = 0, count = 4096 [ 372.517937][ T8269] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.742: Invalid inode bitmap blk 0 in block_group 0 [ 372.536771][ T8269] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 372.546058][ T8269] EXT4-fs (loop4): 1 orphan inode deleted [ 372.551904][ T8269] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 372.578252][ T4281] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 372.607205][ T4281] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:8: Failed to release dquot type 0 [ 372.641961][ T8284] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.742: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 372.744041][ T8289] FAULT_INJECTION: forcing a failure. [ 372.744041][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.774559][ T8269] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.742: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 372.785823][ T8289] CPU: 0 PID: 8289 Comm: syz.1.744 Not tainted 5.15.173-syzkaller #0 [ 372.801094][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 372.811165][ T8289] Call Trace: [ 372.814464][ T8289] [ 372.817401][ T8289] dump_stack_lvl+0x1e3/0x2d0 [ 372.822110][ T8289] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 372.827777][ T8289] ? panic+0x860/0x860 [ 372.832061][ T8289] ? validate_chain+0x112/0x5930 [ 372.837034][ T8289] ? validate_chain+0x112/0x5930 [ 372.842181][ T8289] should_fail+0x38a/0x4c0 [ 372.846619][ T8289] _copy_from_user+0x2d/0x170 [ 372.851310][ T8289] __copy_msghdr_from_user+0xaf/0x7c0 [ 372.856732][ T8289] ? __ia32_sys_shutdown+0x60/0x60 [ 372.861890][ T8289] ___sys_sendmsg+0x166/0x2e0 [ 372.866718][ T8289] ? __sys_sendmsg+0x260/0x260 [ 372.871551][ T8289] ? __fdget+0x191/0x220 [ 372.875822][ T8289] __se_sys_sendmsg+0x19a/0x260 [ 372.880700][ T8289] ? __x64_sys_sendmsg+0x80/0x80 [ 372.885671][ T8289] ? syscall_enter_from_user_mode+0x2e/0x240 [ 372.891689][ T8289] ? lockdep_hardirqs_on+0x94/0x130 [ 372.896924][ T8289] ? syscall_enter_from_user_mode+0x2e/0x240 [ 372.902944][ T8289] do_syscall_64+0x3b/0xb0 [ 372.907392][ T8289] ? clear_bhb_loop+0x15/0x70 [ 372.912220][ T8289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.918148][ T8289] RIP: 0033:0x7f45d27fa819 [ 372.923021][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.942646][ T8289] RSP: 002b:00007f45d0672038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.951181][ T8289] RAX: ffffffffffffffda RBX: 00007f45d29b1fa0 RCX: 00007f45d27fa819 [ 372.959169][ T8289] RDX: 0000000000004084 RSI: 0000000020000100 RDI: 0000000000000003 [ 372.967151][ T8289] RBP: 00007f45d0672090 R08: 0000000000000000 R09: 0000000000000000 [ 372.975140][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.983127][ T8289] R13: 0000000000000000 R14: 00007f45d29b1fa0 R15: 00007fff26076798 [ 372.991222][ T8289] [ 373.162452][ T1107] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 373.452230][ T1107] usb 8-1: Using ep0 maxpacket: 8 [ 373.718875][ C1] vcan0: j1939_tp_txtimer: 0xffff88805b31c000: tx aborted with unknown reason: -2 [ 373.761176][ T1107] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 373.974488][ T1107] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 374.029840][ T1107] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.172296][ T1107] usb 8-1: Product: syz [ 374.225110][ T1107] usb 8-1: Manufacturer: syz [ 374.257424][ T1107] usb 8-1: SerialNumber: syz [ 375.377328][ T1107] usb 8-1: config 0 descriptor?? [ 375.420853][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b31c000: abort rx timeout. Force session deactivation [ 375.545754][ T1107] streamzap 8-1:0.0: streamzap_probe: endpoint doesn't match input device 0204 [ 375.573661][ T8326] loop4: detected capacity change from 0 to 512 [ 375.788283][ T1107] usb 8-1: USB disconnect, device number 6 [ 375.953254][ T8326] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 376.306903][ T8326] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.767662][ T8339] loop1: detected capacity change from 0 to 256 [ 376.798965][ T8341] loop7: detected capacity change from 0 to 512 [ 376.830818][ T8339] exfat: Deprecated parameter 'utf8' [ 376.841289][ T8339] exfat: Deprecated parameter 'utf8' [ 376.846725][ T8339] exfat: Unknown parameter 'zero_size_dir' [ 376.919583][ T8341] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 376.973333][ T8341] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.209444][ T8352] loop4: detected capacity change from 0 to 512 [ 377.267268][ T8352] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 377.321013][ T8352] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 377.369330][ T8352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 377.400261][ T8352] System zones: 1-12 [ 377.419194][ T8352] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.759: corrupted in-inode xattr [ 377.485570][ T8360] loop1: detected capacity change from 0 to 2048 [ 377.495936][ T8352] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.759: couldn't read orphan inode 15 (err -117) [ 377.516344][ T8352] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 377.608390][ T8366] fuse: Unknown parameter 'grou00000000000000000000' [ 377.667677][ T26] audit: type=1326 audit(1732173457.142:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45d27fa819 code=0x0 [ 377.848772][ T8373] loop2: detected capacity change from 0 to 2048 [ 377.924621][ T8373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.120048][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 378.129194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 378.138899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 378.158371][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!! [ 378.168589][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!! [ 378.182929][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 378.728525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #248!!! [ 379.129614][ T8386] ubi0: attaching mtd0 [ 379.137300][ T8386] ubi0: scanning is finished [ 380.236092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 380.242418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 380.243038][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 380.349259][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061288400: rx timeout, send abort [ 380.352924][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.352967][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.497048][ T8386] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 380.626941][ T8365] loop6: detected capacity change from 0 to 32768 [ 380.663936][ T8399] loop7: detected capacity change from 0 to 512 [ 380.796196][ T8399] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 380.883302][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061288400: abort rx timeout. Force session deactivation [ 380.933423][ T8399] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.823558][ T8439] fuse: Unknown parameter 'grou00000000000000000000' [ 381.882441][ T8408] loop6: detected capacity change from 0 to 32768 [ 382.029460][ T8408] JBD2: Ignoring recovery information on journal [ 382.252197][ T8408] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 382.339215][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.770'. [ 382.482673][ T8449] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 382.518024][ T8449] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 382.554222][ T8449] OCFS2: File system is now read-only. [ 382.578277][ T8419] loop2: detected capacity change from 0 to 32768 [ 382.579133][ T8449] (syz.6.770,8449,1):ocfs2_find_entry_id:407 ERROR: status = -30 [ 382.652269][ T8448] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 382.802047][ T8455] loop7: detected capacity change from 0 to 16 [ 382.897682][ T8448] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 383.003290][ T8448] (syz.6.770,8448,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 383.524724][ T8455] erofs: Unknown parameter 'BB1414AC:0000 04 00000002:00000000 01:000005A1 00000025 0 erofs' [ 383.544406][ T7441] ocfs2: Unmounting device (7,6) on (node local) [ 383.633826][ T8454] input: syz0 as /devices/virtual/input/input7 [ 383.649229][ T8419] JBD2: Ignoring recovery information on journal [ 383.807879][ T8419] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 383.934908][ T8468] loop7: detected capacity change from 0 to 64 [ 383.965176][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880187f5000: rx timeout, send abort [ 384.068737][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 384.252123][ T8480] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 384.283486][ T8471] loop6: detected capacity change from 0 to 4096 [ 384.351280][ T8480] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 384.377379][ T8480] OCFS2: File system is now read-only. [ 384.385289][ T8480] (syz.2.773,8480,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 384.426546][ T8471] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 384.435323][ T8474] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 384.486156][ T8471] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 384.507466][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880187f5000: abort rx timeout. Force session deactivation [ 384.528718][ T8474] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 384.540483][ T8471] ntfs3: loop6: Failed to load $Extend. [ 384.631239][ T8474] (syz.2.773,8474,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 384.832296][ T7156] ocfs2: Unmounting device (7,2) on (node local) [ 384.885739][ T8494] loop4: detected capacity change from 0 to 512 [ 385.033554][ T8494] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 385.070852][ T8494] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.436813][ T8498] 9pnet: Insufficient options for proto=fd [ 385.452286][ T8512] overlayfs: unrecognized mount option "posixacl" or missing value [ 385.718239][ T8517] loop2: detected capacity change from 0 to 4096 [ 385.785980][ T8523] fuse: Unknown parameter 'grou00000000000000000000' [ 386.000007][ T8524] loop4: detected capacity change from 0 to 4096 [ 386.038532][ T8517] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 386.122466][ T8517] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 386.179138][ T8537] loop6: detected capacity change from 0 to 512 [ 386.185639][ T8524] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 386.190939][ T8517] ntfs3: loop2: Failed to load $Extend. [ 386.205347][ T8486] loop7: detected capacity change from 0 to 32768 [ 386.304139][ T8524] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 386.314565][ T8486] JBD2: Ignoring recovery information on journal [ 386.423242][ T8524] ntfs3: loop4: Failed to load $Extend. [ 386.515034][ T8537] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 386.630120][ T8537] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.723133][ T8486] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 387.095345][ T5567] ocfs2: Unmounting device (7,7) on (node local) [ 387.116145][ T8558] loop2: detected capacity change from 0 to 2048 [ 387.396622][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058879000: rx timeout, send abort [ 387.406296][ T8558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.938915][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058879000: abort rx timeout. Force session deactivation [ 388.256617][ T8558] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 388.734576][ T8591] loop6: detected capacity change from 0 to 512 [ 388.787305][ T8583] loop1: detected capacity change from 0 to 2048 [ 388.834259][ T8591] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 388.968962][ T8591] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.305110][ T8626] netlink: 5 bytes leftover after parsing attributes in process `syz.2.808'. [ 390.665146][ T8622] loop6: detected capacity change from 0 to 4096 [ 391.114736][ T8642] loop1: detected capacity change from 0 to 256 [ 391.126051][ T8622] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 391.338558][ T8622] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 391.453212][ T8648] ubi0: attaching mtd0 [ 391.459438][ T8648] ubi0: scanning is finished [ 391.719183][ T8622] ntfs3: loop6: Failed to load $Extend. [ 392.160369][ T8642] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 392.175648][ T8648] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 392.877846][ T8668] loop7: detected capacity change from 0 to 512 [ 392.947097][ T8664] loop1: detected capacity change from 0 to 2048 [ 393.031653][ T8679] loop6: detected capacity change from 0 to 16 [ 393.071921][ T8668] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 393.152159][ T8668] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.239736][ T8679] erofs: (device loop6): mounted with root inode @ nid 36. [ 393.301709][ T8679] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 393.361347][ T8679] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 393.472022][ T8664] loop1: detected capacity change from 0 to 1024 [ 393.613091][ T8664] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 393.863683][ T8664] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 394.494176][ T8664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814e01c, mo2=0003] [ 394.618729][ T8664] System zones: 0-1, 3-36 [ 394.736419][ T8664] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,init_itable=0x000000000000000f,debug,jqfmt=vfsold,bsddf,nomblk_io_submit,nouid32,,errors=continue. Quota mode: writeback. [ 395.377284][ T8670] loop4: detected capacity change from 0 to 40427 [ 395.454251][ T8670] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 395.462047][ T8670] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 395.556759][ T8670] F2FS-fs (loop4): Found nat_bits in checkpoint [ 395.757136][ T8670] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 395.790975][ T8670] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 395.995226][ T8699] loop2: detected capacity change from 0 to 32768 [ 396.182126][ T8699] XFS (loop2): Mounting V5 Filesystem [ 396.356712][ T8699] XFS (loop2): Ending clean mount [ 396.407991][ T8699] ip6t_rpfilter: unknown options [ 397.079944][ T8772] loop6: detected capacity change from 0 to 256 [ 397.089859][ T4255] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 397.299977][ T4255] usb 3-1: device descriptor read/64, error -71 [ 397.598752][ T4255] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 397.974316][ T8772] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 397.985704][ T4255] usb 3-1: device descriptor read/64, error -71 [ 398.072556][ T7156] XFS (loop2): Unmounting Filesystem [ 398.112502][ T4255] usb usb3-port1: attempt power cycle [ 398.120448][ T8778] fuse: Unknown parameter 'groЕx²00000000000000000000' [ 399.141321][ T8795] loop6: detected capacity change from 0 to 128 [ 399.443104][ T8795] affs: No valid root block on device loop6 [ 399.629748][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.806538][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.834374][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'. [ 399.924742][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.950016][ T8817] loop4: detected capacity change from 0 to 64 [ 400.038241][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.148453][ T8822] loop2: detected capacity change from 0 to 2048 [ 400.228102][ T8815] loop6: detected capacity change from 0 to 4096 [ 400.235822][ T8822] UDF-fs: bad mount option "gid=00000000000000060929" or missing value [ 400.435437][ T8815] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 400.491552][ T8815] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 400.584765][ T8815] ntfs3: loop6: Failed to load $Extend. [ 401.965593][ T8856] program syz.4.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.975474][ T8856] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 401.984828][ T8856] ubi0: attaching mtd0 [ 401.991134][ T8856] ubi0: scanning is finished [ 402.291331][ T8856] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 402.456143][ T8832] chnl_net:caif_netlink_parms(): no params data found [ 402.574904][ T3505] Bluetooth: hci2: command 0x0409 tx timeout [ 402.594326][ T8866] loop4: detected capacity change from 0 to 47 [ 402.968682][ T8825] loop7: detected capacity change from 0 to 32768 [ 402.985603][ T8873] loop6: detected capacity change from 0 to 4096 [ 403.063389][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.086823][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.138460][ T8832] device bridge_slave_0 entered promiscuous mode [ 403.172609][ T8873] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 403.277033][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.297486][ T8825] XFS (loop7): Mounting V5 Filesystem [ 403.328470][ T8873] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 403.335881][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.388452][ T8832] device bridge_slave_1 entered promiscuous mode [ 403.391082][ T8891] loop4: detected capacity change from 0 to 4096 [ 403.431382][ T8825] XFS (loop7): Ending clean mount [ 403.439758][ T8832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.487400][ T8832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.507643][ T5567] XFS (loop7): Unmounting Filesystem [ 403.658705][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.851'. [ 403.795704][ T8832] team0: Port device team_slave_0 added [ 403.829281][ T8832] team0: Port device team_slave_1 added [ 403.911794][ T4724] ntfs3: loop6: ntfs3_write_inode r=5 failed, -22. [ 403.923126][ T7441] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 403.963089][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.019519][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.052776][ T8832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.117346][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.141909][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.193863][ T8832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.542536][ T4248] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 404.850571][ T4248] usb 5-1: Using ep0 maxpacket: 8 [ 405.687950][ T8921] program syz.6.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.698176][ T8921] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 405.707734][ T8921] ubi0: attaching mtd0 [ 405.714600][ T8921] ubi0: scanning is finished [ 405.780133][ T4248] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.937276][ T4248] usb 5-1: config 1 interface 0 has no altsetting 0 [ 406.088686][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 406.098889][ T8921] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 406.103277][ T8832] device hsr_slave_0 entered promiscuous mode [ 406.168309][ T4248] usb 5-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.40 [ 406.188424][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.231572][ T4248] usb 5-1: Product: syz [ 406.235878][ T4248] usb 5-1: Manufacturer: syz [ 406.248708][ T4248] usb 5-1: SerialNumber: syz [ 406.288038][ T4248] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 406.309692][ T4248] usb 5-1: no configuration chosen from 1 choice [ 406.331749][ T8832] device hsr_slave_1 entered promiscuous mode [ 406.346286][ T8832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.354029][ T8832] Cannot create hsr debugfs directory [ 406.360308][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.7.852'. [ 406.374405][ T8925] loop6: detected capacity change from 0 to 4096 [ 406.385593][ T8928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.858'. [ 406.401390][ T8929] loop2: detected capacity change from 0 to 8 [ 406.410390][ T8928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.858'. [ 406.419331][ T8928] netlink: 17 bytes leftover after parsing attributes in process `syz.2.858'. [ 406.480597][ T8925] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 406.512034][ T8929] SQUASHFS error: xz decompression failed, data probably corrupt [ 406.538129][ T8925] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 406.548251][ T8929] SQUASHFS error: Failed to read block 0x108: -5 [ 406.557053][ T8925] ntfs3: loop6: Failed to load $Extend. [ 406.562804][ T8929] SQUASHFS error: Unable to read metadata cache entry [106] [ 406.571243][ T8929] SQUASHFS error: Unable to read inode 0x11f [ 406.877243][ T8928] loop2: detected capacity change from 0 to 256 [ 406.982085][ T8928] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 407.211833][ T4255] usb 5-1: USB disconnect, device number 15 [ 407.354960][ T155] device hsr_slave_0 left promiscuous mode [ 407.365893][ T155] device hsr_slave_1 left promiscuous mode [ 407.396850][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.418853][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.434498][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.443412][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.452066][ T155] device bridge_slave_1 left promiscuous mode [ 407.460671][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.471220][ T155] device bridge_slave_0 left promiscuous mode [ 407.477462][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.491550][ T155] device veth1_macvtap left promiscuous mode [ 407.497636][ T155] device veth0_macvtap left promiscuous mode [ 407.504321][ T155] device veth1_vlan left promiscuous mode [ 407.510289][ T155] device veth0_vlan left promiscuous mode [ 407.743993][ T155] team0 (unregistering): Port device team_slave_1 removed [ 407.760020][ T155] team0 (unregistering): Port device team_slave_0 removed [ 407.776502][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.792797][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.867888][ T155] bond0 (unregistering): Released all slaves [ 408.028876][ T8832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 408.043426][ T8832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 408.052948][ T8832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 408.063787][ T8832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.152333][ T8832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.190973][ T8832] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.213014][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.221230][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.232236][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.241296][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.251250][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.258377][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.266822][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.290167][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 408.307787][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.316706][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.325769][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.332892][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.341129][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.350208][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.359785][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.371198][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.380423][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.389645][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.398624][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.409144][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.439653][ T8832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.460097][ T8832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.468603][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.483911][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.497050][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.689150][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.706466][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.737296][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.795826][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.805852][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.847104][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.855429][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.895629][ T8832] device veth0_vlan entered promiscuous mode [ 408.909626][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.931100][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.957465][ T8832] device veth1_vlan entered promiscuous mode [ 408.996157][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.008009][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 409.024587][ T8832] device veth0_macvtap entered promiscuous mode [ 409.033666][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.060224][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.068850][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.088147][ T8832] device veth1_macvtap entered promiscuous mode [ 409.129475][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.142968][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.153409][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.164280][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.176981][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.187866][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.198033][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.209103][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.222287][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.246841][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.260082][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.270402][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.281788][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.293352][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.305013][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.324092][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.334633][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.346285][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.355521][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.367683][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.376824][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.386000][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.395266][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.411535][ T8832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.420288][ T8832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.436308][ T8832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.451008][ T8832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.564446][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.592828][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.604909][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.606416][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.613243][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.647757][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.152128][ T8969] loop3: detected capacity change from 0 to 32768 [ 410.236832][ T8969] JBD2: Ignoring recovery information on journal [ 410.301435][ T8969] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 410.358995][ T8832] ocfs2: Unmounting device (7,3) on (node local) [ 410.522525][ T3505] Bluetooth: hci2: command 0x0419 tx timeout [ 412.068794][ T9104] loop4: detected capacity change from 0 to 256 [ 412.102762][ T9100] loop7: detected capacity change from 0 to 256 [ 412.104095][ T9102] loop3: detected capacity change from 0 to 256 [ 412.155765][ T9100] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 412.207388][ T9100] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 412.258346][ T9107] loop6: detected capacity change from 0 to 4096 [ 412.273847][ T9100] exFAT-fs (loop7): Filesystem has been set read-only [ 412.291877][ T9100] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 412.335285][ T9107] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 412.360872][ T3505] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 412.446114][ T9107] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 412.547963][ T9124] device syz_tun entered promiscuous mode [ 412.579739][ T9124] device batadv_slave_0 entered promiscuous mode [ 412.610402][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 412.623357][ T9107] ipt_CLUSTERIP: Please specify destination IP [ 412.679386][ T3505] usb 4-1: Using ep0 maxpacket: 16 [ 412.869950][ T9142] FAULT_INJECTION: forcing a failure. [ 412.869950][ T9142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.883391][ T9142] CPU: 1 PID: 9142 Comm: syz.4.871 Not tainted 5.15.173-syzkaller #0 [ 412.891482][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 412.901556][ T9142] Call Trace: [ 412.904858][ T9142] [ 412.907797][ T9142] dump_stack_lvl+0x1e3/0x2d0 [ 412.912492][ T9142] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 412.918132][ T9142] ? panic+0x860/0x860 [ 412.922216][ T9142] ? __lock_acquire+0x1295/0x1ff0 [ 412.927263][ T9142] should_fail+0x38a/0x4c0 [ 412.931704][ T9142] _copy_from_user+0x2d/0x170 [ 412.936402][ T9142] get_timespec64+0x93/0x270 [ 412.941011][ T9142] ? timespec64_add_safe+0x220/0x220 [ 412.946342][ T9142] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 412.952340][ T9142] ? print_irqtrace_events+0x210/0x210 [ 412.957816][ T9142] __se_sys_pselect6+0x18a/0x470 [ 412.962765][ T9142] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 412.968428][ T9142] ? __x64_sys_pselect6+0xf0/0xf0 [ 412.973463][ T9142] ? trace_hardirqs_on+0x30/0x80 [ 412.978414][ T9142] ? syscall_enter_from_user_mode+0x37/0x240 [ 412.984413][ T9142] ? __x64_sys_pselect6+0x1d/0xf0 [ 412.989489][ T9142] do_syscall_64+0x3b/0xb0 [ 412.993922][ T9142] ? clear_bhb_loop+0x15/0x70 [ 412.998612][ T9142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 413.004521][ T9142] RIP: 0033:0x7f5984e01819 [ 413.008960][ T9142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.028713][ T9142] RSP: 002b:00007f5982c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 413.037160][ T9142] RAX: ffffffffffffffda RBX: 00007f5984fb9080 RCX: 00007f5984e01819 [ 413.045300][ T9142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.053296][ T9142] RBP: 00007f5982c58090 R08: 0000000020000040 R09: 0000000000000000 [ 413.061286][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.069291][ T9142] R13: 0000000000000000 R14: 00007f5984fb9080 R15: 00007ffe4209cf58 [ 413.077299][ T9142] [ 413.961369][ T3505] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 414.016990][ T3505] usb 4-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 414.100887][ T3505] usb 4-1: Product: syz [ 414.164485][ T3505] usb 4-1: Manufacturer: syz [ 414.169167][ T3505] usb 4-1: SerialNumber: syz [ 414.237830][ T3505] usb 4-1: config 0 descriptor?? [ 414.374210][ T3505] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 414.718043][ T3505] usb 4-1: Detected FT-X [ 414.787298][ T9158] loop4: detected capacity change from 0 to 4096 [ 414.850090][ T3505] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 415.223299][ T3505] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 415.233004][ T3505] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.339095][ T3505] usb 4-1: USB disconnect, device number 12 [ 415.357719][ T9181] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 415.372096][ T3505] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 415.416163][ T9181] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 415.454216][ T3505] ftdi_sio 4-1:0.0: device disconnected [ 415.748157][ T9144] loop7: detected capacity change from 0 to 32768 [ 415.990455][ T9158] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 416.021008][ T9144] JBD2: Ignoring recovery information on journal [ 416.172038][ T9144] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 416.256431][ T9158] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 416.279904][ T9158] ntfs3: loop4: Failed to load $Extend. [ 416.395400][ T5567] ocfs2: Unmounting device (7,7) on (node local) [ 416.905955][ T9210] FAULT_INJECTION: forcing a failure. [ 416.905955][ T9210] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 417.014993][ T9210] CPU: 1 PID: 9210 Comm: syz.7.880 Not tainted 5.15.173-syzkaller #0 [ 417.023286][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 417.033368][ T9210] Call Trace: [ 417.036659][ T9210] [ 417.039598][ T9210] dump_stack_lvl+0x1e3/0x2d0 [ 417.044305][ T9210] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 417.050050][ T9210] ? panic+0x860/0x860 [ 417.054150][ T9210] ? perf_event_mmap+0x3e4/0x1c70 [ 417.059251][ T9210] should_fail+0x38a/0x4c0 [ 417.063705][ T9210] prepare_alloc_pages+0x1db/0x5b0 [ 417.068935][ T9210] __alloc_pages+0x14f/0x700 [ 417.073551][ T9210] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 417.078870][ T9210] ? alloc_pages+0x458/0x570 [ 417.083484][ T9210] pte_alloc_one+0x86/0x360 [ 417.088051][ T9210] ? rcu_lock_release+0x20/0x20 [ 417.092946][ T9210] __pte_alloc+0x75/0x210 [ 417.097299][ T9210] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 417.103477][ T9210] ? free_pgtables+0x2a0/0x2a0 [ 417.108276][ T9210] handle_mm_fault+0x4d9a/0x5960 [ 417.113266][ T9210] ? numa_migrate_prep+0x1a0/0x1a0 [ 417.118428][ T9210] ? vmacache_find+0x4f9/0x590 [ 417.123209][ T9210] ? vmacache_update+0x9f/0xf0 [ 417.127998][ T9210] exc_page_fault+0x271/0x700 [ 417.132703][ T9210] asm_exc_page_fault+0x22/0x30 [ 417.137575][ T9210] RIP: 0033:0x7f7f8e6be8f6 [ 417.142009][ T9210] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 417.157957][ T9216] loop3: detected capacity change from 0 to 47 [ 417.161630][ T9210] RSP: 002b:00007f7f8c6724a0 EFLAGS: 00010246 [ 417.173897][ T9210] RAX: 0000000000000001 RBX: 00007f7f8c672540 RCX: 0000000000000101 [ 417.181892][ T9210] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f7f8c6725e0 [ 417.189883][ T9210] RBP: 0000000000000102 R08: 00007f7f84253000 R09: 0000000000000000 [ 417.197871][ T9210] R10: 0000000000000000 R11: 00007f7f8c672550 R12: 0000000000000001 [ 417.205859][ T9210] R13: 00007f7f8e882fa0 R14: 0000000000000000 R15: 00007f7f8c6725e0 [ 417.213866][ T9210] [ 417.232396][ T9218] loop2: detected capacity change from 0 to 256 [ 417.239333][ T9210] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 417.250325][ T9210] loop7: detected capacity change from 0 to 64 [ 417.273059][ T9215] MINIX-fs: deleted inode referenced: 9 [ 417.411046][ T4248] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 417.622839][ T9232] FAULT_INJECTION: forcing a failure. [ 417.622839][ T9232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.672567][ T9237] loop3: detected capacity change from 0 to 512 [ 417.686888][ T9232] CPU: 1 PID: 9232 Comm: syz.7.887 Not tainted 5.15.173-syzkaller #0 [ 417.694996][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 417.705074][ T9232] Call Trace: [ 417.708372][ T9232] [ 417.711314][ T9232] dump_stack_lvl+0x1e3/0x2d0 [ 417.716012][ T9232] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 417.721664][ T9232] ? panic+0x860/0x860 [ 417.725771][ T9232] ? __lock_acquire+0x1ff0/0x1ff0 [ 417.730940][ T9232] should_fail+0x38a/0x4c0 [ 417.735390][ T9232] _copy_from_iter+0x243/0xe90 [ 417.740190][ T9232] ? copy_mc_pipe_to_iter+0x760/0x760 [ 417.745637][ T9232] ? __virt_addr_valid+0x3bb/0x460 [ 417.750772][ T9232] ? 0xffffffff81000000 [ 417.752745][ T7560] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 417.754935][ T9232] ? __check_object_size+0x300/0x410 [ 417.767757][ T9232] netlink_sendmsg+0x800/0xd60 [ 417.772544][ T9232] ? netlink_getsockopt+0x5b0/0x5b0 [ 417.777758][ T9232] ? aa_sock_msg_perm+0x91/0x150 [ 417.782712][ T9232] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 417.788044][ T9232] ? security_socket_sendmsg+0x7d/0xa0 [ 417.793521][ T9232] ? netlink_getsockopt+0x5b0/0x5b0 [ 417.798739][ T9232] ____sys_sendmsg+0x59e/0x8f0 [ 417.803521][ T9232] ? iovec_from_user+0x300/0x390 [ 417.808498][ T9232] ? __sys_sendmsg_sock+0x30/0x30 [ 417.813557][ T9232] ___sys_sendmsg+0x252/0x2e0 [ 417.818262][ T9232] ? __sys_sendmsg+0x260/0x260 [ 417.823115][ T9232] ? __fdget+0x191/0x220 [ 417.827377][ T9232] __se_sys_sendmsg+0x19a/0x260 [ 417.832245][ T9232] ? __x64_sys_sendmsg+0x80/0x80 [ 417.837218][ T9232] ? syscall_enter_from_user_mode+0x2e/0x240 [ 417.843232][ T9232] ? lockdep_hardirqs_on+0x94/0x130 [ 417.848470][ T9232] ? syscall_enter_from_user_mode+0x2e/0x240 [ 417.854481][ T9232] do_syscall_64+0x3b/0xb0 [ 417.858923][ T9232] ? clear_bhb_loop+0x15/0x70 [ 417.863624][ T9232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.869537][ T9232] RIP: 0033:0x7f7f8e7fb819 [ 417.873969][ T9232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.893592][ T9232] RSP: 002b:00007f7f8c673038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.902031][ T9232] RAX: ffffffffffffffda RBX: 00007f7f8e9b2fa0 RCX: 00007f7f8e7fb819 [ 417.910027][ T9232] RDX: 0000000000000000 RSI: 000000002000f000 RDI: 0000000000000003 [ 417.918016][ T9232] RBP: 00007f7f8c673090 R08: 0000000000000000 R09: 0000000000000000 [ 417.926010][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.934002][ T9232] R13: 0000000000000000 R14: 00007f7f8e9b2fa0 R15: 00007ffdc46227f8 [ 417.942012][ T9232] [ 417.947652][ T4248] usb 5-1: Using ep0 maxpacket: 16 [ 418.013781][ T9237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 418.082309][ T9237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 418.090621][ T4248] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 418.113200][ T4248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.117865][ T9237] System zones: 1-12 [ 418.132109][ T9237] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 418.147622][ T4248] usb 5-1: config 0 has no interface number 0 [ 418.148890][ T7560] usb 3-1: unable to get BOS descriptor or descriptor too short [ 418.158834][ T9237] EXT4-fs (loop3): 1 truncate cleaned up [ 418.188474][ T9237] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 418.286903][ T7560] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 418.296860][ T7560] usb 3-1: can't read configurations, error -71 [ 418.442132][ T4248] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 418.451521][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.507582][ T4248] usb 5-1: Product: syz [ 418.519825][ T4248] usb 5-1: Manufacturer: syz [ 418.559560][ T4248] usb 5-1: SerialNumber: syz [ 418.640466][ T4248] usb 5-1: config 0 descriptor?? [ 419.373339][ T4248] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 419.409630][ T9259] loop2: detected capacity change from 0 to 256 [ 419.438304][ T4248] usb 5-1: No valid video chain found. [ 419.687063][ T6770] usb 5-1: USB disconnect, device number 16 [ 419.925250][ T9266] loop6: detected capacity change from 0 to 4096 [ 420.043831][ T9266] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 420.865172][ T9266] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 420.905478][ T9266] ntfs3: loop6: Failed to load $Extend. [ 421.068116][ T9284] delete_channel: no stack [ 421.155452][ T9284] loop3: detected capacity change from 0 to 2048 [ 421.217454][ T9292] FAULT_INJECTION: forcing a failure. [ 421.217454][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 421.256121][ T9292] CPU: 0 PID: 9292 Comm: syz.2.897 Not tainted 5.15.173-syzkaller #0 [ 421.264237][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 421.274303][ T9292] Call Trace: [ 421.277588][ T9292] [ 421.280523][ T9292] dump_stack_lvl+0x1e3/0x2d0 [ 421.285360][ T9292] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 421.291002][ T9292] ? panic+0x860/0x860 [ 421.295103][ T9292] ? __might_sleep+0xc0/0xc0 [ 421.299765][ T9292] should_fail+0x38a/0x4c0 [ 421.304205][ T9292] should_failslab+0x5/0x20 [ 421.308728][ T9292] slab_pre_alloc_hook+0x53/0xc0 [ 421.313690][ T9292] __kmalloc+0x6e/0x300 [ 421.317857][ T9292] ? security_prepare_creds+0x48/0x130 [ 421.323350][ T9292] security_prepare_creds+0x48/0x130 [ 421.328661][ T9292] prepare_creds+0x459/0x610 [ 421.333269][ T9292] __sys_setreuid+0x106/0x9a0 [ 421.337966][ T9292] ? rcu_is_watching+0x11/0xa0 [ 421.342751][ T9292] ? syscall_enter_from_user_mode+0x14b/0x240 [ 421.348953][ T9292] do_syscall_64+0x3b/0xb0 [ 421.353393][ T9292] ? clear_bhb_loop+0x15/0x70 [ 421.358088][ T9292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.364008][ T9292] RIP: 0033:0x7f0dbe803819 [ 421.368441][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.388062][ T9292] RSP: 002b:00007f0dbc67b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 421.396575][ T9292] RAX: ffffffffffffffda RBX: 00007f0dbe9bafa0 RCX: 00007f0dbe803819 [ 421.404537][ T9292] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 421.412516][ T9292] RBP: 00007f0dbc67b090 R08: 0000000000000000 R09: 0000000000000000 [ 421.420477][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.428442][ T9292] R13: 0000000000000000 R14: 00007f0dbe9bafa0 R15: 00007ffc31bb7488 [ 421.436418][ T9292] [ 421.487234][ T9284] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 421.576508][ T9284] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.758386][ T9302] loop6: detected capacity change from 0 to 256 [ 421.788760][ T9304] loop7: detected capacity change from 0 to 2048 [ 421.867603][ T9302] netlink: 'syz.6.899': attribute type 7 has an invalid length. [ 421.921797][ T9316] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.090086][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.138146][ T4171] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 422.201277][ T9304] Remounting filesystem read-only [ 422.222967][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.248186][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.305185][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.315237][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.326273][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.341450][ T9327] xt_connbytes: Forcing CT accounting to be enabled [ 422.393995][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.405178][ T9304] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 422.415189][ T26] audit: type=1800 audit(1732173499.050:30): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.901" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 422.420419][ T4171] usb 5-1: Using ep0 maxpacket: 16 [ 422.623596][ T4171] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.652120][ T4171] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.680070][ T9334] loop6: detected capacity change from 0 to 4096 [ 422.793095][ T9334] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 422.927856][ T4171] usb 5-1: New USB device found, idVendor=1d6b, idProduct=01ff, bcdDevice= 0.40 [ 422.953357][ T9334] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 422.966914][ T9334] ntfs3: loop6: Failed to load $Extend. [ 422.990518][ T4171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.027090][ T4171] usb 5-1: Product: syz [ 423.066654][ T4171] usb 5-1: Manufacturer: syz [ 423.087849][ T4171] usb 5-1: SerialNumber: syz [ 423.237844][ T9357] loop3: detected capacity change from 0 to 1024 [ 423.605802][ T9360] FAULT_INJECTION: forcing a failure. [ 423.605802][ T9360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.627310][ T9360] CPU: 0 PID: 9360 Comm: syz.7.914 Not tainted 5.15.173-syzkaller #0 [ 423.635420][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 423.645675][ T9360] Call Trace: [ 423.648954][ T9360] [ 423.651879][ T9360] dump_stack_lvl+0x1e3/0x2d0 [ 423.656556][ T9360] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 423.662180][ T9360] ? panic+0x860/0x860 [ 423.666241][ T9360] ? validate_chain+0x112/0x5930 [ 423.671188][ T9360] ? validate_chain+0x112/0x5930 [ 423.676119][ T9360] should_fail+0x38a/0x4c0 [ 423.680537][ T9360] _copy_from_user+0x2d/0x170 [ 423.685232][ T9360] iovec_from_user+0x13b/0x390 [ 423.690039][ T9360] __import_iovec+0x72/0x4b0 [ 423.694642][ T9360] ? __ia32_sys_shutdown+0x60/0x60 [ 423.699775][ T9360] import_iovec+0xe6/0x120 [ 423.704209][ T9360] ___sys_sendmsg+0x215/0x2e0 [ 423.708897][ T9360] ? __sys_sendmsg+0x260/0x260 [ 423.713696][ T9360] ? __fdget+0x191/0x220 [ 423.717939][ T9360] __se_sys_sendmsg+0x19a/0x260 [ 423.722807][ T9360] ? __x64_sys_sendmsg+0x80/0x80 [ 423.727844][ T9360] ? syscall_enter_from_user_mode+0x2e/0x240 [ 423.733858][ T9360] ? lockdep_hardirqs_on+0x94/0x130 [ 423.739074][ T9360] ? syscall_enter_from_user_mode+0x2e/0x240 [ 423.745078][ T9360] do_syscall_64+0x3b/0xb0 [ 423.749517][ T9360] ? clear_bhb_loop+0x15/0x70 [ 423.754219][ T9360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 423.760128][ T9360] RIP: 0033:0x7f7f8e7fb819 [ 423.764560][ T9360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.784204][ T9360] RSP: 002b:00007f7f8c673038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.792614][ T9360] RAX: ffffffffffffffda RBX: 00007f7f8e9b2fa0 RCX: 00007f7f8e7fb819 [ 423.800598][ T9360] RDX: 0000000000004084 RSI: 0000000020000100 RDI: 0000000000000003 [ 423.808562][ T9360] RBP: 00007f7f8c673090 R08: 0000000000000000 R09: 0000000000000000 [ 423.816533][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.824492][ T9360] R13: 0000000000000000 R14: 00007f7f8e9b2fa0 R15: 00007ffdc46227f8 [ 423.832480][ T9360] [ 423.877040][ T4171] usb 5-1: 0:2 : does not exist [ 423.956048][ T4171] usb 5-1: USB disconnect, device number 17 [ 424.364328][ T4214] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 424.647835][ T9382] FAULT_INJECTION: forcing a failure. [ 424.647835][ T9382] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 424.661452][ T4214] usb 7-1: Using ep0 maxpacket: 32 [ 424.714661][ T9382] CPU: 1 PID: 9382 Comm: syz.4.919 Not tainted 5.15.173-syzkaller #0 [ 424.722779][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 424.733012][ T9382] Call Trace: [ 424.736308][ T9382] [ 424.739262][ T9382] dump_stack_lvl+0x1e3/0x2d0 [ 424.743977][ T9382] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 424.749635][ T9382] ? panic+0x860/0x860 [ 424.753746][ T9382] should_fail+0x38a/0x4c0 [ 424.758188][ T9382] prepare_alloc_pages+0x1db/0x5b0 [ 424.763322][ T9382] __alloc_pages+0x14f/0x700 [ 424.767933][ T9382] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 424.773234][ T9382] ? rcu_lock_release+0x5/0x20 [ 424.778007][ T9382] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 424.784004][ T9382] ? alloc_pages+0x458/0x570 [ 424.788610][ T9382] __pmd_alloc+0xb6/0x850 [ 424.792969][ T9382] ? __pud_alloc+0x210/0x210 [ 424.797583][ T9382] ? count_memcg_event_mm+0x385/0x3e0 [ 424.802981][ T9382] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 424.809184][ T9382] ? mark_lock+0x98/0x340 [ 424.813531][ T9382] handle_mm_fault+0xf62/0x5960 [ 424.818417][ T9382] ? numa_migrate_prep+0x1a0/0x1a0 [ 424.823574][ T9382] ? vmacache_find+0x4f9/0x590 [ 424.828351][ T9382] ? vmacache_update+0x9f/0xf0 [ 424.833137][ T9382] exc_page_fault+0x271/0x700 [ 424.837842][ T9382] asm_exc_page_fault+0x22/0x30 [ 424.840467][ T9369] loop3: detected capacity change from 0 to 32768 [ 424.842711][ T9382] RIP: 0033:0x7f5984cc4853 [ 424.842734][ T9382] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 424.842752][ T9382] RSP: 002b:00007f5982c784a0 EFLAGS: 00010206 [ 424.879259][ T9382] RAX: 0000000000000000 RBX: 00007f5982c78540 RCX: 00007f597a859000 [ 424.887287][ T9382] RDX: 00007f5982c786e0 RSI: 0000000000000005 RDI: 00007f5982c785e0 [ 424.895275][ T9382] RBP: 000000000000013c R08: 000000000000000a R09: 00000000000003b3 [ 424.903259][ T9382] R10: 00000000000003c2 R11: 00007f5982c78540 R12: 00007f5982c78540 [ 424.911248][ T9382] R13: 00007f5984e88fa0 R14: 00000000000000eb R15: 00007f5982c785e0 [ 424.919246][ T9382] [ 424.976891][ T9369] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop3 scanned by syz.3.916 (9369) [ 425.014255][ T9382] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 425.231026][ T4214] usb 7-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=73.1b [ 425.234668][ T9382] loop4: detected capacity change from 0 to 4096 [ 425.240923][ T9369] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 425.342491][ T9399] program syz.7.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.352155][ T9399] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 425.372707][ T9399] ubi0: attaching mtd0 [ 425.388990][ T9399] ubi0: scanning is finished [ 425.422664][ T9369] BTRFS info (device loop3): using free space tree [ 425.590007][ T9369] BTRFS info (device loop3): has skinny extents [ 425.608460][ T9399] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 425.877262][ T4214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.945192][ T9382] ntfs: volume version 3.1. [ 425.992541][ T9418] loop2: detected capacity change from 0 to 4096 [ 426.072402][ T4214] usb 7-1: Product: syz [ 426.089264][ T9418] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 426.137202][ T4214] usb 7-1: Manufacturer: syz [ 426.329505][ T9369] BTRFS info (device loop3): enabling ssd optimizations [ 426.419224][ T26] audit: type=1800 audit(1732173502.795:31): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.916" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 426.482941][ T4214] usb 7-1: SerialNumber: syz [ 426.503046][ T4214] usb 7-1: config 0 descriptor?? [ 426.556810][ T4214] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input8 [ 426.847011][ T3530] bcm5974 7-1:0.0: could not read from device [ 426.926785][ T4214] usb 7-1: USB disconnect, device number 5 [ 426.931226][ T3530] bcm5974 7-1:0.0: could not read from device [ 426.959338][ T3530] bcm5974 7-1:0.0: could not read from device [ 427.872671][ T9485] loop7: detected capacity change from 0 to 128 [ 428.285404][ T9510] loop3: detected capacity change from 0 to 64 [ 428.450233][ T9514] loop4: detected capacity change from 0 to 2048 [ 428.543435][ T9517] 9pnet: Insufficient options for proto=fd [ 428.721740][ T9521] fuse: Bad value for 'user_id' [ 429.033195][ T9514] UDF-fs: bad mount option "uid=" or missing value [ 429.293815][ T9538] program syz.7.942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.303389][ T9538] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 429.313448][ T9538] ubi0: attaching mtd0 [ 429.319248][ T9538] ubi0: scanning is finished [ 430.311426][ T9555] loop6: detected capacity change from 0 to 1024 [ 430.666366][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fe0b000: rx timeout, send abort [ 430.673014][ T9555] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 430.709689][ T9538] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 430.818129][ T9555] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 430.970288][ T9555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814e01c, mo2=0003] [ 431.017709][ T9555] System zones: 0-1, 3-36 [ 431.122525][ T9555] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,init_itable=0x000000000000000f,debug,jqfmt=vfsold,bsddf,nomblk_io_submit,nouid32,,errors=continue. Quota mode: writeback. [ 431.132596][ T9572] loop2: detected capacity change from 0 to 512 [ 431.208657][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fe0b000: abort rx timeout. Force session deactivation [ 431.285485][ T4171] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 431.315387][ T9572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 431.404424][ T9572] EXT4-fs (loop2): 1 truncate cleaned up [ 431.457660][ T9572] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,data=journal,lazytime,noblock_validity,quota,mb_optimize_scan=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: writeback. [ 431.509762][ T4171] usb 8-1: device descriptor read/64, error -71 [ 431.789723][ T6777] Bluetooth: hci3: command 0x0406 tx timeout [ 431.819375][ T4171] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 432.031026][ T4282] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.061627][ T4171] usb 8-1: device descriptor read/64, error -71 [ 432.157574][ T4282] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.205880][ T4171] usb usb8-port1: attempt power cycle [ 432.275270][ T4282] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.349622][ T4282] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.663186][ T4171] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 432.782478][ T4171] usb 8-1: device descriptor read/8, error -71 [ 432.955896][ T9596] loop2: detected capacity change from 0 to 32768 [ 433.080045][ T4171] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 434.128988][ T4171] usb 8-1: device descriptor read/8, error -71 [ 434.254967][ T4171] usb usb8-port1: unable to enumerate USB device [ 434.348999][ T9596] XFS (loop2): Mounting V5 Filesystem [ 434.549118][ T9605] chnl_net:caif_netlink_parms(): no params data found [ 434.566106][ T9596] XFS (loop2): Ending clean mount [ 434.852758][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.860441][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.883550][ T9605] device bridge_slave_0 entered promiscuous mode [ 434.933753][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.941453][ T26] audit: type=1326 audit(1732173510.772:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.3.959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71b661c819 code=0x0 [ 434.948129][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.001987][ T9605] device bridge_slave_1 entered promiscuous mode [ 435.031532][ T7156] XFS (loop2): Unmounting Filesystem [ 435.053505][ T4171] Bluetooth: hci1: command 0x0409 tx timeout [ 435.319235][ T9605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.341360][ T9605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.467135][ T9605] team0: Port device team_slave_0 added [ 435.521629][ T9605] team0: Port device team_slave_1 added [ 435.635432][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.642433][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.732978][ T9625] loop7: detected capacity change from 0 to 40427 [ 435.739636][ T9605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.772412][ T9625] F2FS-fs (loop7): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 435.781400][ T9625] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 435.812746][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.859967][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.913514][ T9625] F2FS-fs (loop7): invalid crc value [ 435.930582][ T9605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.954664][ T9625] F2FS-fs (loop7): Found nat_bits in checkpoint [ 436.078249][ T9605] device hsr_slave_0 entered promiscuous mode [ 436.088405][ T9625] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 436.110789][ T9625] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 436.120262][ T9605] device hsr_slave_1 entered promiscuous mode [ 436.144173][ T9661] loop3: detected capacity change from 0 to 256 [ 436.154241][ T9605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.196162][ T9605] Cannot create hsr debugfs directory [ 436.322350][ T4282] device hsr_slave_0 left promiscuous mode [ 436.352111][ T4282] device hsr_slave_1 left promiscuous mode [ 436.394095][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.434104][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.463742][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.492287][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.523837][ T4282] device bridge_slave_1 left promiscuous mode [ 436.536439][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.551130][ T4213] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 436.568332][ T4282] device bridge_slave_0 left promiscuous mode [ 436.594504][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.628783][ T9625] overlayfs: failed index dir cleanup (-512) [ 436.642446][ T9625] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 436.656468][ T4282] device veth1_macvtap left promiscuous mode [ 436.663650][ T4282] device veth0_macvtap left promiscuous mode [ 436.691921][ T4282] device veth1_vlan left promiscuous mode [ 436.697844][ T4282] device veth0_vlan left promiscuous mode [ 436.720000][ T5567] attempt to access beyond end of device [ 436.720000][ T5567] loop7: rw=2049, want=45104, limit=40427 [ 436.764936][ T4213] usb 4-1: device descriptor read/64, error -71 [ 437.039761][ T9659] loop2: detected capacity change from 0 to 32768 [ 437.085701][ T4213] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 437.137203][ T9659] JBD2: Ignoring recovery information on journal [ 437.251255][ T9659] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 437.262954][ T4171] Bluetooth: hci1: command 0x041b tx timeout [ 437.293443][ T4282] team0 (unregistering): Port device team_slave_1 removed [ 437.309716][ T4213] usb 4-1: device descriptor read/64, error -71 [ 437.356887][ T4282] team0 (unregistering): Port device team_slave_0 removed [ 437.395956][ T4282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.397210][ T7156] ocfs2: Unmounting device (7,2) on (node local) [ 437.440929][ T4282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.459216][ T4213] usb usb4-port1: attempt power cycle [ 437.552022][ T9679] loop7: detected capacity change from 0 to 2048 [ 437.723470][ T9681] FAULT_INJECTION: forcing a failure. [ 437.723470][ T9681] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.749558][ T4282] bond0 (unregistering): Released all slaves [ 437.779399][ T9681] CPU: 0 PID: 9681 Comm: syz.2.963 Not tainted 5.15.173-syzkaller #0 [ 437.787513][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 437.797583][ T9681] Call Trace: [ 437.800895][ T9681] [ 437.803837][ T9681] dump_stack_lvl+0x1e3/0x2d0 [ 437.808547][ T9681] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 437.814266][ T9681] ? panic+0x860/0x860 [ 437.818335][ T9681] ? perf_event_mmap+0x3e4/0x1c70 [ 437.823378][ T9681] should_fail+0x38a/0x4c0 [ 437.827795][ T9681] prepare_alloc_pages+0x1db/0x5b0 [ 437.832902][ T9681] __alloc_pages+0x14f/0x700 [ 437.837484][ T9681] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 437.842771][ T9681] ? alloc_pages+0x458/0x570 [ 437.847354][ T9681] pte_alloc_one+0x86/0x360 [ 437.851858][ T9681] ? rcu_lock_release+0x20/0x20 [ 437.856710][ T9681] __pte_alloc+0x75/0x210 [ 437.861031][ T9681] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 437.867177][ T9681] ? free_pgtables+0x2a0/0x2a0 [ 437.871938][ T9681] handle_mm_fault+0x4d9a/0x5960 [ 437.876903][ T9681] ? numa_migrate_prep+0x1a0/0x1a0 [ 437.882027][ T9681] ? vmacache_find+0x4f9/0x590 [ 437.886783][ T9681] ? vmacache_update+0x9f/0xf0 [ 437.891550][ T9681] exc_page_fault+0x271/0x700 [ 437.896232][ T9681] asm_exc_page_fault+0x22/0x30 [ 437.901070][ T9681] RIP: 0033:0x7f0dbe6c6853 [ 437.905479][ T9681] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 437.925078][ T9681] RSP: 002b:00007f0dbc67a4a0 EFLAGS: 00010206 [ 437.931159][ T9681] RAX: 0000000000000000 RBX: 00007f0dbc67a540 RCX: 00007f0db425b000 [ 437.939124][ T9681] RDX: 00007f0dbc67a6e0 RSI: 0000000000000001 RDI: 00007f0dbc67a5e0 [ 437.947086][ T9681] RBP: 000000000000013c R08: 000000000000000a R09: 00000000000003a5 [ 437.955074][ T9681] R10: 00000000000003ae R11: 00007f0dbc67a540 R12: 00007f0dbc67a540 [ 437.963039][ T9681] R13: 00007f0dbe88afa0 R14: 00000000000000eb R15: 00007f0dbc67a5e0 [ 437.971012][ T9681] [ 437.997379][ T9681] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 438.010922][ T9681] loop2: detected capacity change from 0 to 256 [ 438.057170][ T4213] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 438.095042][ T9681] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 438.151450][ T26] audit: type=1800 audit(1732173513.777:33): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.963" name="file1" dev="loop2" ino=1048752 res=0 errno=0 [ 438.177696][ T9681] exFAT-fs (loop2): hint_cluster is invalid (17) [ 438.185572][ T4213] usb 4-1: device descriptor read/8, error -71 [ 438.280144][ T9687] loop7: detected capacity change from 0 to 1024 [ 438.400808][ T9687] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 438.601007][ T4213] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 438.700960][ T4213] usb 4-1: device descriptor read/8, error -71 [ 438.839587][ T4213] usb usb4-port1: unable to enumerate USB device [ 439.388966][ T9605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 439.430365][ T9605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 439.475086][ T9605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 439.482887][ T6770] Bluetooth: hci1: command 0x040f tx timeout [ 439.745121][ T7561] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 439.854960][ T9605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.044203][ T7561] usb 8-1: Using ep0 maxpacket: 16 [ 440.180175][ T7561] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.421813][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 440.433562][ T9723] netlink: 'syz.4.970': attribute type 8 has an invalid length. [ 440.508438][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.551506][ T7561] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 440.560852][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.582355][ T7561] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.584593][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.625793][ T7561] usb 8-1: Product: syz [ 440.627084][ T9605] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.653527][ T7561] usb 8-1: Manufacturer: syz [ 440.662775][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.670298][ T7561] usb 8-1: SerialNumber: syz [ 440.683085][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.714303][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.721496][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.751912][ T7561] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input9 [ 440.776847][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.809149][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.846382][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.873463][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.880652][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.916698][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.090339][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.124700][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.165707][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.203991][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.223452][ T3530] bcm5974 8-1:1.0: could not read from device [ 441.236143][ T7561] usb 8-1: USB disconnect, device number 11 [ 441.253763][ T3530] bcm5974 8-1:1.0: could not read from device [ 441.263912][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.314179][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.360359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.383097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.417634][ T9605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.470332][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.511644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.525321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.608140][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'. [ 441.643432][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'. [ 441.699563][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 441.929845][ T8857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.964479][ T8857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.037656][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.050363][ T9771] hub 2-0:1.0: USB hub found [ 442.070370][ T9771] hub 2-0:1.0: 1 port detected [ 442.179247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.201064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.287296][ T9605] device veth0_vlan entered promiscuous mode [ 442.328244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.349229][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.397034][ T9769] kvm [9768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 442.402125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.464030][ T9769] kvm [9768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x250000f7ff [ 442.473217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.530879][ T9769] kvm [9768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x250000ffff [ 442.540549][ T4174] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 442.553418][ T9605] device veth1_vlan entered promiscuous mode [ 442.569731][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 442.575791][ T9787] tipc: Started in network mode [ 442.584875][ T9787] tipc: Node identity 4, cluster identity 4711 [ 442.640625][ T9787] tipc: Node number set to 4 [ 442.716753][ T9769] kvm [9768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x250000ffff [ 442.742562][ T9605] device veth0_macvtap entered promiscuous mode [ 442.805595][ T9769] kvm [9768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x250000f7ff [ 442.815619][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.837355][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 442.864519][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.882098][ T9769] kvm [9768]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x250000ffff [ 442.893113][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.926948][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.010886][ T9605] device veth1_macvtap entered promiscuous mode [ 443.097855][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.126680][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.140088][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.157164][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.167715][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.183547][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.207730][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.231821][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.286443][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.322450][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.343664][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.404317][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.436815][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.489288][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.533272][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.554269][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.567608][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.592159][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.626709][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.649794][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.670734][ T9605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.723159][ T9605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.743024][ T9605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.771739][ T9605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.812964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.828312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.121746][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.153969][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.239924][ T8857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.259629][ T9846] bridge0: port 3(syz_tun) entered blocking state [ 444.267965][ T8857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.284814][ T9846] bridge0: port 3(syz_tun) entered disabled state [ 444.354128][ T9846] device syz_tun entered promiscuous mode [ 444.379024][ T9846] bridge0: port 3(syz_tun) entered blocking state [ 444.386307][ T9846] bridge0: port 3(syz_tun) entered forwarding state [ 444.430993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 444.520854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.940533][ T9894] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 445.467923][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1023'. [ 445.647382][ T9932] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1027'. [ 445.878797][ T9942] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1030'. [ 445.978076][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.984593][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.350735][ T9964] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1036'. [ 446.399551][ T13] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 446.786066][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.813739][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.890936][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.956371][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.994508][ T13] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 447.050735][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.081899][ T9987] tipc: Can't bind to reserved service type 0 [ 447.126715][ T13] hub 4-1:1.0: bad descriptor, ignoring hub [ 447.138527][ T13] hub: probe of 4-1:1.0 failed with error -5 [ 447.179370][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 447.197227][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 447.254430][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 447.272087][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 447.472244][ T13] usb 4-1: USB disconnect, device number 17 [ 447.852255][ T13] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 448.015569][T10020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 448.038196][T10022] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 448.087335][T10013] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 448.096081][T10013] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 448.114467][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 448.247082][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.293302][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.313369][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.348840][T10029] loop2: detected capacity change from 0 to 2048 [ 448.403920][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.500384][ T13] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 448.602859][T10042] program syz.0.1054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.612709][T10042] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 449.290291][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.309140][T10040] loop2: p2 p3 p7 [ 449.379338][ T13] usb 4-1: can't set config #1, error -71 [ 449.400637][ T13] usb 4-1: USB disconnect, device number 18 [ 449.543685][T10029] loop2: p2 p3 p7 [ 449.618308][ T3545] loop2: p2 p3 p7 [ 449.762129][ T4617] udevd[4617]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 449.775972][ T4573] udevd[4573]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 449.790913][ T4831] udevd[4831]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 449.966274][T10077] loop0: detected capacity change from 0 to 512 [ 449.999227][T10084] loop2: detected capacity change from 0 to 512 [ 450.049640][T10090] xt_hashlimit: size too large, truncated to 1048576 [ 450.293995][T10084] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 450.311443][T10077] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.1068: corrupted inode contents [ 450.506422][T10084] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.545299][T10077] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.1068: mark_inode_dirty error [ 450.859365][T10077] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.1068: corrupted inode contents [ 451.088378][T10077] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1068: mark_inode_dirty error [ 451.208088][T10077] Quota error (device loop0): write_blk: dquota write failed [ 451.259331][T10077] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 451.367756][T10077] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1068: Failed to acquire dquot type 0 [ 451.726281][T10077] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.1068: corrupted inode contents [ 451.917200][T10077] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.1068: mark_inode_dirty error [ 452.000546][T10077] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.1068: corrupted inode contents [ 452.071409][T10077] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.1068: mark_inode_dirty error [ 452.161369][T10077] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.1068: corrupted inode contents [ 452.301717][T10077] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 452.342084][T10077] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.1068: corrupted inode contents [ 452.413128][T10077] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.1068: mark_inode_dirty error [ 452.455010][T10077] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 452.491212][T10077] EXT4-fs (loop0): 1 truncate cleaned up [ 452.507948][T10077] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 452.560965][ T4573] udevd[4573]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 452.581711][ T4617] udevd[4617]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 452.584132][T10077] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.613810][ T4831] udevd[4831]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 452.742193][ T5288] udevd[5288]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 452.757203][ T4576] udevd[4576]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 452.764553][ T4617] udevd[4617]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 452.846069][ T26] audit: type=1800 audit(1732173527.540:34): pid=10077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1068" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 452.983248][T10077] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.1068: resize_inode disabled but reserved GDT blocks non-zero [ 453.079849][ T9605] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 453.108232][ T9605] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 454.533505][ T9605] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 454.639161][ T9605] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 454.740607][ T9605] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 454.823551][ T4724] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm kworker/u4:13: Invalid inode table block 34 in block_group 0 [ 454.886156][ T4724] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm kworker/u4:13: Invalid inode table block 34 in block_group 0 [ 454.988283][ T4184] Bluetooth: Unknown LE signaling command 0x00 [ 454.996972][ T4184] Bluetooth: Wrong link type (-22) [ 454.999888][T10203] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 456.144971][ T4282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.441980][ T4282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.584651][T10232] ------------[ cut here ]------------ [ 456.590912][T10232] WARNING: CPU: 1 PID: 10232 at kernel/trace/bpf_trace.c:1411 bpf_get_stack_raw_tp+0x1d3/0x220 [ 456.601535][T10232] Modules linked in: [ 456.605449][T10232] CPU: 1 PID: 10232 Comm: rm Not tainted 5.15.173-syzkaller #0 [ 456.613163][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 456.623353][T10232] RIP: 0010:bpf_get_stack_raw_tp+0x1d3/0x220 [ 456.629364][T10232] Code: f1 45 31 c0 e8 ee 97 14 00 65 ff 0d af ce 78 7e 4c 63 e8 4c 89 e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0d 05 f6 ff <0f> 0b 65 ff 0d 8c ce 78 7e 49 c7 c5 f0 ff ff ff eb d7 e8 f6 04 f6 [ 456.649309][T10232] RSP: 0018:ffffc90003176a50 EFLAGS: 00010293 [ 456.655452][T10232] RAX: ffffffff818a6e93 RBX: 0000000000000003 RCX: ffff88807ea80000 [ 456.663455][T10232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 456.671466][T10232] RBP: ffffc90003176a90 R08: ffffffff818a6d53 R09: fffffbfff20ec821 [ 456.679478][T10232] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003176aa8 [ 456.687512][T10232] R13: 0000000000000000 R14: 0000000000000900 R15: ffff8880b9133b30 [ 456.695520][T10232] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 456.704504][T10232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.711144][T10232] CR2: 00007ff985564018 CR3: 0000000036bc7000 CR4: 00000000003526e0 [ 456.719149][T10232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.727311][T10232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 456.735339][T10232] Call Trace: [ 456.738688][T10232] [ 456.741668][T10232] ? __warn+0x15b/0x300 [ 456.745850][T10232] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 456.751274][T10232] ? report_bug+0x1b7/0x2e0 [ 456.755838][T10232] ? handle_bug+0x3d/0x70 [ 456.760253][T10232] ? exc_invalid_op+0x16/0x40 [ 456.764946][T10232] ? asm_exc_invalid_op+0x16/0x20 [ 456.770048][T10232] ? bpf_get_stack_raw_tp+0x93/0x220 [ 456.775407][T10232] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 456.780803][T10232] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 456.786226][T10232] ? kernfs_path_from_node+0x234/0xb00 [ 456.791724][T10232] bpf_prog_ec3b2eefa702d8d3+0x3a/0xe8 [ 456.797239][T10232] bpf_trace_run4+0x1ea/0x390 [ 456.801932][T10232] ? asm_exc_int3+0x35/0x40 [ 456.806503][T10232] ? bpf_trace_run3+0x380/0x380 [ 456.811415][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 456.818325][T10232] __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 456.825074][T10232] ? get_mm_memcg_path+0x330/0x330 [ 456.830269][T10232] ? stack_map_get_build_id_offset+0x24a/0x930 [ 456.836476][T10232] ? stack_map_get_build_id_offset+0x5ef/0x930 [ 456.842657][T10232] stack_map_get_build_id_offset+0x612/0x930 [ 456.848713][T10232] ? __bpf_get_stackid+0x910/0x910 [ 456.853852][T10232] __bpf_get_stack+0x495/0x570 [ 456.858654][T10232] ? stack_map_get_build_id_offset+0x930/0x930 [ 456.864847][T10232] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 456.870786][T10232] ? _raw_spin_unlock+0x40/0x40 [ 456.875652][T10232] ? __cant_sleep+0x270/0x270 [ 456.880374][T10232] bpf_get_stack_raw_tp+0x1b2/0x220 [ 456.885631][T10232] bpf_prog_ec3b2eefa702d8d3+0x3a/0xe8 [ 456.891145][T10232] bpf_trace_run4+0x1ea/0x390 [ 456.895857][T10232] ? asm_exc_int3+0x35/0x40 [ 456.900448][T10232] ? bpf_trace_run3+0x380/0x380 [ 456.905324][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 456.912222][T10232] __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 456.918953][T10232] ? get_mm_memcg_path+0x330/0x330 [ 456.924140][T10232] ? stack_map_get_build_id_offset+0x24a/0x930 [ 456.930323][T10232] ? stack_map_get_build_id_offset+0x5ef/0x930 [ 456.936561][T10232] stack_map_get_build_id_offset+0x612/0x930 [ 456.942583][T10232] ? __bpf_get_stackid+0x910/0x910 [ 456.947755][T10232] __bpf_get_stack+0x495/0x570 [ 456.952573][T10232] ? stack_map_get_build_id_offset+0x930/0x930 [ 456.958761][T10232] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 456.964705][T10232] ? _raw_spin_unlock+0x40/0x40 [ 456.969574][T10232] ? __cant_sleep+0x270/0x270 [ 456.974302][T10232] bpf_get_stack_raw_tp+0x1b2/0x220 [ 456.979521][T10232] bpf_prog_ec3b2eefa702d8d3+0x3a/0xe8 [ 456.985024][T10232] bpf_trace_run4+0x1ea/0x390 [ 456.989733][T10232] ? asm_exc_int3+0x35/0x40 [ 456.994243][T10232] ? bpf_trace_run3+0x380/0x380 [ 456.999127][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 457.006030][T10232] __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 457.012753][T10232] ? get_mm_memcg_path+0x330/0x330 [ 457.017927][T10232] ? stack_map_get_build_id_offset+0x24a/0x930 [ 457.024122][T10232] ? stack_map_get_build_id_offset+0x5ef/0x930 [ 457.030313][T10232] stack_map_get_build_id_offset+0x612/0x930 [ 457.036315][T10232] ? __bpf_get_stackid+0x910/0x910 [ 457.041485][T10232] __bpf_get_stack+0x495/0x570 [ 457.046312][T10232] ? stack_map_get_build_id_offset+0x930/0x930 [ 457.052500][T10232] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 457.058408][T10232] ? _raw_spin_unlock+0x40/0x40 [ 457.063318][T10232] ? __cant_sleep+0x270/0x270 [ 457.068038][T10232] bpf_get_stack_raw_tp+0x1b2/0x220 [ 457.073283][T10232] ? bpf_trace_run4+0x1ea/0x390 [ 457.078168][T10232] ? asm_exc_int3+0x35/0x40 [ 457.082714][T10232] ? bpf_trace_run3+0x380/0x380 [ 457.087584][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 457.094482][T10232] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 457.101381][T10232] ? get_mm_memcg_path+0x330/0x330 [ 457.106561][T10232] ? vm_mmap_pgoff+0x28d/0x2d0 [ 457.111460][T10232] ? vm_mmap_pgoff+0x2b0/0x2d0 [ 457.116273][T10232] ? account_locked_vm+0xe0/0xe0 [ 457.121218][T10232] ? __fget_files+0x413/0x480 [ 457.125938][T10232] ? ksys_mmap_pgoff+0x559/0x780 [ 457.130918][T10232] ? mmap_region+0x1670/0x1670 [ 457.135718][T10232] ? syscall_enter_from_user_mode+0x2e/0x240 [ 457.141721][T10232] ? lockdep_hardirqs_on+0x94/0x130 [ 457.146984][T10232] ? do_syscall_64+0x3b/0xb0 [ 457.151608][T10232] ? clear_bhb_loop+0x15/0x70 [ 457.156316][T10232] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.162418][T10232] [ 457.165471][T10232] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.172861][T10232] CPU: 1 PID: 10232 Comm: rm Not tainted 5.15.173-syzkaller #0 [ 457.180409][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 457.190477][T10232] Call Trace: [ 457.193755][T10232] [ 457.196682][T10232] dump_stack_lvl+0x1e3/0x2d0 [ 457.201372][T10232] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 457.207021][T10232] ? panic+0x860/0x860 [ 457.211124][T10232] ? bpf_get_stack_raw_tp+0x140/0x220 [ 457.216522][T10232] ? bpf_get_stack_raw_tp+0x140/0x220 [ 457.221922][T10232] panic+0x318/0x860 [ 457.225846][T10232] ? __warn+0x16a/0x300 [ 457.230007][T10232] ? fb_is_primary_device+0xd0/0xd0 [ 457.235234][T10232] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 457.240616][T10232] __warn+0x2b2/0x300 [ 457.244626][T10232] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 457.250003][T10232] report_bug+0x1b7/0x2e0 [ 457.254459][T10232] handle_bug+0x3d/0x70 [ 457.258623][T10232] exc_invalid_op+0x16/0x40 [ 457.263142][T10232] asm_exc_invalid_op+0x16/0x20 [ 457.268002][T10232] RIP: 0010:bpf_get_stack_raw_tp+0x1d3/0x220 [ 457.274007][T10232] Code: f1 45 31 c0 e8 ee 97 14 00 65 ff 0d af ce 78 7e 4c 63 e8 4c 89 e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0d 05 f6 ff <0f> 0b 65 ff 0d 8c ce 78 7e 49 c7 c5 f0 ff ff ff eb d7 e8 f6 04 f6 [ 457.293619][T10232] RSP: 0018:ffffc90003176a50 EFLAGS: 00010293 [ 457.299699][T10232] RAX: ffffffff818a6e93 RBX: 0000000000000003 RCX: ffff88807ea80000 [ 457.307772][T10232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 457.315752][T10232] RBP: ffffc90003176a90 R08: ffffffff818a6d53 R09: fffffbfff20ec821 [ 457.323733][T10232] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003176aa8 [ 457.331711][T10232] R13: 0000000000000000 R14: 0000000000000900 R15: ffff8880b9133b30 [ 457.339705][T10232] ? bpf_get_stack_raw_tp+0x93/0x220 [ 457.345010][T10232] ? bpf_get_stack_raw_tp+0x1d3/0x220 [ 457.350399][T10232] ? kernfs_path_from_node+0x234/0xb00 [ 457.355884][T10232] ? bpf_trace_run4+0x1ea/0x390 [ 457.360857][T10232] ? asm_exc_int3+0x35/0x40 [ 457.365378][T10232] ? bpf_trace_run3+0x380/0x380 [ 457.370245][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 457.377133][T10232] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 457.383999][T10232] ? get_mm_memcg_path+0x330/0x330 [ 457.389144][T10232] ? stack_map_get_build_id_offset+0x24a/0x930 [ 457.395303][T10232] ? stack_map_get_build_id_offset+0x5ef/0x930 [ 457.401470][T10232] ? stack_map_get_build_id_offset+0x612/0x930 [ 457.407638][T10232] ? __bpf_get_stackid+0x910/0x910 [ 457.412762][T10232] ? __bpf_get_stack+0x495/0x570 [ 457.417714][T10232] ? stack_map_get_build_id_offset+0x930/0x930 [ 457.423876][T10232] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 457.429790][T10232] ? _raw_spin_unlock+0x40/0x40 [ 457.434657][T10232] ? __cant_sleep+0x270/0x270 [ 457.439348][T10232] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 457.444745][T10232] ? bpf_trace_run4+0x1ea/0x390 [ 457.449606][T10232] ? asm_exc_int3+0x35/0x40 [ 457.454124][T10232] ? bpf_trace_run3+0x380/0x380 [ 457.458984][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 457.465847][T10232] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 457.472704][T10232] ? get_mm_memcg_path+0x330/0x330 [ 457.477861][T10232] ? stack_map_get_build_id_offset+0x24a/0x930 [ 457.484026][T10232] ? stack_map_get_build_id_offset+0x5ef/0x930 [ 457.490199][T10232] ? stack_map_get_build_id_offset+0x612/0x930 [ 457.496377][T10232] ? __bpf_get_stackid+0x910/0x910 [ 457.501540][T10232] ? __bpf_get_stack+0x495/0x570 [ 457.506492][T10232] ? stack_map_get_build_id_offset+0x930/0x930 [ 457.512644][T10232] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 457.518542][T10232] ? _raw_spin_unlock+0x40/0x40 [ 457.523404][T10232] ? __cant_sleep+0x270/0x270 [ 457.528087][T10232] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 457.533480][T10232] ? bpf_trace_run4+0x1ea/0x390 [ 457.538340][T10232] ? asm_exc_int3+0x35/0x40 [ 457.542862][T10232] ? bpf_trace_run3+0x380/0x380 [ 457.547728][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 457.554606][T10232] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 457.561479][T10232] ? get_mm_memcg_path+0x330/0x330 [ 457.566640][T10232] ? stack_map_get_build_id_offset+0x24a/0x930 [ 457.572809][T10232] ? stack_map_get_build_id_offset+0x5ef/0x930 [ 457.578980][T10232] ? stack_map_get_build_id_offset+0x612/0x930 [ 457.585153][T10232] ? __bpf_get_stackid+0x910/0x910 [ 457.590292][T10232] ? __bpf_get_stack+0x495/0x570 [ 457.595273][T10232] ? stack_map_get_build_id_offset+0x930/0x930 [ 457.601446][T10232] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 457.607357][T10232] ? _raw_spin_unlock+0x40/0x40 [ 457.612227][T10232] ? __cant_sleep+0x270/0x270 [ 457.616913][T10232] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 457.622301][T10232] ? bpf_trace_run4+0x1ea/0x390 [ 457.627156][T10232] ? asm_exc_int3+0x35/0x40 [ 457.631682][T10232] ? bpf_trace_run3+0x380/0x380 [ 457.636537][T10232] ? __mmap_lock_do_trace_acquire_returned+0x17e/0x2c0 [ 457.643390][T10232] ? __mmap_lock_do_trace_acquire_returned+0x24d/0x2c0 [ 457.650237][T10232] ? get_mm_memcg_path+0x330/0x330 [ 457.655364][T10232] ? vm_mmap_pgoff+0x28d/0x2d0 [ 457.660132][T10232] ? vm_mmap_pgoff+0x2b0/0x2d0 [ 457.664897][T10232] ? account_locked_vm+0xe0/0xe0 [ 457.669842][T10232] ? __fget_files+0x413/0x480 [ 457.674522][T10232] ? ksys_mmap_pgoff+0x559/0x780 [ 457.679454][T10232] ? mmap_region+0x1670/0x1670 [ 457.684210][T10232] ? syscall_enter_from_user_mode+0x2e/0x240 [ 457.690201][T10232] ? lockdep_hardirqs_on+0x94/0x130 [ 457.695405][T10232] ? do_syscall_64+0x3b/0xb0 [ 457.699989][T10232] ? clear_bhb_loop+0x15/0x70 [ 457.704659][T10232] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.710731][T10232] [ 457.714103][T10232] Kernel Offset: disabled [ 457.718854][T10232] Rebooting in 86400 seconds..