last executing test programs: 6m14.29623934s ago: executing program 32 (id=52): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000001a80)='syzkaller\x00', 0x3, 0x0, &(0x7f0000001ac0), 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001b40)={0x2, 0x8, 0x6, 0xa}, 0x10, 0x125e0, r0, 0x0, &(0x7f0000001b80)=[r0, r0, 0x1, r0, r0, 0x1, r0, r0], 0x0, 0x10, 0x401}, 0x94) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) mount$9p_fd(0x0, 0x0, 0x0, 0x2240840, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000000000, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5m57.291610099s ago: executing program 5 (id=118): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcf5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 5m56.127663952s ago: executing program 5 (id=121): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x838, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 5m55.249925189s ago: executing program 5 (id=126): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m54.654842251s ago: executing program 5 (id=129): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000200)=ANY=[@ANYBLOB="00e82204ed24aa6d02754d56e2ddbefe5348f35a0b027522b07694ce21d6f9a429d35944f91a556881241434cdaaebe5085555"], 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 5m52.491395783s ago: executing program 5 (id=133): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000140)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) truncate(&(0x7f0000000640)='./file1\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x400, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xeffb, 0x9) 5m51.874569654s ago: executing program 5 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5m51.511689112s ago: executing program 33 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5m51.103185869s ago: executing program 2 (id=138): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 5m50.760750936s ago: executing program 2 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r1 = open_tree(r0, &(0x7f0000000280)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m50.431491403s ago: executing program 2 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400007, 0x3, 0x10000, 0x3, 0x0, 0x400, 0x6}, 0x1c) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m48.591276848s ago: executing program 2 (id=146): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@nossd_spread}, {}, {@nodiscard}, {@nossd}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x67, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x11b5c91, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) 5m46.731978155s ago: executing program 2 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x2a, 0xbe, 0x1, 0x5, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m44.255966762s ago: executing program 2 (id=157): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x50) 5m44.150894834s ago: executing program 34 (id=157): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x50) 5m13.688582855s ago: executing program 6 (id=237): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@init_itable_val}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$eJzs3d9rXFkdAPDvncw0SZt1surDuuBadCVdtDPJxt0NPqwRRJ8WrPXFpxiTSQiZZEJm0jahSIp/gCD+Qp988kXwWQTpnyBCQd9FRCna1gcf1JE7c6fNppNkQjOZNPl84PSe+/N7vmnuyZx7L3MDuLCuRsRsRAxFxFsRUcyW57ISu+2Sbvf40d2FtCTRHL75jySSbFnnWEk2vZLtNhIR3/haxHeS5+PWt3dW56vVymY2X26sbZTr2zvXV9bmlyvLlfXZ6al3Z96beWdm8sRyff8rf/3x93/51fd/9/nbf577+7Xvps0ay9btzaMXuz1u10690PpZdOQjYvM4wc6woSyfwqAbAgBAT9LP+B+NiE9HxJOfDbo1AAAAQD80vzQW/0kimgAAAMC5lWs9A5vkStmzAGORy5VK7Wd4Px6Xc9VavfG5pdrW+mL7WdnxKOSWVqqVyexZ4fEoJOn8VKv+bP7tffPTEfFqRPywONqaLy3UqouDvvgBAAAAF8SVfeP/fxXb438AAADgnBkfdAMAAACAvjP+BwAAgPPvwPF/kn/6giwAAADgpfX1Dz5IS7Pz/uvFW9tbq7Vb1xcr9dXS2tZCaaG2uVFartWWW9/Zt3bU8aq12sYXYn3rTrlRqTfK9e2dubXa1npjrvVe77lKs3gqaQEAAAB7vPqp+39KImL3i6OtkrqUrSscvftsf1sH9FPueJsn/WoHcPqGBt0AYGDyg24AMDA9jPGBc+6Igf2P9s0f87IBAABwFkx84oXu/7sfCC8xA3m4uNz/h4vL/X+4uNz/hwtu+OhNRg5a8fsTbgsAANA3Y62S5ErZvcCxyOVKpYhXWq8FKCRLK9XKZER8JCL+WCwMp/NTg240AAAAAAAAAAAAAAAAAAAAAAAAALxkms0kmgAAAMC5FpH7W5K9yH+i+ObY/usDl5J/F1vTiLj985s/uTPfaGxOpcv/+XR546fZ8rc7S1LfOuUrGQAAAEBHZ5zeGccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEl6/OjuQqecZtyHX46I8W7x8zHSmo78phgRl58kkd+zXxIRQycQf/deRLzWLX6SNivGs1bsj5+LiNEBx79yAvHhIruf9j+z6flX2Hf+5eJqa9r9/Mtn5UU9vHpQ/5fr9H+tfq5b//fK4Yce6VRef/Dr8oHx70W8nu/e/7QPkG/Fei7+pd5z/PY3d3YOWtf8RcTEEX9/0vjlxtpGub69c31lbX65slxZn56eenfmvZl3ZibLSyvVSvZv1xg/+ORv/3dY/pe7xm/3v+mPsWv+EfFmj/n/98GdRx87JP61z3T//3/tkPjp78Rns78D6fqJTn23Xd/rjV/94Y3D8l88IP+RI/K/1mP+b9343l963BQAOAX17Z3V+Wq1stmXymjfjqySVmrrZ6IZKme3ciM70Y+9+4A7JgAA4MQ9+9C/f80xbvAAAAAAAAAAAAAAAAAAAAAAL6TvX0I2/OFvFhgZXKoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIf6fwAAAP//QCfSvg==") recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) syz_open_dev$evdev(0x0, 0x200, 0x0) 5m13.063636017s ago: executing program 6 (id=240): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/15, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') r3 = dup3(r0, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) fstat(r3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004180)="6e17a99c0c6642dade53c8e8188a06eeb1d921f219eeefd875aa371ffcf066ee09b561117ce5ee34962de4844e0e5fc5451b99074474fada7949b42dea668deb2ef1f6fc46576462f871892040e2fcd8c0a320a2f932e6c4655c372f9000dac520bc1ce8c8837677535a361e978c37089c04dbb4efea1cfeff811e749d839605770b90a63ecf27dea075028c53bc9fdf571265aa5c77d3a84a2bfd543f4c6810f9d20e84dbd1474d9aa9a0ef36d04a3d034bc555a3aaac1fa0a7721fe34c1609dc046d4186aa1448c73e5945674240a49ebdf04376175e3d29f2a669bd22fefe366b72eee5667dd9e5e546dee2ddf2379c019b65f32cea6a87da6f9f29b5bf9846af9f5a4145e065043b535e66aad1af2758c601557c700ce0eb63cf883747a01f8bffe9df20f79c1a1851e161a0163289e4f51ecea02840bb5f18407eb86ce1308b9dac2a135ea83a0e5c9f5f82afc3178f44d4f41686e498b3a7c76e8c2784a3004acfa223830dd903aa5bda6c0617909877b8715459fc02354784856e25357a36ca79eb860ad33eae87630e83e2dbfd8f120885bc41e5b5eb67bd5672c40155f1987e89e1b2980e783e08868cccf10a65206a968b4c36bb70be60d672d7e7a17bf97020cf96fdbc62165f8c105e2c63be13abaa8b71553d599d5604d30ff53ef08cd237da7c16d5fd209e484aaa5c0a075400b74d917bb1bd7b2a08f5265c69a9bdad4151ba5344cdb4b4b9690334ec08abdae0863f98ea36cdb02f10888a5cea514cf796e9ea1b706a9f26e16ffdce350648f7c5a39fbcbba5e567b1bdde8168358d65c236a9f01ff768b4af6536348a6aaf8e82fe1d485a9e984d67341edac12b513b36f16537619cc052757bd95dc4f263bd92fcf8b71123a74b405a0fcdf2a9f49e5f89f029e6ba9692e4346a50143d0eede661841cf3db71ca9b6f10ccf48c595fe91f39573e0ca89f524b85a5769392b06fa617f446a7cf086152ecae264de9ee0c039f90f18f55ed0e7b74ec7c30e95a3dce967edbd6b3e32315d537f464517ad26911cb3fe6f112a3b26607a39be8490a82c741d25260eab15aa32e188c30d1ff9b2c2551adb1fa53322aa72ffe6057ed715bfab7ec9800d072e0395a4a3185f4ce07d6437b34f36fb426474d2dc76455d412ddc2d928c225dfa5684124ebae749f8984039a88c359e959df1ccd29b9502dbd845fbe211e7447ace5d3e4abf56ee802599bb804431f165c76a0c381cdac42d1509b3124f79a169a645daed284b52e161008f284476273e4f4c2107894c6a045504226384effc565f5eec068214c8e9c9278923bf37a5f869f11c98070e6cdb8ecfe067a34c7d7ee85f04536b5347d7f1b9ea1823b0f78e28425dfbf3d480805d5d87615c41243f5abb7f51b6f65100c44063fe537c5ff12654afce90ebbb81ffd32fc3c64d7a50858a02224cafca3903f7fdbd9edb6a364094f8222bb1d35569de3b28324d23bd3a5a19f1f30eeea2dbd111779a85efcd69e4c05f5bdf6490c61749a80080265f317d41f65a1e06baa10fd6022726c81eaadbd41dc3940f05047002da27deab653029cca0e7b74a3718a3813788a21a833b491adc4323507d238264ce714cba97246c7edba17b6965e41bb3a57056697e4d06aa5a5972854ebd2b6ee5a360440f44d2a50763acb70916448abdbe8b435faef609d4fea206ad7f63111e0a228983948cb6204b7614b051988bf59efb0a035b3785302c8b12c35913f45edc2961e46d42e1a7d1fc63832eb906f08faf87d9309e8c6e302d1ea2dff20770a81a6d5cb07f1a35cd32df50f5e09da9c8eaf5c4a7eec32d293711497d6e74fe43a3fa3518b5638712ebfbdc6472c39a091a047274fd58afa5cfe85680894c4fa9dbd3434ca039e80c72708154c4765ad23ba696c97b2bd687023a7ac7d625e4ad3cd10b0023aed12dbd46c15a2f4b228f5af145e8201fd22fceccf9d2977d11449fd01e28dffc333b9003cdd16b45b3f57c9f2f1bf748e510fecc973201be3fd7ce50cff26f456541a36b1d8ef6c3eb2b3205e20111b5309c66788f4f02369c94f2f601bced40b92bed222c373af355400b8850fda0b4c30b0fa329ca04aacb6f3054b0592614ad8b7f7c73d3e84c48d4f357b1308e5a6ae44bf0c887512c8bd08c05d7382ca50e82f916d7da6925b6b85e02d74ddd0721342a0e6e20e65840f64669ee23ac322e70611f1303678698af4b32228776a1576b937c4939ebd42fdb3d496f2df45f1fa606c0ac96e4779fcbf9cd09a7ec6edac3c7f4606474983c984c8c3c10db9d6886513b4e72c593b4b01763219ff855ca930102a09f95578d6fb3182baff21202d11e6198dae40f1797345d39f2e93f48029020d9e51b0346342bcbc0ac6dfda30327b97d971813d5569fecfbabc67d190940a87f9d81d0ebc9c6a7361bddb2ace7e6ad9132d049cf3eaf86315ac7c983ec7c5a55beac0964a20aa2bcbd7c7c564e746587357dba2b21d8aea1b703807e2000ce39af42ddefa92902ac83d585ce079b45070d020edb1723eba4dd31f193b08996863aeb773fd941d19753f3fd429748ea6ff6acdbe74bf049b515b8ec6eb993346826f7c652c2012f9f75691e8353df16ab0230ec63cf63168a0dba529f3cb4a9a0aeae651faa29568d78b2122c0da318fa50f22e51278e11341ae3f8c6af979ab8bce7b3e768ba5c7bd7038f68a68edd7723633f609774258d28f8a1c7d2c964f2222733b8e36a77a9ea3cd13bca7321859e6b75d571eab2954bd83484a53da28143bcfcc11237aaed1f4aa79ac65002029ee8b45046bb0c8f563bafe26bb4d07028afe18e5f1ecdaf1156faf513f04a3bb0f4500ee13139beb3f6519d550b0ba798f3bd91f97298a1010c78c2119b2e5d20632df921bf0b13be39162224802a941943ae93ce0d2598821dfb2d80e2a5ddc12e30c73b6192df4808c6f8523a72b474a1783b17a0a0a2eb3a6677de2617184063309b5619b2602dcfd3f2cf4497adfc2eccbcefc53a4ea6a2c8d598538c7409c4552d6dbd00a45a7fe346561c0139d0a94314a7916c44e05d027927ceaa9e10338063229adcd3e2886afafc22d8175307831a9de0d35381881847cea3760be699b6ffa2b0742f86590794f3bed385fa26a80e220e16d360d930bad5e08c1556e771bcd885593ae575054aabd8f09197f66614135ee6ac81784e80f0cd4dbb6437c788c2bc48c098509f0d8544ca3f56c43a942abd01d62ca1a954b51e88a2bfbcc90421d67e44778e157202ca0abbeef15ee7bfc8e516e170d60e08c2116d745302dd43444e80604b91d7a9db385489ca92d2d1de1e504bc46f057cb7c1b8322eccaa13c65267a66ba88678ac5fb65b1e42e9b468c63635b39ddb9e145ba4bffaf9d3e0cb7a0780a846796f2ed9c76f71043e7f4f54549857c27a9f407bf7e6bc808f14e146820ddcbbbc0c6c26d185e6964264423a524cf11bbeca12cdda583f7b527db47ae11de41754fc784414aa5bb96129094decd1987505381ca934881887cf8c434231b7699fe0427099490d0aceda773501303e64ddbbc979402404d756fd9848ec1fa52340114a65cf6fd2a7e0aaf34a5632fd698c5970a6ca689acc99bc7eed424dbe51264e92679fcc5fac7deb3bdcc39d8f1f18ebc214cca9949351a5a2cc484b52915331b2e9424a1d65e161fc00f36fd76b40b5c7f416f958e9c984140b9cc256ad51c400785f5aabefb0c62cac7763641f3dca21a6f9801989177498cf7c847f5be5b26bc8a864e85e8eb7e106640c257bc5d76c050caaf5a0483f90122e9c6d6f5014b501f4e0996ef7a83fc59431bc644499e213747734c681ec6c26b2682210f3eaf361c0c9f914fc5b27b8032193d6c9afa888ec4de8ff79272e29ada86cc4eedb11394689ddcb3d2f60f898328ec9d2c7aefd0eb98c8d7de1655408f3c8995fd9ee9190a33b87e1f4ee7b9c7d97cd6b0eb4b061a60999a7936b6769dc8bf4fe8018543cc49f32cacbca95b0a326ff0c0c2f2e7ce6a3d16946709507b9029459b4b4c2b664900ab765049968d9c39112540ef0a4b671d4eea41e34c18bb07668c60a82236dbd937df43115e1b973f00216d2891b1f1774f3e2ac9af0eee1798130842c62d8717870c73d7de65df54559ee847d262cc7fb3bc20c3f96d457b7437fa2a469866598731a1dae626a50dc64ccdc76ba271f66090b7e822d3a9d64facd3631d9cf9587a03645226cf81bbffc91ff5f0670b4e2f8ed2691bf83c9ea5028de82505bceed3df876728e35f03f3f8e1b9d313d365e5a5210b77a960f4a75ef33d5ce949012cfd233afa655f4d44829fcac6be8e2a6ea5fa9595caa51bf12678708c50bf1c30ac09ca9444b75010a369cc188b4ed1702571f1cc7780cb6df5e7cc86789f172abd07b71c5462de050233e04f6bb3be7084fadf0a91dfd03b25cb9ce60776e627fd1fe7467cee54ccfe97cd4face3a574ffcd17363900aaa3e947e62557acb85502fbf60288ffe0a65535540d5f76bc31e138385c938ef58770cd7d6b73382b95d27d2ff9f6e4f987d1b63c99dc2602f1c9725aa70b907b29065453bd15616d02c25a7e5e59149cb2f1c642fb1e358acfc3905b1a6dc43f172585aa7c3eedf43aad9e39aadd4ff9fb1bc2deb2d55fc072cce0a950efba55043f480107dda9c2e068a27a4e936fa53d45802b85d036b11ff3c08e607c876f8bf4b8bbd66550def020207ac7ae0811b5ecaf07346be0b7afa28fa3a51b10063dc2b7fe34b56802a46634fa74f5631ef8e8e5b8b71f4076f54112484658ddf8dba4ec4deb822431debe6bb4a6e30db6812671d1b747a110605eb395850f3c3e3ccd83da9a989f0f5231a8292269a8f16a66dc2fb59094c24dbc0c4c7292b2457cf2a160ba56602133812acfc5f9cca01ac760d7c8d3908616d7b6c948b5fd4b86e87ad97275b55ee235dbd1753e4a909d962fe504ae8db0ac2c8c0a8c4c71adb0ba348c6f8336bc97439b6ec1fac119deff6d570c48bda1b15a7198a7ef59c430f6460976192ee7f213a6c6d0f6fc80a1d106b4a379d30a529751c44ef76abf5110a99dc77e29b0b58345e65de1378638abe9a823e2b47f6cc38a3c72044cad1343d5d40cf159b3973609b887041e04fe1f7b8a11081b4da8c671aca3d5e90b7ceb2642a101206d74197b0daea6a5227a7b6eb30c7aac92d6d854017f4bfeffdcf997fe227764d2bc6a2948d93c5f4ce2a59a9c66e96a1035c32275a0a33516e7513263a755a7be80557428a0d470b748b0d2f0cb6d15d0a52d613460a4c907c6e66447df3ebab88335befd463609ca491db6c985561b2a5daf4c120a76e8ee7ae57d553db066e3b2a7238e928c2c1703e60f42ece540679dcf7bf70150ef498aab7cd9ca447453742e8a6a8f8be8e196e732dfe59d1c20b0646d4dd261722587f525c4ca04e6d6cdad15af1e63941cb01853a5bcfd09f97345df605422214facbd5566e711d7ee2d0bfc341ac2fe48c9d62188aa6bb2cc8077e05aa7415a234347208267bbcbfbb64a41c040137a2751fd16ab12d7b2406035a7db8935153116333645195c589cb2f7531caf875db4eb8c01cc69032f13754c0ece63e9439c0e99a4ce51ceeb0e776abd976a03c12dffcd09ea82e8cc9d00929dbb817ecc4c5b34fdbe73ef9ef38e11e207186d5b4b2e37b81b8f814f1a1637ca440c82754698cdf8506125666d5b06d86f7bb3685255571432e6d272b49fbff4952044d1a809a446ca984c0773e9c89e41f0cef00a11eb8245ac5bca8a2a2bf8d21f8dd66eca10c0a4559afbfe558b35e38c1cf110bbb6db297357b5920359b7a1fc8f1045d7e5a4c228f2b9a03c0fb3a15a163cff4e191561aea5b288499ea3a42373872f3e0fe097a1d852a4df263eb051a3c1fbf449fbc4fb3bc51d92070f8fb8aad2cc38fa9ade2a3c8868c4a51c05bdc1bb4ddc00db5a28cddcc55f3c33c620fc3571f7c0610dbdc3b7c64a7f0495d382ed41bc8924b5d76d1c93d5e917606c540f3e19250fabeba35540b67b9f4b6127a046c7cae809381f8175cce3126153176c3745c535da92f3530c853f7fa4816bce57eb32695f3acb359b307d7b7812b0ca4fa487babc888d91f30914e7956a91fc1959dc951237ae1daca14afdffe6bad6b7f07632628467134ec0e9283f092957208c81da46fb70c459ada29e4059740b6cf5380c18d9d93a683a26e74a2d28a6132be72791a8685a566fb807b5f14a5fc6abcbf2e0a623f827b7d309332f0c551d1670efc635bdf902094d741011c3c948f1190ec6c9e21292cba8b62df24cc783e48b9f56db3335fcaea3057027df10680b3166c36cffbc0ad05c704d881f44fe4718490b786f8f373e2ad9abd72da53088dc0c8c70a269d2dd16a95773e67b603b30d121839ee3b5765e5729817658b779fe10016690bc346c20ffc2e8b0cb58c446919fdec107c858930de38ec408ddf18f01bb2d25daac06ed15e57cd3ddca1cae723da4542b9185a6cf681336de584e569a0802d6a2abbe8352156d410604eea891c2e3d38229868a2d35c17f6ff0ee85d13b6b61de205f851119f4c2c760c40a6bf2eb4c8dda272ebc088effd1afb872b1c0deafdb441f0ef9f883e25471b12e119f3b71ad2352b0a629c0067b202dd715456031bc4e8e3e30002d03d384ffcd43811e7e7415ec8349b3bc03929e68894ec84995d3710b6145608663de5f81209315681e8805a8740094c10f4e820e27b0eae4ca146f5e7cdb2b4f99299a7a84a108c736c0fbd9eca6610246b3b35ad50ffb5e0c07a75b926315eb3cc335b8555939ce42551b709fe620be1e22c21925534f63958852475d29e0667c05c4671545d82949b9af951d4e81398b12f7f02c5a5de0f994e10c25f2308fb37da5233660d228844c6f8ed0e4a62dda794cca248324b637df0769052faea18fd65b2257e40b07a0fc0e9edafe23c9bf116ce87ec6f3807c3f97ef0ec3269a8b192b8b4e84e86ffb5c7c8f1c0edfb3599945e7e49095074ec06d0d7befaf52182707a1071d10b5258a69f02c7f8a753870c9bd0ce61c5a59e6ae3cd3cd77dc6217be85901af730a4ec4329121736aae62a8a2a74003a38614640d8b2a730a0172c65f2fdeee5a8ddcd1dbcd28cecef18e21ab4884b6aeadac98ca4901a99aec9c9973efa2ceb2e9308b54b61028bf4fca5ce671f19c5398a4c2678e1ed6f3f031d69db6230ccbef3ccc67d2109010d0bad8ea174a1b67b921b96c63e74c268b5ec4d27c14edefcc3af0b40644f73a6e86bf7a43438c663e4b8b88f8e93cd57f8323d935cc461e6bdff389a77e9bd72a96dc8eb23131131e24d02fcb3c07bf7a7892e1a5abc6a47ab0dc53dbe77d65d78e36781265786bf12a71a00e1327b20b95e88ee79a67369897846f83ab0b12ec208158d734388719446eaef0145744c3d9834d329fed169e8340dddf9dc5c76ad12d0303751f8a60ce80b51230a9a19ff57dcb83c143cabe68598f17edb68371c375a3c07434e16642c5c5cecd3baf0c39de2e7f70969e95ff0b50fed44d69c406832208dc276800204141690c189efd35b27effb3482e4c190f59a7975ae7e8d862b918b4d1597d3622a42584d589a36a52712427c69ed3b8ef5836ca077081b68472336bcacea036b0a9da4793bb06a1d234dfd6d0609b900295876ae52eb79bb4c62e7ab27f66e104795c3574f3a786ed4dd30fb3c5bea92e3204a34fa07099e795b75b79c64dc8d1aeb30ee078ada1d069ee2f87f0a0b8136ebe4875f55990628ad719d5caa4990e24b28e95140051d2a6d717f4b296ea2e4c4ee250f335ea980b39a1d7e4da87f231ca02076e88fd89e1eb420c0f4038977276002bef4b3443fc048d11b8b6b549213e12e2e805e24d8625a18f974a1ce1d89dc7749f2608c5beece1464c2d00d2c89dd642039b4feedc23b84f31a6c452e262ec66c6f195d869bf0356de32a0268a842a916c5abf279297f71f5f264f01ffdcf453c717d5159b05ead6743b6c732869d054e40d1b2a7415021eb3ff3b8b66c9f2f6d375539844266c2a69155df780a46e5ed5508e297af93b36a1bc3348d699ec4655be70610487fe777cf77815822950d9daff356c63aa953b46013e7cd7e3aa495eff6d2c13bd6a85c64c3c411c47eb2de5788d7998571d3831aaa822b5935e65cfbaecd094e8083b02d77719f9885691cb6bd8dc4db6f05642a5a6dbde294777deecbf75ac4763bdfd29b1d895959db2377523b32b867bc3ba503b14dccc4925df18873b14ba5e2898dbb8bbd1fcf50c3868b946085ed9f7d4df7deea26653adacd4c842f2414342bff0277975231c8e06bc7f515c2b02ce05469c2f3e784aae032fd062e816cce875a1fc14c0cd18936ff0f5f3951bac797c7346cd720ca74a28fa804d33404c6a2ed4407cf462e281e40927c288077e8a668214b7af280f4647adc337422fca84a3d7dee77e6b6f75f9c000f1952c5e9d4b25d6d05c5c20c15b8173a79fdf7553eb7cb1e8471f77655000d1a1fbfa8ddb11565ec1d8772d09d5713d539803099caf12af217efb18520d46a82ab394abddf9bc05a91e9cd7f70255536e839930c6941b77459eed19b02580cd2953cbdf646eb54d1096ee1b831bd7d7be8a456c4678436e6fd75b615d3620eb3e023caf00cf82f9f50ac44de8321300c48faa26bec25cd1afa8b46dc226aa6eaa3e344d5282e887a9ff755efbc94af06b65e94ccb74ca8fbd6d516b32a3f57d5688899654329283c4a28831a7c968c6b4e07651f8a67d460f6b584eaae578e96c60eb9f7e00e33732dfd0d9a98389e191819b5e5ccd06b8af4bc9b97ba106d555df493f29baf2e9cec462cf369ddee5ac077002d2c8b7a90f4a3cb104ce76bbe7cc91ee3953170818b24a165adab39925d85814e6f07f4def7636c6026a63aaa84cc339bb48d26b85cb6b417e007db7acb2a21c18c561c197c26f66a2e647c1b71918d476c7d2984f29493668bf82ace0d6ce5195a09b065958820c010ba9416005a78d9de1206613f335b12118130170261a77b1e836ace38d515619541aef4e7b7ff069547938bfc8e03c4caee6101af1a1e24a7c34c12d4f8d378670fcfe2bf1d1acf71bbfdf5c89a6773a4b3b208210e6b23f2feb4e65b197946a0072becf03ba7e26d8145bf875cef5fb8fadcbdbbdb42e4f7e386cac55fc6ed055f2db4dcc945953935935e7278667ccab7169cd6cac21b4cba717ba9bdd062f3793d27ac7a3f98f461f852b0bf176ea0f5eb3ff38190c1d0d9383fc7b94dc0a640286212d46d28b791536ed07758d0db02daafcc81757ed8327c9d9f12ae14b3e117f4cd9113f674eac421de3e330c23459ff61869e6cbff389caef6ea0ae8669813498db649972fc0f6ceed0858bd18238fce9730f342cb09041e51f1b87be77b04db514c1e8617dfddfbb805548687ea78962e7ac369484dbbec7acd2a051dd7c0f73e6d106410fc955680b5b10436e58ab88715e18254a7a1fb6a7eb03ad6b367932becff781b229e0592a0f8fd68d11473e692a793083a9c404bce3812c95fe580a100b06b13805e25c11a4f8281b566e3127096fde2e1306a34892b91bb218d7f256f2f064475f6bba42cd74cf87fe58b2f119ac9ffc9c1ee0734aac6c52e8bb24ead7871cf034c663dd553e5f84459417bc7ba3af8221b472b6b0e12e0485737a36073102e07cf68e4cb0617f1a23bd76ccebe4081ee7ab8c4aa4f7ff38f041bc0374c7bfc6fb927d2984fb794a02b70cf0f05b99f249eed3159687f6352ce139bcacba7d0f1c260d406089883c2f6d006730dabdd33f85a22af6f82eb0306e928bbc130e671d2ae800d34b5fe48a5ce6323876b6ec0622adea075c2becbfb8a13ffefc0945b09e12ec591c1bc06ca69f5d2681dfb85f1d6daa7018d3e16c5fb2be6993ddb9cc699cf4e9203002b61959abf24582e6092321e9593b792519826012d4007b9e0d6f8049bfccf456e29ae8d90922205f95b52d51d727854246cd5c7d6f4074b4589494bf79462c1a1ec468d9091705555ce11c603c3584525f8350ac15df36f8c818ebf91e8d8caf7e42d01667bc0cb9f827825b42df9912ec9e752ab66b3a17a412a77dc18f075decef89d50f81d5534af81e02058f5f8bc033d453c37bc4af2936e658a2a44823e029b951049a4d94c8f6173831abc799ab7c3611a698195a155d79855bb93c88afa1e530f86c168831fc8998bf69b4e11913384adbab62b648f4f33375e8ee54d9993bb0642baca98795bd2e741783dc0e21cb613597ffcd981aadb2f2e8878b6adf375ee4fe28b97894067f954afdbc1229f02aa243554c3b612e8cf99c99c1c0a1f3ce3af94af5adb4177b5d5d382ad02559b8c09ae44a4feedf2ce1ada49689753686f6afd42e886d41783095dc2a6218d463dfca5f0b37b902b1586440eac090ba6a1bf3fd5a0f6b517eb23a3fa5776099d316dc035c25a26a4fd01267976baf9f9ec74667c6369495f21a3dd1e00901ca516c2c821a19bec563306513a52fd7f05ff7730df663abeda739c0a8cd975a5fb092177aba8b5732d799a0b5eb57223911f5bea700f591a81e8d5af22cda6ba569f8b833022aaf261e8438a3c798261428a6659dbc951c1a99cb6c2e1b461345d87ae12ac8cf84e61db7fc53a3390e98fc3be36b2f533a4594bb1198b7ea0d5ae371f36545d460a4e9baf53f8819086c2891692f6b7ee94b35e91579498a61d1f2ba343efb93c0a07087692d94d16f72803aa0434367ad895f35b58f10f64c23902ad459908815523a9870a88233cbb4c6b952b0582e69925becd1896a6d30a38e6a8781fab99fb5014bb68122306039a2f5372b9901430431676564ae54c82cfeef3c0ac05acb440f384647f0a471ead3786171eefb361f01a8c4c763388084063f3e6bd60f4fa50c24c67017107770c77c9ed162e20db285a732b3a289dc4cef8d3fd64b23ad1f799d84a8df1c5430b4ebde0b7e0a38b12b9de3b473fb7c89d7a46b14c6e38b64bd3e03800e34ff645a62b885f3cee6cd17b97f960f1f7f104f84554d708ccccf915de7aa3859cf3e435f887b97426df954537fe6489b415347d4041f7850722cb12ec77a52d2b612461e66edc69140ff14980b452bc6acc0a8282a7deb5e05608c37bd40f9e03dab189e538dd2249e84f775962cbabc23e6671a1eaefbb95cf69be886934a1c60feee87a58d3fbed10b026e73d151479a190a4de9816b87e06fe5ef1bfbee238b5f13aec36a832dac4384a51460aa0988e5baadc76cb9980df77775e9bf9803e2ea900a3c886b4160ce5736646be787ba4a87937ffaf7154c5d82a81eda2f52197b0435e4f61cdfb99f29a77f74b1e0e6b59cd17de8253cdfabf190b188d44bebdc714aa2517862c122ae8de6c1276894bff661ed73014b01be66c87f6afd21489115fe3b66431234eb4cfc401474a40f2936fb829a9646687c8d8cf7378e7eaf79f9bd71b0b4946b0be82d4cd2c076289e8d27393fbd5b875ea710ebbe8e3a5f990c9b8359d125a39a2b9dc0752af74b2", 0x2000, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f0000006600)=[{{&(0x7f0000002e80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}}], 0x1, 0x200440c0) 5m12.663473195s ago: executing program 6 (id=245): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = accept4$rose(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 5m11.517839277s ago: executing program 6 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket(0x2, 0x2, 0x1) io_submit(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(0x0, 0x10f4c2, 0x10) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001380)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT], 0x1, 0x1256, &(0x7f0000002400)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m9.409619568s ago: executing program 6 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 5m7.587964493s ago: executing program 6 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close(r3) 5m6.513351074s ago: executing program 35 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close(r3) 4m55.805001112s ago: executing program 1 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRES8=r0], 0x5, 0x1525, &(0x7f00000041c0)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{0x0, 0x40}, {0xe}, 0x0, 0xba}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x23) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f00000006c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfe\xff\xff\xff\xff\xff\xff\xff\xff@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe1\x9dy\xe5\x9c\xb75\n]\xa6R\x9b\x14\xd4\x96\x91M\xf8\x87\x03wu/\xbb\xa1\x15\x995f\x0eavN%V\xd8\xdf\x10-\x82\xc7:\xa7;D\x1a$\xac\x96\xda\xc9<\x8bM\x9e\xa1U\"\x86f\xa9\xd2\x10te\xc8\x9c\x14K\x92\xb9_\x10\xdf0%\x84\xa6z\xd0\xeb\x8e6\x03L\xc0^\x8f\x18z\xc1\xd4C\xaa\xcfU&\xe6\x8e\x87>=\xf43\x9eM|\xeb02\tm\xb2Lz\a\xbf\xf2\xa1lR~\xc9jk\x1a&\xff\xa6\xc0.\xa0\xad\x82[\xfeKc\x80\x80\x8f\xc8\xfcS=\x93\xf0\x03\xa1eq\n\xab\xf7\xe2\x19\xb4f\x187\xd7\x11\xa5\x12\xe6\xab\xb5\xe1\x8c\xd8\xcb\x8ej\xb4\x7f\xe3s\x99fkA\xe1+\xf1\xa8\xfa\x84:K\xcb \xa7\x06\xd6\xfd\x90\x01\xce\xf8M\xaa+}\xe4\xb8O\xe3\xc4\xb4\xc8\x14\xd6z\xb3\xd6\xf3`Z\x1c\xb2n\xed)/\x05\x1d\xff\xaf\x14?L\x13\xf2\x80\xc2U\xfc{'}}, {@subj_type={'subj_type', 0x3d, 'ext\x1e\xbaT\x02H4\x00'}}]}, 0x6, 0x512, &(0x7f00000014c0)="$eJzs3c9vI1cdAPDvOHabdANOC4dSiXZpt0oRrJM0/RFxKF0J6KkSotyzIXGiKE68Spx2E62oV/wBBVQBEidOXJD4A5CgfwJCqgS3nkEryLIHLiujGdubxLFDTJy4m3w+0tt5817efL9vE9vzMqNMAJfW1Yh4OyJGIuLliCi22nOtEvVmSb/u/t6dxbQk0Wi8988kklZb5zGvtIalfvBOxI+So3G3dnbXFiqV8ubh5t3rq+sLK+WV8sbs7Mwbc2/OvT43fcKZJPnjescj4q3vPPjFR7/93lt//OYHn83/45Ufp2ndbPV3m8cgNKdeiNF2Q/0sogxP+nOTz2YIAMDj4FpEPBMRL0bE16MYI3HsaTQAAADwGGp8e/zJdhUAAAC4mHLZvbFJrpTd75uP8cjlSqXmPbxfjqdylepW7RvL1e2NpeY9tBNRyC2vVsrTSfNe4YkoJOn+TFbf33+1Y382Ip6OiI+LY+l+1gcAAACcjyuH1v8RD4rN9T8AAABwwbgYDwAAABffCdf/fzrrPAAAAICz4/o/AAAAXGjff/fdtDTu793JngOw9P7O9lr1/etL5a210vr2YmmxunmrtFKtrlTKpZH2qN5Pe65Uq7dei43t21O1/FZtamtnd369ur1Rm8+e6z1ffuac5gUAAADse/qFT/6WRET9W2NZST3R6uu9ygcumSTf0XDza0PKBBiIkX4HXN0+m0SAc9f5mQ5cHtb4QNLZ0HFiMJq1fPSzIwP/3H+smf6HAAAAAzD5Fdf/4bLKDTsBYGh+OuwEgKHJO82HS6vQ/x2AwAXzzv/oH+3VceLr/41GXwkBAAADN97c1KN1LXA8crlS6dFlwWR5tVKejogvRsRfi4Un03337wIAAAAAAAAAAAAAAAAAAAAAAABAfxqNJBoAAADAhRaR+3sSEWmZLF4b7/z9wBPJf4rZNiI++PV7v7y9UKttzqTt/3rUXvtVq/3VPn7t4HFgAAAAcAqFY3vb6/T2Oh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABun+3p3FdjnPuPduxFhMdIufj9FsOxqFiHjq30nkD4xLImJkAPHrdyPi2W7xkzStmGhl0Rk/FxFjQ45/ZQDx4TL75EZEvN3t9ZeLq9m2++sv3yqnde9G9iLvGr/9/jfS4/3vCyeM8dynv5/qbPvJaCv+3Yjn8t3ff9rxkx7xX+oVsHB49+YPd3d7fWnjNxGTXT9/kkOxpmrrt6a2dnavr64vrJRXyhuzszNvzL059/rc9NTyaqXc+rdrjJ9/9Q/1j3vEv3c3l20Pxm/Pc6KZ4Ye95n+t16Q6PPz09t6XmtXC0fgRr7zU/fv/bLbt/v+f/ky83PocSPsn2/V6s37Q87/7y/O9ckvjL0U8bPT8/hcbveZ/QkfmvO/Dkx8FABiYrZ3dtYVKpbx5DpUXXxvcAZNzylmlR2X085HGeVe+e7rhUd5snw6f5jifpZVGMoB5pWuGLLHWGf2BVAEAgAtmfz0w7EwAAAAAAAAAAAAAAAAAAADg8vq//njYC/2N6oxZH85UAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO9d8AAAD///HszOo=") ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m54.783868552s ago: executing program 1 (id=294): syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000b}, 0x94) 4m54.656106374s ago: executing program 1 (id=296): sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x1) write$FUSE_STATFS(r1, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0xfff, 0xffffffff, 0x40, 0x100000000, 0xbdd, 0x8001, 0x1, 0xd93}}}, 0x60) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) 4m53.547977976s ago: executing program 1 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}]}}, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x40081) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 4m52.581994394s ago: executing program 1 (id=302): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1002, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m49.119980112s ago: executing program 1 (id=309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getdents64(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m48.624213371s ago: executing program 36 (id=309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getdents64(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m45.5789198s ago: executing program 3 (id=316): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m44.00386226s ago: executing program 3 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 4m39.624800505s ago: executing program 3 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 4m39.150542935s ago: executing program 3 (id=331): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @loopback, 0x3}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x16, 0x0, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x80) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r1}) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000340)='./file1\x00') 4m36.700241282s ago: executing program 3 (id=337): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x9961, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m34.131815092s ago: executing program 3 (id=342): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00800010003b15fd070000fbdbdf250000", @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005000d"], 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m33.972251115s ago: executing program 37 (id=342): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00800010003b15fd070000fbdbdf250000", @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005000d"], 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m8.379570899s ago: executing program 8 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 2m7.221746761s ago: executing program 8 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x2, 0x1, 0x7, 0x8, 0x7f, 0x889f}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x10, 0x8}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048010}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m2.421495494s ago: executing program 8 (id=686): preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0xcd, 0xfffffffc}}, 0x44) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) 2m0.490036561s ago: executing program 8 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r4}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) 1m59.303392634s ago: executing program 8 (id=695): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) socket$inet6(0xa, 0x80002, 0x0) 1m57.017718548s ago: executing program 8 (id=698): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x28, 0x4, 0x76, 0xfff00000}, {0x50, 0x7, 0x48, 0x5}, {0x6, 0x25, 0x7, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0xf2ffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_emit_ethernet(0x1fc, &(0x7f0000000100)=ANY=[@ANYBLOB="ff"], 0x0) 1m41.177296942s ago: executing program 38 (id=698): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x28, 0x4, 0x76, 0xfff00000}, {0x50, 0x7, 0x48, 0x5}, {0x6, 0x25, 0x7, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0xf2ffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_emit_ethernet(0x1fc, &(0x7f0000000100)=ANY=[@ANYBLOB="ff"], 0x0) 23.90411923s ago: executing program 0 (id=845): ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500fff7240007800c000180080001406401012008000a40004000020c00028008000140640101000900020073797a3100000000050001000700"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 19.393834297s ago: executing program 0 (id=853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd27, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x13}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c"], 0xc3}, 0x1, 0x100000000000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400004, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="a3", 0xff4b) r3 = dup(r1) syz_genetlink_get_family_id$nl80211(0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$sg(0x0, 0xffffffff, 0x8002) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xfd58) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) unshare(0x0) 19.104416052s ago: executing program 0 (id=854): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@jqfmt_vfsv0}, {@user_xattr}], [{@uid_gt}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'blkio.bfq.avg_queue_size\x00'}}]}, 0xff, 0x48b, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2077) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000d80)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x38, 0x7fff0000}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x424283, 0x180) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 16.436007093s ago: executing program 0 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x20044044) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x100, 0x0) 16.231397987s ago: executing program 9 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000680)={'veth1_to_batadv\x00', @ifru_flags=0x2}) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0x3000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f0000000ac0)) sendmsg$sock(0xffffffffffffffff, 0x0, 0xc0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x7, 0x3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000640)=0x3db34a37, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040080) 15.340547274s ago: executing program 0 (id=862): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x88) socket$kcm(0x29, 0x2, 0x0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) 13.783846755s ago: executing program 4 (id=865): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000580)={[{@shortad}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@noadinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x1) rmdir(&(0x7f0000000100)='./control\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') 13.769364164s ago: executing program 9 (id=866): socket$netlink(0x10, 0x3, 0xf) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x688248b0872ae0a1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x18) 11.234282124s ago: executing program 9 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl(r3, 0x8b21, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x1670e68) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') 11.075039227s ago: executing program 0 (id=870): openat$ttyprintk(0xffffff9c, 0x0, 0x20c00, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 10.249163163s ago: executing program 9 (id=871): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 9.455955457s ago: executing program 4 (id=872): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_flowlabel\x00') mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) openat$cgroup_ro(r0, &(0x7f0000000640)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$eJzs3E1sFGUfAPD/bLv9gBfoy8vL+4IoBTQ2JrZQUDiYGExMPGhixIMcm1IJUsDQHoQQKYnBM4lXQzwab5p41aPxZOIVDx5MDJEYLnwkJmNmd6Yf+9UuXVrL/n7Jdp9n5pl5nv/MPLOz83QngK41nP1JIv4VEbciYls1u7TAcPXt/t0rkw/uXpmMuTQ98WdSKXcvy+eK5TbnmZFSROmTpGaFVTOXLp+dmJ6eupjnx2bPfTg2c+nyi2fOTZyeOj11fvzYsSOHDx19efyl9oNqUF8W173dH1/Ys+uNkzfemuwtpg/k74vjaKq3vWYMt5j3XHur+sfbsiid1G+nq2vaGFZsID+sy1n/vzK9/+R6NwhYM2mapv3NZ8+lta7VTQE2rCTWuwXA+ig+6LPvv/fullf2PfgJcud49gUoqcR9P39V5/RGKS9Trvl+20nDEfHe3MObg/HwZrS6D/HrY2oAANB1vj9eXAlm13/VV3VOKXYuKrc1H0MZioh/R8T2iPhPROyIiP9GVMr+LyL+X1tBEpG2qH9HTX6h/m/yUYTS7VUH2UJ2/fdKPra19PqvuPqLoZ48tyWiuGCeOphvk5Eo979/ZnrqUJP19y1Tf3H9V7yy+rP3hRKl2701N+hOTcxOPFq09e5ci9jdWxt/0pvtuGIYJ4mIXRGxu431Di1Kn3nhyz3zmfLScsvHX5E2GNJrezyukfSLiOer+38uluz/hRqT1uOTYwMxPXVwLDsKDjas48efrr/drP5l4//2t9pFXj/63YnVhj0v2/+bqvGXI4+9Mn67EP9QEpHMj9fORKQ97dVx/ZdPK+sdPlA/7xGO/76YmJ3oS97NM1UfTczOXjwU0Ze8WT99fGHhIl+Uz+IfOdC4/2/Pl8m2xFMRkR3ET0fEMxGxN2/7vojYHxH1of38R5H64bVnP2i2bZbGv7XZ8T8/Tt1pWfynGp7/luz/hfH6FSaKhbMpPWf33XrQ5OSxsv1/pJIayac0Pv8lS04RK23p6rYeAAAAbAylqPzvf2l0Pl0qjY5W7wHtiE2l6Qszs3sj4vyp6m8EhqJcKu50Ve8Hl5Pi/ufQovx4Tf5wft/4s57BSn508sJyt0aBx2xzpc8ndf0/83ub93mBDagD42jABrVc/995Y40aAqw5n//QvRb1/7kmReb8pww8mXz+Q/dq1P+vxlctB+icM2DjS/Vl6Gr6P3Sv3nhnPl352XPDX9sCTyKf/9CV2v1df3uJtH966tWIqJ01UDfl0uUYeDzNGGxQ17oksiurDq6wHBErKzz4KFUUl4DNn/BQam+F/VE/qydaLZW0fI7DX2ma1s/Ktsqy7Tm9s+MHf/FMlE4fNl8v9NNy5SFL87M+37aCSFeRWJfTEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMf9HQAA//8V1NEi") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000000)="0015e8bbffa06120", 0x8, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8f", 0xba, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r6, r5}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'sha512\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000800053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 8.732249602s ago: executing program 9 (id=873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) clock_gettime(0x0, &(0x7f0000003000)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000000), 0x5005) 7.499924955s ago: executing program 9 (id=875): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a01ff"], 0x14}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close(0xffffffffffffffff) 5.6716254s ago: executing program 7 (id=876): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, 0x0) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000100), 0x49, 0x0) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000580)="13a2c3b3b1", {0x9, 0x2f87, 0x3447504d, 0x4, 0x0, 0xcd, 0xb, 0x2}}) 5.532837443s ago: executing program 4 (id=877): socket$inet6(0xa, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) accept4$unix(r4, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4000) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704acf07fbfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd652932611d6c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11", @ANYRES16=r1, @ANYRES16=r5, @ANYRES8=r5, @ANYRES64], 0x5, 0x483, &(0x7f0000000580)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 4.347851136s ago: executing program 7 (id=878): syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) clock_gettime(0x4, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x7, 0xa, 0x20, 0x80}, {0x1000000003ff, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x1}, {{@in6=@mcast2, 0x4d6, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x7, 0x78}}, 0xe8) sendmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000001580)=[{0xd8, 0x0, 0x3ff, "d8c2c1c770c2cdaa889e83b12a544c9cac0dc4855f37245ea38f2cfa85d1802466bf5e1cf814aba94399a4107e80bef68c3f5598b3487c3a27b7d0fe8bf2a4a24a258a7c7a0c3eb5ebb6e980da5eff0452e57a466ce58e976a5f4962c66f7d4bde3630f5713c112ba5613335573907ccaf2cafbc8a8d0eb32cf58d6ec7aeecd72a1a0baadc84425d1ca197d8ec7688c5b22e02666ae3332d1d39fe76ec54e578c4201c574942159524887a536e899f85a866c1dc2dab75efa49a06a79f166187523be2cd54"}, {0xd10, 0x19a, 0x2, "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"}, {0x1010, 0x110, 0x2, "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"}, {0xc0, 0x104, 0x5, "e8119e7633faff40ba4385d094b9decfbff8d9b44a904c839dcde2702e9416809a644ef885346da5ef90089cb436cb5d3b0ba004ed59dc933e32905c0a2ddfe72ddfc028c70189d628de76cdabf5675915d4fc2839af2112e0880b15b63f56d851b5b72ee36da50469d4cdb1624440e19b59ac8fc1fe39906fd20cc6b265b70fe2e3326b0f3b9f22c7948bf41967049727f85e0ebaff0615edfb582222a61b5a9dd0dfd0d270a66621225013b2e1"}], 0x1eb8}}], 0x1, 0xffd8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000004c0)=0x1f, 0x4) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.630351629s ago: executing program 4 (id=879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101097, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000800)={"54a41f7614f42e2f8c19cb810aea5bce", 0x0, 0x0, {0x2, 0x616}, {0x100, 0x4}, 0x2, [0x8, 0x0, 0x2, 0x1, 0x10000000, 0x7, 0x8, 0x5, 0x7, 0x2d, 0x0, 0x7, 0x6f740588, 0x1fffc0000000, 0x10000, 0x4]}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) 2.622681469s ago: executing program 7 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x54}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @mark={0xc}]}, 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x404}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.53594423s ago: executing program 7 (id=881): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff8000000c, "00000000ffffffe3", "71000000009f00000000000000a4c800", 0x8000, 0x2}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.518053761s ago: executing program 4 (id=882): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 1.313416264s ago: executing program 7 (id=883): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, 0x0, 0x0, 0x2208010, 0x0) setgroups(0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 9.337759ms ago: executing program 7 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc0405602, &(0x7f00000001c0)=@fd={0x6, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82, '\x00\x00@\x00'}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400200100"/170], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file7\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x308, &(0x7f00000004c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xc34) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) 0s ago: executing program 4 (id=885): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x4, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x7f}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x81}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000000000000000000000000000850000006d000000850000007d0000009500000000000000b3c18ae03f75d805164dde77efd76d91de4d0279a74489d2409d3a5be9ee5a6599426ecfa53c0be1d135573c1ac06d4291ed1c080d4f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x48}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/124, @ANYRESOCT=r3, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRESDEC=0x0], 0x110) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0xc4, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x401}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x78, 0xa8, @random="ecad53ed33fee732b3f51554673cf0358e688600260180ac8a40d052bc8cf642a745562c5665fa0a60a6733ff3917433f0ef1f475b6849baef52524ca3acba081e133176a387c123fc2d375a8e27211cb6e8260a51968964bdb5491fe49433875de1809a76421c5e79ff5a55f81e40fa5673f903"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000000}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x80) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @mcast2, 0x1, 0x7, 0x2, 0x8}}) close(r4) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) close(r1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000001}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) kernel console output (not intermixed with test programs): ange from 0 to 512 [ 148.620984][ T5749] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 148.775846][ T5749] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 148.825143][ T5749] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.200937][ T5769] loop4: detected capacity change from 0 to 2048 [ 149.268467][ T4718] loop4: p1 < > p4 [ 149.300436][ T4718] loop4: p4 size 722688 extends beyond EOD, truncated [ 149.307254][ T5782] netlink: 'syz.1.244': attribute type 12 has an invalid length. [ 149.315580][ T5782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 149.426472][ T5769] loop4: p1 < > p4 [ 149.468965][ T5769] loop4: p4 size 722688 extends beyond EOD, truncated [ 149.966999][ T5793] loop1: detected capacity change from 0 to 32768 [ 150.062237][ T5793] gfs2: fsid=__"_z'˱1 I3wx9: Trying to join cluster "lock_nolock", "__"_z'˱1 I3wx9" [ 150.076226][ T5793] gfs2: fsid=__"_z'˱1 I3wx9: Now mounting FS (format 1801)... [ 150.104711][ T5793] gfs2: fsid=__"_z'˱1 I3wx9.s: journal 0 mapped with 16 extents in 0ms [ 150.226288][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 150.290640][ T4718] udevd[4718]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 150.641619][ T5805] loop6: detected capacity change from 0 to 8192 [ 150.763991][ T5805] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.827421][ T5793] gfs2: fsid=__"_z'˱1 I3wx9.s: first mount done, others may mount [ 152.514768][ T4718] udevd[4718]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 152.537937][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 152.700268][ T4715] udevd[4715]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 152.757658][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 154.208196][ T4840] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 155.290566][ T4475] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.478496][ T4475] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.614004][ T4475] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.617848][ T5859] loop4: detected capacity change from 0 to 64 [ 155.683324][ T4475] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.774679][ T4247] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 156.174744][ T4840] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 156.182378][ T4840] usb 2-1: can't read configurations, error -71 [ 156.283558][ T4247] usb 8-1: config 0 has an invalid interface number: 198 but max is 0 [ 156.356325][ T4247] usb 8-1: config 0 has no interface number 0 [ 156.362483][ T4247] usb 8-1: config 0 interface 198 altsetting 8 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 156.373929][ T4247] usb 8-1: config 0 interface 198 altsetting 8 endpoint 0x86 is Bulk; changing to Interrupt [ 156.385158][ T4247] usb 8-1: config 0 interface 198 has no altsetting 0 [ 156.392243][ T4247] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 156.402894][ T4247] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.413997][ T4247] usb 8-1: config 0 descriptor?? [ 156.435241][ T5853] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 156.442357][ T5853] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 156.680436][ T5888] loop4: detected capacity change from 0 to 32768 [ 156.792093][ T5888] gfs2: fsid=__"_z'˱1 I3wx9: Trying to join cluster "lock_nolock", "__"_z'˱1 I3wx9" [ 156.807159][ T5888] gfs2: fsid=__"_z'˱1 I3wx9: Now mounting FS (format 1801)... [ 156.856966][ T5888] gfs2: fsid=__"_z'˱1 I3wx9.s: journal 0 mapped with 16 extents in 3ms [ 157.325965][ T4847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.585384][ T4247] usb 8-1: string descriptor 0 read error: -71 [ 157.593509][ T4247] ftdi_sio 8-1:0.198: FTDI USB Serial Device converter detected [ 157.602752][ T4247] usb 8-1: Detected FT-X [ 157.625190][ T4247] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 157.644876][ T4247] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 157.664780][ T4247] ftdi_sio 8-1:0.198: GPIO initialisation failed: -71 [ 157.665178][ T5888] gfs2: fsid=__"_z'˱1 I3wx9.s: first mount done, others may mount [ 157.909074][ T4247] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 157.937273][ T4247] usb 8-1: USB disconnect, device number 2 [ 159.475162][ T5126] Bluetooth: hci3: command 0x0409 tx timeout [ 159.504957][ T4847] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.514050][ T4847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.538407][ T4247] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 159.605609][ T4247] ftdi_sio 8-1:0.198: device disconnected [ 159.617709][ T4847] usb 4-1: config 0 descriptor?? [ 159.648641][ T4847] usb 4-1: can't set config #0, error -71 [ 159.688964][ T4847] usb 4-1: USB disconnect, device number 8 [ 161.064634][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 161.504857][ T4841] Bluetooth: hci3: command 0x041b tx timeout [ 162.495386][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.558866][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.613001][ T5884] device bridge_slave_0 entered promiscuous mode [ 162.652246][ T5917] loop3: detected capacity change from 0 to 32768 [ 162.675639][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.701173][ T5917] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 162.720237][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.744850][ T5917] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 162.776433][ T5884] device bridge_slave_1 entered promiscuous mode [ 162.883063][ T5917] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 162.925263][ T4383] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 162.932528][ T4383] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 162.994007][ T5972] loop7: detected capacity change from 0 to 128 [ 163.082175][ T5972] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.124803][ T5972] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.214731][ T4383] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 282ms [ 163.279120][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.300776][ T4383] gfs2: fsid=syz:syz.0: jid=0: Done [ 163.320697][ T5917] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 163.366739][ T5917] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 163.426899][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.585474][ T4247] Bluetooth: hci3: command 0x040f tx timeout [ 163.920868][ T5884] team0: Port device team_slave_0 added [ 164.315394][ T5884] team0: Port device team_slave_1 added [ 164.562471][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.599723][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.681500][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.715012][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.722005][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.861373][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.894746][ T4847] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 165.274783][ T4847] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 165.329470][ T5884] device hsr_slave_0 entered promiscuous mode [ 165.330594][ T4847] usb 5-1: config 0 has no interface number 0 [ 165.353563][ T5884] device hsr_slave_1 entered promiscuous mode [ 165.510682][ T4847] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 166.114632][ T4847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.123161][ T4847] usb 5-1: Product: syz [ 166.129695][ T4847] usb 5-1: Manufacturer: syz [ 166.134384][ T4847] usb 5-1: SerialNumber: syz [ 166.141257][ T4847] usb 5-1: config 0 descriptor?? [ 166.146799][ T5884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.159766][ T4841] Bluetooth: hci3: command 0x0419 tx timeout [ 166.173311][ T5884] Cannot create hsr debugfs directory [ 166.246185][ T4475] device hsr_slave_0 left promiscuous mode [ 166.284691][ T4475] device hsr_slave_1 left promiscuous mode [ 166.302744][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.317386][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.337550][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.348692][ T6014] loop1: detected capacity change from 0 to 256 [ 166.365540][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.397762][ T4475] device bridge_slave_1 left promiscuous mode [ 166.414830][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.424849][ T4475] device bridge_slave_0 left promiscuous mode [ 166.452795][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.456463][ T4847] pl2303 5-1:0.161: required endpoints missing [ 166.522217][ T4847] usb 5-1: USB disconnect, device number 3 [ 166.551270][ T4475] device veth1_macvtap left promiscuous mode [ 166.574776][ T4475] device veth0_macvtap left promiscuous mode [ 166.591950][ T4475] device veth1_vlan left promiscuous mode [ 166.604904][ T4475] device veth0_vlan left promiscuous mode [ 166.657607][ T6014] loop1: detected capacity change from 0 to 512 [ 166.683310][ T6014] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 167.498022][ T4475] team0 (unregistering): Port device team_slave_1 removed [ 167.508409][ T4841] libceph: connect (1)[c::]:6789 error -101 [ 167.515540][ T4841] libceph: mon0 (1)[c::]:6789 connect error [ 167.535224][ T4841] libceph: connect (1)[c::]:6789 error -101 [ 167.544251][ T4475] team0 (unregistering): Port device team_slave_0 removed [ 167.554492][ T4841] libceph: mon0 (1)[c::]:6789 connect error [ 167.579050][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.610178][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.644644][ T6012] loop7: detected capacity change from 0 to 32768 [ 167.831805][ T4847] libceph: connect (1)[c::]:6789 error -101 [ 167.856623][ T4847] libceph: mon0 (1)[c::]:6789 connect error [ 167.927514][ T6055] ialloc: diAlloc returned -17! [ 168.456350][ T4841] libceph: connect (1)[c::]:6789 error -101 [ 168.474013][ T4475] bond0 (unregistering): Released all slaves [ 168.493191][ T4841] libceph: mon0 (1)[c::]:6789 connect error [ 168.583664][ T6045] ceph: No mds server is up or the cluster is laggy [ 168.658044][ T6015] device syzkaller1 entered promiscuous mode [ 169.266703][ T6072] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 169.333011][ T6072] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 169.370765][ T6072] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 169.372983][ T5884] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 169.422928][ T5884] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 169.455291][ T5884] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 169.484319][ T5884] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 170.594898][ T6097] loop7: detected capacity change from 0 to 1024 [ 170.924556][ C1] sched: RT throttling activated [ 170.963158][ T6097] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.305: Invalid block bitmap block 0 in block_group 0 [ 170.983624][ T6097] Quota error (device loop7): write_blk: dquota write failed [ 170.991822][ T6097] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 171.003893][ T6097] EXT4-fs error (device loop7): ext4_acquire_dquot:6209: comm syz.7.305: Failed to acquire dquot type 0 [ 171.026544][ T6097] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.305: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.048088][ T6097] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.305: Invalid inode bitmap blk 0 in block_group 0 [ 171.066569][ T6097] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 171.076797][ T6097] EXT4-fs (loop7): 1 orphan inode deleted [ 171.082636][ T6097] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 171.419184][ T1217] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 171.455148][ T1217] EXT4-fs error (device loop7): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 173.135380][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.195858][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.213777][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.248573][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.295271][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.325381][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.362945][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.370137][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.401909][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cc86800: rx timeout, send abort [ 173.475615][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.514123][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.541266][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.591200][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.598376][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.637546][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.691226][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.721292][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.768743][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.833693][ T6109] loop7: detected capacity change from 0 to 32768 [ 173.845413][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.879767][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.903140][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061dfd800: rx timeout, send abort [ 173.912394][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cc86800: abort rx timeout. Force session deactivation [ 173.942531][ T5884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.056152][ T6109] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 174.070228][ T5884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.139894][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.151265][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.168487][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.278420][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.411462][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061dfd800: abort rx timeout. Force session deactivation [ 174.495542][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.146248][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.984773][ T4841] Bluetooth: hci1: command 0x0409 tx timeout [ 176.404809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.412983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.500906][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.749145][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 176.856132][ T5241] ocfs2: Unmounting device (7,7) on (node local) [ 177.159446][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.290784][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.459226][ T6129] device bridge_slave_0 entered promiscuous mode [ 177.685817][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.818723][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.923135][ T6129] device bridge_slave_1 entered promiscuous mode [ 178.064761][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 178.104297][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.147303][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.959032][ T6129] team0: Port device team_slave_0 added [ 179.150717][ T6129] team0: Port device team_slave_1 added [ 179.165631][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.205929][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.262961][ T5884] device veth0_vlan entered promiscuous mode [ 179.347040][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.363169][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.412983][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.431125][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.470301][ T5884] device veth1_vlan entered promiscuous mode [ 179.522171][ T6221] loop7: detected capacity change from 0 to 512 [ 179.576317][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.583350][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.641339][ T6221] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 179.664877][ T6221] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 179.717920][ T6221] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 179.761238][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.783892][ T6221] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 179.807650][ T6221] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e041e01c, mo2=0000] [ 179.824001][ T6221] EXT4-fs (loop7): failed to initialize system zone (-117) [ 179.847274][ T6221] EXT4-fs (loop7): mount failed [ 179.923316][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.933452][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.994581][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.145122][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 180.212908][ T5884] device veth0_macvtap entered promiscuous mode [ 180.245809][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.256494][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.300619][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.424946][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.478701][ T6129] device hsr_slave_0 entered promiscuous mode [ 180.489302][ T6129] device hsr_slave_1 entered promiscuous mode [ 180.534064][ T5884] device veth1_macvtap entered promiscuous mode [ 180.586219][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.683132][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.724351][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.768460][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.851251][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.902083][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.912817][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.922799][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.933871][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.944171][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.967112][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.984745][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.997460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.030981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.066258][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.099643][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.137754][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.187965][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.230920][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.310608][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.332149][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.379490][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.420412][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.451746][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.502538][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.538406][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.563394][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.616102][ T5884] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.639032][ T5884] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.680922][ T5884] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.700800][ T5884] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.746661][ T4475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.944265][ T6244] loop4: detected capacity change from 0 to 40427 [ 181.964393][ T4475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.019901][ T6244] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 182.060903][ T4475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.084234][ T6244] F2FS-fs (loop4): invalid crc value [ 182.136625][ T6244] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.150704][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.168968][ T4475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.174806][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.225094][ T4841] Bluetooth: hci1: command 0x0419 tx timeout [ 182.266356][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.317976][ T1217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.389277][ T1217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.390815][ T6244] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.449801][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.486778][ T26] audit: type=1800 audit(1757490925.748:12): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.326" name="file1" dev="loop4" ino=14 res=0 errno=0 [ 182.499886][ T6272] loop7: detected capacity change from 0 to 512 [ 182.529388][ T6244] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x103/0x1170 [ 182.609114][ T6272] EXT4-fs (loop7): Ignoring removed bh option [ 182.736982][ T6272] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 182.810456][ T6272] EXT4-fs (loop7): 1 truncate cleaned up [ 182.819362][ T6272] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 182.997354][ T6129] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 183.025521][ T6284] loop8: detected capacity change from 0 to 8 [ 183.036117][ T6129] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 183.071794][ T6272] EXT4-fs warning (device loop7): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 183.088460][ T6284] SQUASHFS error: zlib decompression failed, data probably corrupt [ 183.091791][ T6129] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 183.118032][ T6129] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 183.127244][ T6286] loop3: detected capacity change from 0 to 1024 [ 183.137388][ T6284] SQUASHFS error: Failed to read block 0x9b: -5 [ 183.143688][ T6284] SQUASHFS error: Unable to read metadata cache entry [99] [ 183.151784][ T6284] SQUASHFS error: Unable to read inode 0x127 [ 183.161188][ T4410] attempt to access beyond end of device [ 183.161188][ T4410] loop4: rw=2049, want=45112, limit=40427 [ 183.239199][ T6286] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.291742][ T26] audit: type=1800 audit(1757490926.548:13): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.331" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 183.501882][ T6298] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 16: comm syz.3.331: lblock 0 mapped to illegal pblock 16 (length 1) [ 185.338045][ T4184] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 185.391591][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.497262][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.511540][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.515046][ T4184] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 185.530683][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.578058][ T4184] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz-executor: mark_inode_dirty error [ 185.596777][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.611363][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.628886][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.636060][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.677820][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.726134][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.801487][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.808804][ T3082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.936612][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.312330][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.665795][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.897420][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.942607][ T6332] loop8: detected capacity change from 0 to 128 [ 187.965019][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.003533][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.046478][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.107681][ T6332] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 188.138247][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.168205][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.961997][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.981010][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.068222][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.167159][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.573522][ T6362] loop4: detected capacity change from 0 to 32768 [ 189.595127][ T6374] device syzkaller0 entered promiscuous mode [ 189.694928][ T6362] XFS (loop4): Mounting V5 Filesystem [ 189.865062][ T6362] XFS (loop4): Ending clean mount [ 189.866878][ T6357] loop7: detected capacity change from 0 to 32768 [ 189.901898][ T6362] XFS (loop4): Quotacheck needed: Please wait. [ 189.989132][ T6357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.346 (6357) [ 190.021719][ T6362] XFS (loop4): Quotacheck: Done. [ 190.076339][ T6357] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 190.110982][ T6357] BTRFS info (device loop7): force clearing of disk cache [ 190.126200][ T6357] BTRFS info (device loop7): force zlib compression, level 3 [ 190.149465][ T6357] BTRFS info (device loop7): enabling auto defrag [ 190.175807][ T6357] BTRFS info (device loop7): max_inline at 0 [ 190.206800][ T6357] BTRFS info (device loop7): enabling disk space caching [ 190.218027][ T6357] BTRFS info (device loop7): disk space caching is enabled [ 190.244727][ T6357] BTRFS info (device loop7): has skinny extents [ 190.254953][ T4475] device hsr_slave_0 left promiscuous mode [ 190.267477][ T4475] device hsr_slave_1 left promiscuous mode [ 190.286678][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.298699][ T4410] XFS (loop4): Unmounting Filesystem [ 190.313352][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.385572][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.406327][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.473661][ T4475] device bridge_slave_1 left promiscuous mode [ 190.483332][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.551112][ T4475] device bridge_slave_0 left promiscuous mode [ 190.577076][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.585761][ T6357] BTRFS info (device loop7): enabling ssd optimizations [ 190.614455][ T6357] BTRFS info (device loop7): clearing free space tree [ 190.622454][ T4475] device veth1_macvtap left promiscuous mode [ 190.634800][ T6357] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.635207][ T4475] device veth0_macvtap left promiscuous mode [ 190.654875][ T6357] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.702076][ T4475] device veth1_vlan left promiscuous mode [ 190.727356][ T4475] device veth0_vlan left promiscuous mode [ 191.122610][ T3082] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 191.292216][ T4475] team0 (unregistering): Port device team_slave_1 removed [ 191.320304][ T4475] team0 (unregistering): Port device team_slave_0 removed [ 191.382244][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.532667][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.665556][ T4378] Bluetooth: hci0: command 0x0409 tx timeout [ 191.697333][ T6429] loop7: detected capacity change from 0 to 8 [ 191.724353][ T4475] bond0 (unregistering): Released all slaves [ 192.068075][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.122129][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.297958][ T6424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.534083][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.602709][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.640018][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.732182][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 193.754902][ T5189] Bluetooth: hci0: command 0x041b tx timeout [ 194.435844][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444433][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.379158][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.451868][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.684290][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.727101][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.835009][ T4711] Bluetooth: hci0: command 0x040f tx timeout [ 196.195718][ T6373] device bridge_slave_0 entered promiscuous mode [ 196.244070][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.324627][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.345045][ T6373] device bridge_slave_1 entered promiscuous mode [ 196.346700][ T6495] loop4: detected capacity change from 0 to 16 [ 196.447101][ T6495] erofs: (device loop4): mounted with root inode @ nid 36. [ 196.460556][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.490980][ T6129] device veth0_vlan entered promiscuous mode [ 196.514985][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.541113][ T6129] device veth1_vlan entered promiscuous mode [ 196.694805][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.703306][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.091229][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.317035][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.369451][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.445257][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.505827][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.516845][ T6506] loop8: detected capacity change from 0 to 256 [ 197.521670][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.568494][ T6373] team0: Port device team_slave_0 added [ 197.619872][ T6506] FAT-fs (loop8): Unrecognized mount option "nonumtail=" or missing value [ 197.727669][ T6373] team0: Port device team_slave_1 added [ 197.828608][ T6129] device veth0_macvtap entered promiscuous mode [ 198.279692][ T4711] Bluetooth: hci0: command 0x0419 tx timeout [ 198.775465][ T6129] device veth1_macvtap entered promiscuous mode [ 198.922996][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.956772][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.967115][ T6521] loop4: detected capacity change from 0 to 128 [ 199.305913][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.486472][ T6521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.679086][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.714153][ T6521] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.762336][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.887237][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.906209][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.994690][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.042461][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.072964][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.102463][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.141918][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.170283][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.202767][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.239189][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.277124][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.301606][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.395152][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.415034][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.515908][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.531586][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.542202][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.555877][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.569729][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.580800][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.591092][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.601931][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.612097][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.622961][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.636082][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.667359][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.677291][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.692563][ T6373] device hsr_slave_0 entered promiscuous mode [ 200.721766][ T6373] device hsr_slave_1 entered promiscuous mode [ 200.745419][ T6373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.753045][ T6373] Cannot create hsr debugfs directory [ 200.804150][ T6129] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.835278][ T6129] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.844027][ T6129] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.884611][ T6129] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.146903][ T3082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.184699][ T3082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.358478][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.536189][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.550554][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.712353][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.971702][ T4475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.984063][ T6596] loop8: detected capacity change from 0 to 16 [ 205.037087][ T4475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.048336][ T6596] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 205.552457][ T4475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.293614][ T6612] kvm: pic: single mode not supported [ 206.293946][ T6612] kvm: pic: non byte read [ 206.322437][ T6612] kvm: pic: non byte read [ 206.328747][ T6612] kvm: pic: non byte read [ 206.345043][ T6612] kvm: pic: non byte read [ 206.360031][ T6612] kvm: pic: non byte read [ 206.380297][ T6612] kvm: pic: non byte read [ 206.409740][ T6612] kvm: pic: non byte read [ 206.414475][ T6612] kvm: pic: non byte read [ 206.439943][ T6612] kvm: pic: non byte read [ 206.567216][ T4711] Bluetooth: hci4: command 0x0406 tx timeout [ 206.637070][ T4475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.683495][ T6621] capability: warning: `syz.8.376' uses 32-bit capabilities (legacy support in use) [ 207.714908][ T6373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.792585][ T6373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.104103][ T6641] loop8: detected capacity change from 0 to 32768 [ 208.140114][ T6373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.468652][ T6641] XFS (loop8): Mounting V5 Filesystem [ 208.516721][ T6373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.588463][ T6657] loop7: detected capacity change from 0 to 64 [ 208.894721][ T5184] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.948691][ T6641] XFS (loop8): Ending clean mount [ 209.828517][ T6641] XFS (loop8): Quotacheck needed: Please wait. [ 210.088440][ T6641] XFS (loop8): Quotacheck: Done. [ 210.104818][ T5184] usb 5-1: Using ep0 maxpacket: 16 [ 210.180101][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.9.388'. [ 210.189829][ T6680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.267061][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.054721][ T5184] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.091460][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.104956][ T4847] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 212.134723][ T5184] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 212.142493][ T5184] usb 5-1: can't read configurations, error -71 [ 212.163091][ T5747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.192090][ T5884] XFS (loop8): Unmounting Filesystem [ 212.196507][ T5747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.301287][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.348931][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.376502][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.384808][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.393088][ T4847] usb 10-1: Using ep0 maxpacket: 16 [ 212.393675][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.413718][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.435825][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.442940][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.451170][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.514991][ T4847] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.533242][ T4847] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 212.543893][ T4847] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.564750][ T4847] usb 10-1: config 1 interface 0 has no altsetting 0 [ 212.666157][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.681178][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.699588][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.721219][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.765245][ T4847] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.870619][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.947790][ T4847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.113123][ T4847] usb 10-1: Product: syz [ 213.202750][ T4847] usb 10-1: Manufacturer: syz [ 213.326786][ T4847] usb 10-1: SerialNumber: syz [ 213.402410][ T6373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.461415][ T6703] loop4: detected capacity change from 0 to 64 [ 213.475326][ T6373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.499857][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.514495][ T6702] loop7: detected capacity change from 0 to 2048 [ 213.519794][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.539754][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.553884][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.567385][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.576491][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.586736][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.795772][ T6702] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.361703][ T4847] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 214.473797][ T4715] udevd[4715]: incorrect nilfs2 checksum on /dev/loop7 [ 214.532649][ T6714] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.890445][ T6702] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 3044605952 [ 214.930629][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.940662][ T6702] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15) [ 214.949642][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.983664][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.031981][ T4475] device hsr_slave_0 left promiscuous mode [ 215.038961][ T4475] device hsr_slave_1 left promiscuous mode [ 215.046316][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.053883][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.073179][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.108329][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.127448][ T4847] usb 10-1: USB disconnect, device number 2 [ 215.152358][ T6702] Remounting filesystem read-only [ 215.157787][ T6702] NILFS (loop7): error -5 truncating bmap (ino=15) [ 215.186526][ T4847] usblp0: removed [ 216.395383][ T4475] device bridge_slave_1 left promiscuous mode [ 216.402431][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.490665][ T4475] device bridge_slave_0 left promiscuous mode [ 216.552638][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.650804][ T5241] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 216.920373][ T4475] device veth1_macvtap left promiscuous mode [ 216.991892][ T4475] device veth0_macvtap left promiscuous mode [ 217.205986][ T4475] device veth1_vlan left promiscuous mode [ 217.247564][ T4475] device veth0_vlan left promiscuous mode [ 217.816816][ T5184] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 218.082630][ T5184] usb 9-1: Using ep0 maxpacket: 16 [ 219.688303][ T6753] loop7: detected capacity change from 0 to 32768 [ 219.701342][ T6753] gfs2: fsid=__"_z'˱1 I3wx9: Trying to join cluster "lock_nolock", "__"_z'˱1 I3wx9" [ 219.715488][ T6753] gfs2: fsid=__"_z'˱1 I3wx9: Now mounting FS (format 1801)... [ 219.757080][ T6753] gfs2: fsid=__"_z'˱1 I3wx9.s: journal 0 mapped with 16 extents in 0ms [ 220.949897][ T6753] gfs2: fsid=__"_z'˱1 I3wx9.s: first mount done, others may mount [ 220.974694][ T5184] usb 9-1: unable to get BOS descriptor or descriptor too short [ 221.046630][ T5184] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 221.054306][ T5184] usb 9-1: can't read configurations, error -71 [ 222.403395][ T4475] team0 (unregistering): Port device team_slave_1 removed [ 222.448460][ T4475] team0 (unregistering): Port device team_slave_0 removed [ 222.494129][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.527918][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.706675][ T4475] bond0 (unregistering): Released all slaves [ 222.791160][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.810562][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.883021][ T6373] device veth0_vlan entered promiscuous mode [ 222.919140][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.935504][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.970224][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.856057][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.871778][ T6373] device veth1_vlan entered promiscuous mode [ 223.937593][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.076902][ T6788] netlink: 'syz.9.412': attribute type 4 has an invalid length. [ 224.382518][ T6373] device veth0_macvtap entered promiscuous mode [ 224.395970][ T6797] loop7: detected capacity change from 0 to 1024 [ 224.441097][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.485061][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.535467][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.583034][ T6797] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.597459][ T6373] device veth1_macvtap entered promiscuous mode [ 224.688958][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.701082][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.711636][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.269949][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.591892][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.817510][ T6817] loop9: detected capacity change from 0 to 32768 [ 225.873714][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.884020][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.903082][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.913455][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.925873][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.942708][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.996706][ T6817] gfs2: fsid=__"_z'˱1 I3wx9: Trying to join cluster "lock_nolock", "__"_z'˱1 I3wx9" [ 226.010735][ T6817] gfs2: fsid=__"_z'˱1 I3wx9: Now mounting FS (format 1801)... [ 226.030981][ T6817] gfs2: fsid=__"_z'˱1 I3wx9.s: journal 0 mapped with 16 extents in 0ms [ 226.106487][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.127773][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.153300][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.233119][ T6817] gfs2: fsid=__"_z'˱1 I3wx9.s: first mount done, others may mount [ 226.246292][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.587984][ T6823] loop7: detected capacity change from 0 to 4096 [ 226.994618][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.274123][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.440618][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.854564][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.927339][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.965037][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.002579][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.910446][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.921143][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.933872][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.945008][ T6373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.953826][ T6373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.972069][ T6373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.981083][ T6373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.066368][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.098152][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.163885][ T6845] loop4: detected capacity change from 0 to 16 [ 229.595131][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.603550][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.722527][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.756066][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.830325][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.878925][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.072628][ T4295] libceph: connect (1)[c::]:6789 error -101 [ 230.685452][ T4295] libceph: mon0 (1)[c::]:6789 connect error [ 231.148430][ T6864] loop7: detected capacity change from 0 to 32768 [ 231.177763][ T4255] libceph: connect (1)[c::]:6789 error -101 [ 231.184076][ T4255] libceph: mon0 (1)[c::]:6789 connect error [ 231.200965][ T6851] ceph: No mds server is up or the cluster is laggy [ 231.727155][ T4711] libceph: connect (1)[c::]:6789 error -101 [ 231.742225][ T4711] libceph: mon0 (1)[c::]:6789 connect error [ 232.211374][ T6873] loop0: detected capacity change from 0 to 8 [ 232.349793][ T6864] XFS (loop7): Mounting V5 Filesystem [ 232.380562][ T6873] SQUASHFS error: zlib decompression failed, data probably corrupt [ 232.540881][ T6873] SQUASHFS error: Failed to read block 0x9b: -5 [ 232.690224][ T6873] SQUASHFS error: Unable to read metadata cache entry [99] [ 232.746773][ T6864] XFS (loop7): Ending clean mount [ 232.758298][ T6864] XFS (loop7): Quotacheck needed: Please wait. [ 232.775284][ T6873] SQUASHFS error: Unable to read inode 0x127 [ 233.008621][ T6883] loop9: detected capacity change from 0 to 32768 [ 233.101623][ T6883] gfs2: fsid=__"_z'˱1 I3wx9: Trying to join cluster "lock_nolock", "__"_z'˱1 I3wx9" [ 233.115977][ T6883] gfs2: fsid=__"_z'˱1 I3wx9: Now mounting FS (format 1801)... [ 233.129262][ T6883] gfs2: fsid=__"_z'˱1 I3wx9.s: journal 0 mapped with 16 extents in 0ms [ 233.216422][ T6883] gfs2: fsid=__"_z'˱1 I3wx9.s: first mount done, others may mount [ 233.261126][ T6864] XFS (loop7): Quotacheck: Done. [ 238.361580][ T5241] XFS (loop7): Unmounting Filesystem [ 238.800281][ T6918] loop9: detected capacity change from 0 to 2048 [ 240.162480][ T6918] UDF-fs: error (device loop9): udf_read_inode: (ino 1312) failed !bh [ 240.177057][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.191336][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.203813][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.219050][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.230281][ T6918] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 240.241653][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.252311][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.265710][ T6918] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 240.282330][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.293432][ T6918] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 240.303364][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.318507][ T6918] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.329466][ T6918] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 242.020814][ T6930] syz.4.440 uses obsolete (PF_INET,SOCK_PACKET) [ 242.394797][ T5189] Bluetooth: hci2: command 0x0406 tx timeout [ 244.452195][ T6962] loop0: detected capacity change from 0 to 2048 [ 244.642730][ T6962] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 245.919026][ T26] audit: type=1804 audit(1757490989.178:14): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.448" name="/newroot/98/file1" dev="fuse" ino=1 res=1 errno=0 [ 245.940791][ T6982] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.150520][ T26] audit: type=1800 audit(1757490989.208:15): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.448" name="/" dev="fuse" ino=1 res=0 errno=0 [ 248.309741][ T6986] loop4: detected capacity change from 0 to 256 [ 249.408512][ T6986] FAT-fs (loop4): Directory bread(block 64) failed [ 249.588384][ T6986] FAT-fs (loop4): Directory bread(block 65) failed [ 250.797973][ T6986] FAT-fs (loop4): Directory bread(block 66) failed [ 250.882923][ T6986] FAT-fs (loop4): Directory bread(block 67) failed [ 250.933632][ T6986] FAT-fs (loop4): Directory bread(block 68) failed [ 250.982560][ T6986] FAT-fs (loop4): Directory bread(block 69) failed [ 250.993374][ T6986] FAT-fs (loop4): Directory bread(block 70) failed [ 251.003733][ T6986] FAT-fs (loop4): Directory bread(block 71) failed [ 251.011489][ T6986] FAT-fs (loop4): Directory bread(block 72) failed [ 251.018360][ T6986] FAT-fs (loop4): Directory bread(block 73) failed [ 251.278154][ T6999] loop8: detected capacity change from 0 to 8 [ 252.159022][ T6999] SQUASHFS error: xz decompression failed, data probably corrupt [ 252.166912][ T6999] SQUASHFS error: Failed to read block 0x108: -5 [ 252.173531][ T6999] SQUASHFS error: Unable to read metadata cache entry [106] [ 252.180912][ T6999] SQUASHFS error: Unable to read inode 0x11f [ 253.978655][ T4200] Bluetooth: hci1: hcon ffff888064a1e000 sent 1 < count 76 [ 253.989297][ T4200] Bluetooth: hci1: hcon ffff888064a1e000 sent 0 < count 3 [ 253.998133][ T4200] Bluetooth: hci1: hcon ffff888064a1e000 sent 0 < count 8 [ 254.344104][ T7009] loop8: detected capacity change from 0 to 32768 [ 254.369163][ T7009] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.460 (7009) [ 254.414189][ T7009] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 254.447444][ T7009] BTRFS info (device loop8): enabling auto defrag [ 254.467419][ T7009] BTRFS info (device loop8): max_inline at 0 [ 254.496951][ T7009] BTRFS info (device loop8): force clearing of disk cache [ 254.511238][ T7023] loop0: detected capacity change from 0 to 8192 [ 254.524752][ T7009] BTRFS info (device loop8): turning on sync discard [ 254.539848][ T7009] BTRFS info (device loop8): using free space tree [ 254.572728][ T7009] BTRFS info (device loop8): has skinny extents [ 254.676900][ T4715] loop0: p1 p2[DM] p4 [ 254.681331][ T4715] loop0: p1 size 196608 extends beyond EOD, truncated [ 254.785627][ T4715] loop0: p2 start 4292936063 is beyond EOD, truncated [ 254.825124][ T4715] loop0: p4 size 50331648 extends beyond EOD, truncated [ 255.512597][ T7023] loop0: p1 p2[DM] p4 [ 255.569462][ T7023] loop0: p1 size 196608 extends beyond EOD, truncated [ 255.577968][ T7009] BTRFS info (device loop8): enabling ssd optimizations [ 255.578116][ T7023] loop0: p2 start 4292936063 is beyond EOD, truncated [ 255.592094][ T7023] loop0: p4 size 50331648 extends beyond EOD, truncated [ 255.635694][ T7009] BTRFS info (device loop8): clearing free space tree [ 255.654760][ T7009] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.715076][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721951][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.802993][ T7009] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 256.573287][ T7009] BTRFS info (device loop8): creating free space tree [ 257.157900][ T7009] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 257.167777][ T7009] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 257.242702][ T7067] loop7: detected capacity change from 0 to 2048 [ 257.491694][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 257.501843][ T7067] UDF-fs: iocharset iso8859-9 not found [ 257.511155][ T4715] udevd[4715]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 257.562302][ T4718] udevd[4718]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 257.577656][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 261.391883][ T3082] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 264.682267][ T7173] vivid-001: disconnect [ 265.442152][ T7161] vivid-001: reconnect [ 265.510131][ T7179] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.862595][ T7196] loop8: detected capacity change from 0 to 1024 [ 267.324238][ T7196] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.657491][ T7203] loop4: detected capacity change from 0 to 128 [ 267.706114][ T7203] FAT-fs (loop4): Unrecognized mount option "s(Yg7>-#̘nhortname=winnt" or missing value [ 270.085758][ T7229] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.094294][ T7229] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.404135][ T7222] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.906878][ T7222] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.249092][ T4234] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 272.496722][ T7222] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.100459][ T7222] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.134598][ T4234] usb 9-1: Using ep0 maxpacket: 16 [ 273.274873][ T4234] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.307792][ T4234] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.346016][ T4234] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 273.390035][ T4234] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 273.415804][ T4234] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.459456][ T4234] usb 9-1: config 0 descriptor?? [ 273.537092][ T7222] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.577340][ T7222] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.624395][ T7222] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.650249][ T7222] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.836887][ T7277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 275.268123][ T4234] usbhid 9-1:0.0: can't add hid device: -71 [ 275.280981][ T4234] usbhid: probe of 9-1:0.0 failed with error -71 [ 275.311904][ T4234] usb 9-1: USB disconnect, device number 4 [ 275.936738][ T7310] loop8: detected capacity change from 0 to 32768 [ 276.039584][ T7310] XFS (loop8): Mounting V5 Filesystem [ 276.444793][ T7310] XFS (loop8): Ending clean mount [ 276.463560][ T7310] XFS (loop8): Quotacheck needed: Please wait. [ 276.549319][ T7345] loop9: detected capacity change from 0 to 764 [ 276.658935][ T7348] loop4: detected capacity change from 0 to 512 [ 276.666296][ T7310] XFS (loop8): Quotacheck: Done. [ 276.723259][ T7348] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 276.783000][ T7348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.835773][ T7351] Symlink component flag not implemented [ 276.841898][ T7351] Symlink component flag not implemented [ 276.866281][ T7351] Symlink component flag not implemented (129) [ 276.872629][ T7351] Symlink component flag not implemented (6) [ 276.893928][ T7351] rock: directory entry would overflow storage [ 276.901140][ T7351] rock: sig=0x4f50, size=4, remaining=3 [ 276.906942][ T7351] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 277.337534][ T26] audit: type=1800 audit(1757491020.588:16): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.515" name="file1" dev="loop8" ino=9286 res=0 errno=0 [ 277.556571][ T7348] EXT4-fs (loop4): 1 truncate cleaned up [ 277.562582][ T7348] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 279.011767][ T5884] XFS (loop8): Unmounting Filesystem [ 280.795898][ T7400] binder: 7399:7400 ioctl c0306201 200000000280 returned -14 [ 283.246666][ T7419] tipc: Started in network mode [ 283.252786][ T7419] tipc: Node identity 229a365e897e, cluster identity 4711 [ 283.282645][ T7419] tipc: Enabled bearer , priority 0 [ 283.301817][ T7422] device syzkaller0 entered promiscuous mode [ 283.375167][ T7419] tipc: Resetting bearer [ 283.451638][ T7418] tipc: Resetting bearer [ 283.499017][ T7418] tipc: Disabling bearer [ 284.948580][ T7440] tipc: Started in network mode [ 284.963552][ T7440] tipc: Node identity 56811c7c1601, cluster identity 4711 [ 284.966788][ T7444] loop8: detected capacity change from 0 to 256 [ 284.985779][ T7440] tipc: Enabled bearer , priority 0 [ 285.391932][ T7440] device syzkaller0 entered promiscuous mode [ 285.488360][ T7444] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.644703][ T7444] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 285.691729][ T7440] tipc: Resetting bearer [ 285.815767][ T7444] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 285.866331][ T7437] tipc: Resetting bearer [ 285.915976][ T7437] tipc: Disabling bearer [ 285.941977][ T4839] Bluetooth: hci3: command 0x0406 tx timeout [ 286.349116][ T7457] loop7: detected capacity change from 0 to 40427 [ 286.540466][ T7457] F2FS-fs (loop7): invalid crc value [ 286.668948][ T7457] F2FS-fs (loop7): Found nat_bits in checkpoint [ 286.723855][ T7457] F2FS-fs (loop7): Start checkpoint disabled! [ 286.771446][ T7457] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 290.452219][ T7489] loop8: detected capacity change from 0 to 8192 [ 290.600513][ T7489] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 290.642367][ T7489] REISERFS (device loop8): using ordered data mode [ 290.692066][ T7489] reiserfs: using flush barriers [ 290.781508][ T7489] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 290.789194][ T4475] attempt to access beyond end of device [ 290.789194][ T4475] loop7: rw=2049, want=40976, limit=40427 [ 290.865295][ T7489] REISERFS (device loop8): checking transaction log (loop8) [ 290.899336][ T7489] REISERFS (device loop8): Using r5 hash to sort names [ 290.926131][ T7489] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 290.956851][ T7489] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 291.243224][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.253159][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.950564][ T7513] loop7: detected capacity change from 0 to 128 [ 291.999602][ T7513] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.012562][ T7513] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.251178][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.395331][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.713477][ T7460] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.723005][ T7460] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.732077][ T7460] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.742692][ T7460] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.894835][ T4378] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 297.065131][ T7548] netlink: 'syz.4.568': attribute type 3 has an invalid length. [ 297.294369][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.535204][ T4378] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 298.247747][ T4378] usb 8-1: config 0 has no interface number 0 [ 298.294752][ T7542] device bridge1 entered promiscuous mode [ 298.312277][ T7542] team0: Port device bridge1 added [ 298.370881][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.416342][ T4378] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 298.477554][ T4378] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.507871][ T4378] usb 8-1: Product: syz [ 298.528147][ T4378] usb 8-1: Manufacturer: syz [ 298.575920][ T4378] usb 8-1: SerialNumber: syz [ 298.602371][ T4378] usb 8-1: config 0 descriptor?? [ 298.611221][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.661585][ T7564] tipc: Started in network mode [ 298.672455][ T7564] tipc: Node identity 1eedb54aaddc, cluster identity 4711 [ 298.681157][ T7564] tipc: Enabled bearer , priority 0 [ 298.692910][ T7560] device syzkaller0 entered promiscuous mode [ 298.704706][ T4383] Bluetooth: hci1: command 0x0406 tx timeout [ 298.712665][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.755049][ T7560] tipc: Resetting bearer [ 298.801408][ T7559] tipc: Resetting bearer [ 298.839727][ T7559] tipc: Disabling bearer [ 300.073790][ T7581] device syzkaller0 entered promiscuous mode [ 300.090000][ T7549] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 301.186828][ T4378] usb 8-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -110 [ 301.198948][ T4378] usb 8-1: Firmware version (0.0) predates our first public release. [ 301.275051][ T4378] usb 8-1: Please update to version 0.2 or newer [ 301.334705][ T4378] usb 8-1: atusb_probe: initialization failed, error = -110 [ 301.375173][ T4378] atusb: probe of 8-1:0.128 failed with error -110 [ 301.599552][ T4378] usb 8-1: USB disconnect, device number 3 [ 302.477935][ T7590] loop9: detected capacity change from 0 to 8192 [ 303.003227][ T7597] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 303.011289][ T7597] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 303.872731][ T7619] overlayfs: failed to resolve './bus': -2 [ 304.698061][ T7622] tipc: Enabled bearer , priority 0 [ 304.780299][ T7632] loop8: detected capacity change from 0 to 40427 [ 305.093015][ T7624] device syzkaller0 entered promiscuous mode [ 305.484883][ T7624] tipc: Resetting bearer [ 305.552342][ T7624] tipc: Disabling bearer [ 305.651585][ T7632] F2FS-fs (loop8): invalid crc value [ 305.675140][ T7632] F2FS-fs (loop8): Found nat_bits in checkpoint [ 305.725366][ T7632] F2FS-fs (loop8): Start checkpoint disabled! [ 305.774963][ T7632] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 307.808040][ T7663] tipc: Enabled bearer , priority 0 [ 307.836482][ T7663] device syzkaller0 entered promiscuous mode [ 307.927025][ T7663] tipc: Resetting bearer [ 307.960695][ T7661] tipc: Resetting bearer [ 308.035772][ T7661] tipc: Disabling bearer [ 308.255723][ T7674] tipc: Enabled bearer , priority 0 [ 308.276067][ T7674] device syzkaller0 entered promiscuous mode [ 308.356605][ T154] device hsr_slave_0 left promiscuous mode [ 308.370129][ T154] device hsr_slave_1 left promiscuous mode [ 308.392671][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.414452][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.435825][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.452651][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.470935][ T154] device bridge_slave_1 left promiscuous mode [ 308.518307][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.558736][ T154] device bridge_slave_0 left promiscuous mode [ 308.592783][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.752787][ T154] device veth1_macvtap left promiscuous mode [ 308.805748][ T154] device veth0_macvtap left promiscuous mode [ 308.812436][ T154] device veth1_vlan left promiscuous mode [ 308.818861][ T154] device veth0_vlan left promiscuous mode [ 309.290432][ T4839] tipc: Node number set to 2883860062 [ 310.941996][ T154] team0 (unregistering): Port device team_slave_1 removed [ 310.994914][ T154] team0 (unregistering): Port device team_slave_0 removed [ 311.042186][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.069061][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.212287][ T7722] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 311.223366][ T154] bond0 (unregistering): Released all slaves [ 311.225238][ T7722] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 311.291187][ T7681] tipc: Resetting bearer [ 311.334725][ T7692] tipc: Enabled bearer , priority 0 [ 311.373867][ T7672] tipc: Resetting bearer [ 311.410432][ T7672] tipc: Disabling bearer [ 311.517238][ T7692] tipc: Disabling bearer [ 311.804436][ T7731] tipc: Enabled bearer , priority 0 [ 311.855599][ T7731] device syzkaller0 entered promiscuous mode [ 311.873648][ T7735] loop4: detected capacity change from 0 to 256 [ 311.895943][ T7735] exfat: Deprecated parameter 'namecase' [ 311.909023][ T7731] tipc: Resetting bearer [ 311.934980][ T7735] exfat: Deprecated parameter 'utf8' [ 311.949111][ T7730] tipc: Resetting bearer [ 311.998876][ T7735] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 312.065620][ T7730] tipc: Disabling bearer [ 312.210278][ T7741] tipc: Started in network mode [ 312.231192][ T7741] tipc: Node identity aee9a4f2c334, cluster identity 4711 [ 312.257272][ T7741] tipc: Enabled bearer , priority 0 [ 312.276248][ T7745] device syzkaller0 entered promiscuous mode [ 312.628947][ T7745] tipc: Resetting bearer [ 312.656407][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.616'. [ 313.435307][ T4175] tipc: Node number set to 1843242226 [ 313.456233][ T7740] tipc: Resetting bearer [ 313.481675][ T7763] loop0: detected capacity change from 0 to 8 [ 313.515438][ T7740] tipc: Disabling bearer [ 313.551928][ T7763] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 313.565595][ T4718] udevd[4718]: incorrect cramfs checksum on /dev/loop0 [ 313.731000][ T7769] cramfs: Error -5 while decompressing! [ 313.737155][ T7769] cramfs: ffffffff961ea068(26)->ffff888067fc7000(4096) [ 313.744367][ T7769] cramfs: Error -3 while decompressing! [ 313.750079][ T7769] cramfs: ffffffff961ea082(26)->ffff8880557db000(4096) [ 313.757251][ T7769] cramfs: Error -3 while decompressing! [ 313.762889][ T7769] cramfs: ffffffff961ea09c(16)->ffff88805488b000(4096) [ 313.770669][ T7769] cramfs: Error -5 while decompressing! [ 313.776478][ T7769] cramfs: ffffffff961ea068(26)->ffff888067fc7000(4096) [ 314.064664][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 314.161323][ T4718] udevd[4718]: incorrect cramfs checksum on /dev/loop0 [ 314.485181][ T7777] device syzkaller0 entered promiscuous mode [ 314.779870][ T7789] tipc: Enabled bearer , priority 0 [ 314.823927][ T7789] device syzkaller0 entered promiscuous mode [ 314.914385][ T7791] tipc: Enabled bearer , priority 0 [ 314.931550][ T7800] device syzkaller0 entered promiscuous mode [ 314.991120][ T7789] tipc: Resetting bearer [ 315.237762][ T7791] tipc: Resetting bearer [ 315.471357][ T7787] tipc: Resetting bearer [ 315.752141][ T7787] tipc: Disabling bearer [ 315.776637][ T1111] tipc: Node number set to 3006379338 [ 315.796311][ T7790] tipc: Resetting bearer [ 315.847330][ T7790] tipc: Disabling bearer [ 316.103383][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 316.142036][ T7813] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.151419][ T7813] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.160266][ T7813] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.169040][ T7813] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.284806][ T5184] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 316.614902][ T5184] usb 5-1: Using ep0 maxpacket: 16 [ 316.883759][ T7825] loop0: detected capacity change from 0 to 64 [ 317.080072][ T7820] loop8: detected capacity change from 0 to 32768 [ 317.125423][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.132310][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.155760][ T5184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 317.194800][ T7820] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.630 (7820) [ 317.257578][ T7820] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 317.268756][ T7820] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 317.280634][ T7820] BTRFS info (device loop8): use zstd compression, level 3 [ 317.289227][ T7820] BTRFS info (device loop8): using free space tree [ 317.296624][ T7820] BTRFS info (device loop8): has skinny extents [ 317.755555][ T7831] attempt to access beyond end of device [ 317.755555][ T7831] loop0: rw=2049, want=166, limit=64 [ 318.383097][ T5184] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 318.404160][ T3082] attempt to access beyond end of device [ 318.404160][ T3082] loop0: rw=1, want=66, limit=64 [ 318.416613][ T5184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.425909][ T3082] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 318.442527][ T5184] usb 5-1: Product: syz [ 318.527684][ T5184] usb 5-1: Manufacturer: syz [ 318.574070][ T3082] attempt to access beyond end of device [ 318.574070][ T3082] loop0: rw=1, want=67, limit=64 [ 318.676511][ T5184] usb 5-1: SerialNumber: syz [ 318.856883][ T3082] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 319.026175][ T5184] usb 5-1: config 0 descriptor?? [ 319.072127][ T3082] attempt to access beyond end of device [ 319.072127][ T3082] loop0: rw=1, want=68, limit=64 [ 319.145030][ T5184] usb 5-1: can't set config #0, error -71 [ 319.152210][ T5184] usb 5-1: USB disconnect, device number 6 [ 319.167885][ T3082] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 319.178946][ T3082] attempt to access beyond end of device [ 319.178946][ T3082] loop0: rw=1, want=69, limit=64 [ 319.190574][ T3082] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 319.211858][ T3082] attempt to access beyond end of device [ 319.211858][ T3082] loop0: rw=1, want=73, limit=64 [ 319.254883][ T3082] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 319.271235][ T3082] attempt to access beyond end of device [ 319.271235][ T3082] loop0: rw=1, want=74, limit=64 [ 319.274633][ T7858] loop4: detected capacity change from 0 to 2048 [ 319.282083][ T3082] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 319.294795][ T7856] loop9: detected capacity change from 0 to 512 [ 319.303752][ T3082] attempt to access beyond end of device [ 319.303752][ T3082] loop0: rw=1, want=77, limit=64 [ 319.321424][ T3082] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 319.331897][ T3082] attempt to access beyond end of device [ 319.331897][ T3082] loop0: rw=1, want=78, limit=64 [ 319.343028][ T3082] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 319.360790][ T7856] EXT4-fs (loop9): inline encryption not supported [ 319.467863][ T7856] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 319.629053][ T7858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.784766][ T7873] o2cb: This node has not been configured. [ 319.791218][ T7873] o2cb: Cluster check failed. Fix errors before retrying. [ 319.798944][ T7873] (syz.7.639,7873,0):user_dlm_register:675 ERROR: status = -22 [ 319.806719][ T7873] (syz.7.639,7873,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 320.873323][ T7856] EXT4-fs (loop9): Test dummy encryption mode enabled [ 320.923994][ T7856] EXT4-fs (loop9): orphan cleanup on readonly fs [ 320.942975][ T7856] EXT4-fs error (device loop9): ext4_orphan_get:1401: comm syz.9.637: inode #13: comm syz.9.637: iget: illegal inode # [ 321.003387][ T7856] EXT4-fs (loop9): Remounting filesystem read-only [ 321.352510][ T7856] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.637: couldn't read orphan inode 13 (err -117) [ 321.799087][ T7856] EXT4-fs (loop9): Remounting filesystem read-only [ 321.824319][ T7856] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000000222a,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 321.879938][ T7820] BTRFS error (device loop8): open_ctree failed: -22 [ 321.880069][ T4718] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by udevd (4718) [ 322.170134][ T7897] tipc: Enabling of bearer rejected, failed to enable media [ 323.298177][ T7908] loop9: detected capacity change from 0 to 40427 [ 323.321586][ T7908] F2FS-fs (loop9): invalid crc value [ 323.346497][ T7908] F2FS-fs (loop9): Found nat_bits in checkpoint [ 323.387087][ T7908] F2FS-fs (loop9): Start checkpoint disabled! [ 323.444973][ T7908] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 326.045468][ T5747] attempt to access beyond end of device [ 326.045468][ T5747] loop9: rw=2049, want=40976, limit=40427 [ 326.343114][ T7955] loop0: detected capacity change from 0 to 4096 [ 327.410520][ T7974] tipc: Enabled bearer , priority 0 [ 327.438446][ T7974] device syzkaller0 entered promiscuous mode [ 327.563931][ T7974] tipc: Resetting bearer [ 327.664768][ T7973] tipc: Resetting bearer [ 327.796169][ T7973] tipc: Disabling bearer [ 329.014262][ T8003] rtc_cmos 00:00: Alarms can be up to one day in the future [ 330.862557][ T8024] loop4: detected capacity change from 0 to 40427 [ 332.205147][ T8024] F2FS-fs (loop4): invalid crc value [ 332.239327][ T8024] F2FS-fs (loop4): Found nat_bits in checkpoint [ 332.329614][ T8024] F2FS-fs (loop4): Start checkpoint disabled! [ 335.054010][ T8059] tipc: Enabled bearer , priority 0 [ 335.124867][ T8061] device syzkaller0 entered promiscuous mode [ 335.165168][ T8059] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 336.205214][ T8061] tipc: Resetting bearer [ 336.248194][ T8056] tipc: Resetting bearer [ 336.288200][ T8069] loop4: detected capacity change from 0 to 2048 [ 336.455685][ T8056] tipc: Disabling bearer [ 336.481164][ T8069] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 337.285022][ T8074] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.295026][ T8077] loop0: detected capacity change from 0 to 64 [ 339.045642][ T8089] attempt to access beyond end of device [ 339.045642][ T8089] loop0: rw=2049, want=166, limit=64 [ 339.610013][ T8098] tipc: Enabled bearer , priority 0 [ 339.806082][ T8104] loop8: detected capacity change from 0 to 1024 [ 339.816073][ T8098] tipc: Resetting bearer [ 340.734805][ T5187] tipc: Node number set to 1082137724 [ 340.744596][ T4175] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 340.786287][ T8096] tipc: Disabling bearer [ 341.028365][ T8117] tipc: Enabled bearer , priority 0 [ 341.537461][ T6929] hfsplus: b-tree write err: -5, ino 4 [ 341.548445][ T8128] device syzkaller0 entered promiscuous mode [ 341.760045][ T8128] tipc: Resetting bearer [ 341.787921][ T8132] tipc: Enabled bearer , priority 0 [ 341.808893][ T8132] device syzkaller0 entered promiscuous mode [ 341.822878][ T8116] tipc: Resetting bearer [ 341.835186][ T4175] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 341.856319][ T4175] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.906884][ T4175] usb 8-1: Product: syz [ 341.927974][ T4175] usb 8-1: Manufacturer: syz [ 342.034932][ T4175] usb 8-1: SerialNumber: syz [ 342.307556][ T8116] tipc: Disabling bearer [ 342.527535][ T8130] tipc: Resetting bearer [ 342.643227][ T8130] tipc: Disabling bearer [ 342.975670][ T8151] loop4: detected capacity change from 0 to 40427 [ 342.982932][ T4175] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 343.026827][ T4175] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 343.060251][ T8151] F2FS-fs (loop4): invalid crc value [ 343.106907][ T8151] F2FS-fs (loop4): Found nat_bits in checkpoint [ 343.139050][ T8151] F2FS-fs (loop4): Start checkpoint disabled! [ 343.182951][ T8151] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 343.379852][ T4175] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 344.474567][ T4175] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 344.823257][ T4175] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 346.023392][ T4175] lan78xx: probe of 8-1:1.0 failed with error -71 [ 346.040862][ T4175] usb 8-1: USB disconnect, device number 4 [ 346.174077][ T8163] tipc: Enabling of bearer rejected, failed to enable media [ 346.259028][ T8171] tipc: Started in network mode [ 346.284823][ T8171] tipc: Node identity a2fdc5a62be7, cluster identity 4711 [ 346.311040][ T8171] tipc: Enabled bearer , priority 0 [ 346.365269][ T546] attempt to access beyond end of device [ 346.365269][ T546] loop4: rw=2049, want=40976, limit=40427 [ 346.398382][ T8177] device syzkaller0 entered promiscuous mode [ 346.602312][ T8171] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 347.139846][ T8171] tipc: Resetting bearer [ 347.357274][ T4175] tipc: Node number set to 2300233126 [ 348.198076][ T8166] tipc: Resetting bearer [ 348.481993][ T8166] tipc: Disabling bearer [ 349.119859][ T8211] tipc: Enabled bearer , priority 0 [ 349.132848][ T8211] device syzkaller0 entered promiscuous mode [ 349.879422][ T8205] tipc: Enabled bearer , priority 0 [ 349.920359][ T8219] device syzkaller0 entered promiscuous mode [ 350.123498][ T8205] tipc: Resetting bearer [ 350.186328][ T8202] tipc: Resetting bearer [ 350.242651][ T8202] tipc: Disabling bearer [ 350.281558][ T8228] tipc: Failed to remove unknown binding: 66,1,1/2883860062:3385043305/3385043307 [ 350.299916][ T8226] tipc: Resetting bearer [ 350.359629][ T8231] loop4: detected capacity change from 0 to 128 [ 350.382848][ T8226] tipc: Disabling bearer [ 350.403290][ T8228] tipc: Failed to remove unknown binding: 66,1,1/2883860062:3385043305/3385043307 [ 350.412539][ T8231] ADFS-fs (loop4): unrecognised mount option "0xffffffffffffffffv;9Ĩ4d! F감- 9 [ 350.412539][ T8231] o⇂nrT-N/8'P19$ȅbF~77Vm?qYMgF5x#:DÁ" or missing value [ 350.434620][ T8228] tipc: Failed to remove unknown binding: 66,1,1/2883860062:3385043305/3385043307 [ 350.856736][ T8239] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 352.023153][ T8243] loop9: detected capacity change from 0 to 2048 [ 352.128857][ T8251] loop4: detected capacity change from 0 to 16 [ 352.257286][ T8243] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051 [ 352.318657][ T8251] erofs: (device loop4): mounted with root inode @ nid 36. [ 352.346902][ T8243] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.249479][ T8260] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 353.260304][ T8260] attempt to access beyond end of device [ 353.260304][ T8260] loop4: rw=0, want=304, limit=16 [ 353.271579][ T8260] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 353.279955][ T8260] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 356.195489][ T8297] trusted_key: encrypted_key: insufficient parameters specified [ 356.234284][ T8296] loop7: detected capacity change from 0 to 1024 [ 356.302905][ T8302] loop0: detected capacity change from 0 to 256 [ 356.493676][ T8302] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 357.148481][ T8311] overlayfs: failed to resolve './bus': -2 [ 357.620374][ T4310] hfsplus: b-tree write err: -5, ino 4 [ 358.238676][ T8322] syz.0.725[8322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.240085][ T8322] syz.0.725[8322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.041237][ T8346] fuse: Bad value for 'fd' [ 365.600195][ T8368] loop4: detected capacity change from 0 to 1024 [ 366.166337][ T8373] loop9: detected capacity change from 0 to 1024 [ 369.650163][ T8381] syz.7.740 invoked oom-killer: gfp_mask=0x442dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_COMP|__GFP_ZERO), order=3, oom_score_adj=1000 [ 369.664653][ T8381] CPU: 0 PID: 8381 Comm: syz.7.740 Not tainted syzkaller #0 [ 369.672074][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.682171][ T8381] Call Trace: [ 369.685466][ T8381] [ 369.688414][ T8381] dump_stack_lvl+0x168/0x230 [ 369.693139][ T8381] ? show_regs_print_info+0x20/0x20 [ 369.698379][ T8381] ? load_image+0x3b0/0x3b0 [ 369.702904][ T8381] ? local_lock_release+0x170/0x170 [ 369.708116][ T8381] ? __rwlock_init+0x140/0x140 [ 369.712894][ T8381] dump_header+0xd4/0x770 [ 369.717262][ T8381] oom_kill_process+0x20e/0x3d0 [ 369.722394][ T8381] out_of_memory+0xe43/0x11e0 [ 369.727089][ T8381] ? mutex_lock_io_nested+0x60/0x60 [ 369.732589][ T8381] ? unregister_oom_notifier+0x20/0x20 [ 369.738118][ T8381] mem_cgroup_out_of_memory+0x277/0x370 [ 369.743697][ T8381] ? mem_cgroup_oom_trylock+0x210/0x210 [ 369.749265][ T8381] ? do_raw_spin_unlock+0x11d/0x230 [ 369.754568][ T8381] try_charge_memcg+0xf79/0x14a0 [ 369.759802][ T8381] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 369.765737][ T8381] ? rcu_lock_acquire+0x30/0x30 [ 369.770728][ T8381] obj_cgroup_charge_pages+0x87/0x190 [ 369.776117][ T8381] ? __lock_acquire+0x7c60/0x7c60 [ 369.781152][ T8381] ? __memcg_kmem_charge_page+0x380/0x380 [ 369.786950][ T8381] __memcg_kmem_charge_page+0x2fe/0x380 [ 369.792511][ T8381] __alloc_pages+0x218/0x470 [ 369.797139][ T8381] ? zone_statistics+0x170/0x170 [ 369.802130][ T8381] __get_free_pages+0x8/0x30 [ 369.806764][ T8381] __se_sys_io_uring_setup+0x112d/0x2850 [ 369.812424][ T8381] ? __lock_acquire+0x7c60/0x7c60 [ 369.817494][ T8381] ? __x64_sys_io_uring_setup+0x60/0x60 [ 369.823459][ T8381] ? lockdep_hardirqs_on+0x94/0x140 [ 369.828684][ T8381] do_syscall_64+0x4c/0xa0 [ 369.833216][ T8381] ? clear_bhb_loop+0x30/0x80 [ 369.837905][ T8381] ? clear_bhb_loop+0x30/0x80 [ 369.842590][ T8381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.848504][ T8381] RIP: 0033:0x7f4537ef4ba9 [ 369.852928][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.872542][ T8381] RSP: 002b:00007f4536119fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 369.881056][ T8381] RAX: ffffffffffffffda RBX: 00007f453813c180 RCX: 00007f4537ef4ba9 [ 369.889133][ T8381] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 369.897131][ T8381] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 369.905122][ T8381] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 369.913104][ T8381] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 369.921278][ T8381] [ 369.924324][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.930394][ T8381] memory: usage 307200kB, limit 307200kB, failcnt 1115 [ 369.937473][ T8381] memory+swap: usage 311520kB, limit 9007199254740988kB, failcnt 0 [ 369.945614][ T8381] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 369.952929][ T8381] Memory cgroup stats for /syz7: [ 369.954925][ T8381] anon 8192 [ 369.954925][ T8381] file 4096 [ 369.954925][ T8381] kernel_stack 131072 [ 369.954925][ T8381] pagetables 135168 [ 369.954925][ T8381] percpu 7256 [ 369.954925][ T8381] sock 0 [ 369.954925][ T8381] shmem 0 [ 369.954925][ T8381] file_mapped 0 [ 369.954925][ T8381] file_dirty 4096 [ 369.954925][ T8381] file_writeback 0 [ 369.954925][ T8381] swapcached 4894720 [ 369.954925][ T8381] anon_thp 0 [ 369.954925][ T8381] file_thp 0 [ 369.954925][ T8381] shmem_thp 0 [ 369.954925][ T8381] inactive_anon 12288 [ 369.954925][ T8381] active_anon 0 [ 369.954925][ T8381] inactive_file 8192 [ 369.954925][ T8381] active_file 8192 [ 369.954925][ T8381] unevictable 0 [ 369.954925][ T8381] slab_reclaimable 709360 [ 369.954925][ T8381] slab_unreclaimable 1013520 [ 369.954925][ T8381] slab 1722880 [ 369.954925][ T8381] workingset_refault_anon 112 [ 369.954925][ T8381] workingset_refault_file 0 [ 369.954925][ T8381] workingset_activate_anon 24 [ 370.048471][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.054720][ T8381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.740,pid=8372,uid=0 [ 370.073181][ T8381] Memory cgroup out of memory: Killed process 8372 (syz.7.740) total-vm:104260kB, anon-rss:936kB, file-rss:22948kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 370.091897][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.872672][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 372.333615][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 372.499876][ T8421] loop4: detected capacity change from 0 to 1024 [ 372.615203][ T8421] EXT4-fs (loop4): Ignoring removed bh option [ 372.646874][ T8415] loop9: detected capacity change from 0 to 40427 [ 372.721836][ T8415] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 372.729906][ T8415] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 372.762836][ T8415] F2FS-fs (loop9): invalid crc value [ 372.772064][ T8421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 372.786744][ T8421] System zones: 0-1, 3-12 [ 372.833696][ T8421] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #3: block 1: comm syz.4.748: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.850800][ T8421] Quota error (device loop4): write_blk: dquota write failed [ 372.858471][ T8421] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 372.871067][ T8421] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.748: Failed to acquire dquot type 0 [ 372.884207][ T8421] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.748: Freeing blocks not in datazone - block = 0, count = 4096 [ 372.906783][ T8421] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.748: Invalid inode bitmap blk 0 in block_group 0 [ 372.931854][ T8421] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 372.941422][ T8421] EXT4-fs (loop4): 1 orphan inode deleted [ 372.947851][ T8421] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; norecovery,lazytime,bh,nogrpid,debug,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 372.985719][ T8415] F2FS-fs (loop9): Found nat_bits in checkpoint [ 373.004678][ T8421] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.748: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 373.899588][ T8415] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 373.906856][ T8415] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 374.014519][ T8432] loop0: detected capacity change from 0 to 512 [ 375.404017][ T5187] Bluetooth: hci5: command 0x041b tx timeout [ 375.967878][ T8396] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 376.716648][ T26] audit: type=1800 audit(1757491124.333:17): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.746" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 377.224166][ T8396] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 377.284801][ T8396] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:25: Failed to release dquot type 0 [ 377.448220][ T6129] attempt to access beyond end of device [ 377.448220][ T6129] loop9: rw=2049, want=40968, limit=40427 [ 377.549725][ T8444] loop7: detected capacity change from 0 to 256 [ 377.595570][ T8441] loop0: detected capacity change from 0 to 4096 [ 377.723847][ T8444] exfat: Deprecated parameter 'utf8' [ 377.786542][ T8441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 377.984683][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 378.001240][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.006610][ T8444] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 378.595481][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.602435][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.824715][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.201190][ T8451] loop4: detected capacity change from 0 to 32768 [ 379.220542][ T8451] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 379.229021][ T8451] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 379.252091][ T8451] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 379.434955][ T8376] device bridge_slave_0 entered promiscuous mode [ 379.491243][ T8451] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 379.638279][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.711482][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.719777][ T8376] device bridge_slave_1 entered promiscuous mode [ 380.528415][ T4714] Bluetooth: hci5: command 0x0419 tx timeout [ 380.668481][ T8376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.772378][ T8376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.960875][ T8395] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.019977][ T8395] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.084998][ T8376] team0: Port device team_slave_0 added [ 382.115538][ T8376] team0: Port device team_slave_1 added [ 382.161710][ T8469] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 382.188463][ T8469] CIFS mount error: No usable UNC path provided in device string! [ 382.188463][ T8469] [ 382.199259][ T8469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 383.369053][ T8395] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.123159][ T8495] loop9: detected capacity change from 0 to 4096 [ 386.146537][ T8495] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 386.218190][ T8495] ntfs: (device loop9): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 386.670234][ T8495] ntfs: (device loop9): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 386.682996][ T8495] ntfs: (device loop9): read_ntfs_boot_sector(): Using backup boot sector. [ 387.986749][ T8495] ntfs: (device loop9): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 387.995947][ T8495] ntfs: (device loop9): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 388.016436][ T8495] ntfs: (device loop9): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 388.025474][ T8495] ntfs: (device loop9): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 388.046276][ T8495] ntfs: (device loop9): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 388.055452][ T8495] ntfs: (device loop9): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 388.710482][ T8495] ntfs: volume version 3.1. [ 389.546852][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.553974][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.610413][ T8376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.634387][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.641507][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.627806][ T8376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.276459][ T8395] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.596104][ T8545] binder: 8539:8545 ioctl c0306201 200000000080 returned -14 [ 394.338006][ T8376] device hsr_slave_0 entered promiscuous mode [ 394.351007][ T8544] loop7: detected capacity change from 0 to 2048 [ 394.495205][ T8376] device hsr_slave_1 entered promiscuous mode [ 394.920091][ T8376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.954129][ T8544] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.060845][ T8376] Cannot create hsr debugfs directory [ 396.127271][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 396.410334][ T8561] netlink: 'syz.7.777': attribute type 10 has an invalid length. [ 396.425250][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'. [ 396.573668][ T8561] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 397.407585][ T8574] smc: net device bond0 applied user defined pnetid SYZ0 [ 400.031808][ T8594] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 401.040537][ T8395] tipc: Left network mode [ 402.159494][ T8617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 402.172462][ T8617] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 402.773800][ T8626] loop4: detected capacity change from 0 to 128 [ 403.176898][ T8631] loop0: detected capacity change from 0 to 2048 [ 403.502825][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.9.789'. [ 403.687403][ T8631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.282530][ T8625] bridge1: port 1(veth3) entered blocking state [ 405.291363][ T8625] bridge1: port 1(veth3) entered disabled state [ 405.355161][ T8625] device veth3 entered promiscuous mode [ 405.764397][ T8627] bridge1: port 2(veth0_to_bond) entered blocking state [ 407.227159][ T8627] bridge1: port 2(veth0_to_bond) entered disabled state [ 407.710729][ T8627] device veth0_to_bond entered promiscuous mode [ 408.556169][ T8654] loop9: detected capacity change from 0 to 32768 [ 408.619726][ T8654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.795 (8654) [ 408.648377][ T8654] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 408.657346][ T8654] BTRFS info (device loop9): using free space tree [ 408.663859][ T8654] BTRFS info (device loop9): has skinny extents [ 409.097999][ T8654] BTRFS info (device loop9): enabling ssd optimizations [ 413.206558][ T8708] loop4: detected capacity change from 0 to 256 [ 414.081007][ T8708] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 414.542696][ T8718] syz.4.802[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.543155][ T8718] syz.4.802[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.876661][ T8376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.897443][ T8376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.908191][ T8376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.740267][ T8376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.699109][ T8743] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 416.707539][ T8743] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 417.452680][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.489950][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.501192][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.044620][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.229756][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.260928][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.532174][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.539489][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.808231][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.821186][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.325249][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.332357][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.495647][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.504951][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 420.514160][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.524673][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.533669][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.542793][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.551746][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.560329][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.593857][ T8799] loop0: detected capacity change from 0 to 64 [ 420.672402][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.7.815'. [ 420.947580][ T8376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.093653][ T8376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.439890][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.534011][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.274906][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 422.303999][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.972099][ T8846] loop4: detected capacity change from 0 to 1024 [ 426.088699][ T8846] hfsplus: session requires an argument [ 426.171544][ T8846] hfsplus: unable to parse mount options [ 426.172422][ T8862] comedi comedi1: comedi_config --init_data is deprecated [ 426.704667][ T5186] Bluetooth: hci3: command 0x0409 tx timeout [ 427.563286][ T8395] device hsr_slave_0 left promiscuous mode [ 427.787983][ T8395] device hsr_slave_1 left promiscuous mode [ 427.822075][ T8875] loop4: detected capacity change from 0 to 256 [ 427.848442][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.891804][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.949026][ T8875] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.981580][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.034554][ T8875] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 428.043214][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.071408][ T8395] device bridge_slave_1 left promiscuous mode [ 428.148000][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.166758][ T8875] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 428.201455][ T8395] device bridge_slave_0 left promiscuous mode [ 428.230348][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.409792][ T8395] device veth1_macvtap left promiscuous mode [ 428.416731][ T8395] device veth0_macvtap left promiscuous mode [ 428.422964][ T8395] device veth1_vlan left promiscuous mode [ 428.429581][ T8395] device veth0_vlan left promiscuous mode [ 429.936152][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 429.940517][ T8883] loop7: detected capacity change from 0 to 32768 [ 430.028473][ T8883] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.832 (8883) [ 430.047397][ T8883] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 430.056212][ T8883] BTRFS info (device loop7): using free space tree [ 430.062724][ T8883] BTRFS info (device loop7): has skinny extents [ 431.398233][ T8395] team0 (unregistering): Port device bridge1 removed [ 431.539735][ T8883] BTRFS info (device loop7): enabling ssd optimizations [ 431.685629][ T8915] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 432.558571][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 433.617617][ T4718] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop7 scanned by udevd (4718) [ 433.884676][ T4247] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 434.103378][ T8395] team0 (unregistering): Port device team_slave_1 removed [ 434.151381][ T4247] usb 10-1: Using ep0 maxpacket: 32 [ 434.203665][ T8395] team0 (unregistering): Port device team_slave_0 removed [ 434.237875][ T8395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.459627][ T8395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.624828][ T5190] Bluetooth: hci3: command 0x0419 tx timeout [ 435.120580][ T4247] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 435.134749][ T4247] usb 10-1: config 0 has no interface number 0 [ 435.294757][ T4247] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 435.313510][ T4247] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.339216][ T4247] usb 10-1: Product: syz [ 435.343971][ T4247] usb 10-1: Manufacturer: syz [ 435.352808][ T4247] usb 10-1: SerialNumber: syz [ 435.460536][ T4247] usb 10-1: config 0 descriptor?? [ 435.507175][ T8395] bond0 (unregistering): Released all slaves [ 436.566007][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 436.702656][ T4247] smsc95xx v2.0.0 [ 436.799751][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.817713][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.878009][ T8828] device bridge_slave_0 entered promiscuous mode [ 436.887970][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.895213][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.903505][ T8828] device bridge_slave_1 entered promiscuous mode [ 437.375707][ T4247] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 437.429845][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.454734][ T4247] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 437.494842][ T4247] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 437.539792][ T4247] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 437.775868][ T4247] usb 10-1: USB disconnect, device number 3 [ 437.793757][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.293660][ T8828] team0: Port device team_slave_0 added [ 438.384741][ T8828] team0: Port device team_slave_1 added [ 439.564783][ T8991] kAFS: unable to lookup cell '' [ 439.576125][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.604812][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.630894][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.795927][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.839974][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.876122][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.902226][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.979304][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.997389][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.005004][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.167388][ T8828] device hsr_slave_0 entered promiscuous mode [ 440.189241][ T8828] device hsr_slave_1 entered promiscuous mode [ 440.214956][ T8828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.235790][ T8828] Cannot create hsr debugfs directory [ 442.688608][ T9029] loop4: detected capacity change from 0 to 8192 [ 442.757143][ T9029] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 442.784003][ T9029] REISERFS (device loop4): using ordered data mode [ 442.817594][ T9029] reiserfs: using flush barriers [ 442.891674][ T9029] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 442.999619][ T8828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.018207][ T9039] loop0: detected capacity change from 0 to 512 [ 443.018266][ T9029] REISERFS (device loop4): checking transaction log (loop4) [ 443.108423][ T9029] REISERFS (device loop4): Using r5 hash to sort names [ 443.135260][ T9029] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 443.228961][ T8828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.238750][ T8828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 443.248512][ T8828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.275734][ T9039] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 443.400748][ T9049] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 443.432100][ T9049] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 444.114569][ T9039] EXT4-fs (loop0): Unrecognized mount option "uid>00000000000000000000" or missing value [ 445.553832][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.609206][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.637179][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.701774][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.805205][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.888696][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.350138][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 446.420638][ T26] audit: type=1400 audit(1757491194.606:18): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_sw/" pid=9074 comm="syz.7.861" [ 446.665605][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.672788][ T6929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.694979][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.704129][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.715120][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.722419][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.759158][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.921659][ T9073] netlink: 96 bytes leftover after parsing attributes in process `syz.4.858'. [ 446.949813][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.018918][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.044395][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.118063][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.275857][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.285663][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 448.460562][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 448.468923][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 448.477488][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.633357][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.265832][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.278911][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 449.469820][ T9101] loop4: detected capacity change from 0 to 2048 [ 450.855379][ T9101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.924737][ T9118] loop7: detected capacity change from 0 to 2048 [ 451.977782][ T9118] FAT-fs (loop7): Unrecognized mount option "msdos" or missing value [ 452.701720][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 453.176107][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.537948][ T9138] loop4: detected capacity change from 0 to 512 [ 454.584368][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.539261][ T9153] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 455.546598][ T9153] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 455.553333][ T9153] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 455.562377][ T9153] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 455.569697][ T9153] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 455.576405][ T9153] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 455.583428][ T9153] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 455.607771][ T9153] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 455.614601][ T9153] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 455.621587][ T9153] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 455.628487][ T9153] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 455.635352][ T9153] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 455.642286][ T9153] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 455.650370][ T9153] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 456.169422][ T9138] EXT4-fs (loop4): Ignoring removed nobh option [ 456.194822][ T9138] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 456.340197][ T9138] EXT4-fs: failed to create workqueue [ 456.378868][ T9138] EXT4-fs (loop4): mount failed [ 457.615600][ T9172] loop4: detected capacity change from 0 to 128 [ 457.630060][ T9172] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 458.156342][ T9172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.787626][ T9192] loop7: detected capacity change from 0 to 16 [ 460.948873][ T9192] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 462.364779][ T9208] loop7: detected capacity change from 0 to 64 [ 463.064004][ T9206] [ 463.066376][ T9206] ====================================================== [ 463.073385][ T9206] WARNING: possible circular locking dependency detected [ 463.080403][ T9206] syzkaller #0 Not tainted [ 463.084814][ T9206] ------------------------------------------------------ [ 463.091819][ T9206] syz.7.884/9206 is trying to acquire lock: [ 463.097696][ T9206] ffff888079aadbf8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 463.108652][ T9206] [ 463.108652][ T9206] but task is already holding lock: [ 463.116047][ T9206] ffff8880294a20b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 463.125471][ T9206] [ 463.125471][ T9206] which lock already depends on the new lock. [ 463.125471][ T9206] [ 463.135884][ T9206] [ 463.135884][ T9206] the existing dependency chain (in reverse order) is: [ 463.145027][ T9206] [ 463.145027][ T9206] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 463.153497][ T9206] __mutex_lock_common+0x1eb/0x2390 [ 463.159229][ T9206] mutex_lock_nested+0x17/0x20 [ 463.164536][ T9206] hfs_find_init+0x15b/0x1d0 [ 463.169658][ T9206] hfs_extend_file+0x2eb/0x1280 [ 463.175033][ T9206] hfs_bmap_reserve+0x103/0x420 [ 463.180510][ T9206] hfs_cat_create+0x1c0/0x8d0 [ 463.185712][ T9206] hfs_create+0x62/0xd0 [ 463.190400][ T9206] path_openat+0x11e1/0x2f30 [ 463.195519][ T9206] do_filp_open+0x1b3/0x3e0 [ 463.200718][ T9206] do_sys_openat2+0x142/0x4a0 [ 463.206007][ T9206] __x64_sys_openat+0x135/0x160 [ 463.211378][ T9206] do_syscall_64+0x4c/0xa0 [ 463.216411][ T9206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.223159][ T9206] [ 463.223159][ T9206] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 463.232542][ T9206] __lock_acquire+0x2c33/0x7c60 [ 463.238026][ T9206] lock_acquire+0x197/0x3f0 [ 463.243232][ T9206] __mutex_lock_common+0x1eb/0x2390 [ 463.249664][ T9206] mutex_lock_nested+0x17/0x20 [ 463.254959][ T9206] hfs_extend_file+0xd7/0x1280 [ 463.260281][ T9206] hfs_bmap_reserve+0x103/0x420 [ 463.265651][ T9206] __hfs_ext_write_extent+0x1fa/0x470 [ 463.271552][ T9206] hfs_ext_write_extent+0x15e/0x1e0 [ 463.277486][ T9206] hfs_write_inode+0x8e/0x970 [ 463.282904][ T9206] __writeback_single_inode+0x6c3/0xda0 [ 463.289108][ T9206] writeback_single_inode+0x221/0x8b0 [ 463.295115][ T9206] write_inode_now+0x217/0x280 [ 463.300494][ T9206] hfs_file_fsync+0xa3/0x140 [ 463.305685][ T9206] generic_file_write_iter+0x157/0x1b0 [ 463.311678][ T9206] vfs_write+0x712/0xd00 [ 463.316490][ T9206] ksys_write+0x14d/0x250 [ 463.321341][ T9206] do_syscall_64+0x4c/0xa0 [ 463.326368][ T9206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.332803][ T9206] [ 463.332803][ T9206] other info that might help us debug this: [ 463.332803][ T9206] [ 463.343208][ T9206] Possible unsafe locking scenario: [ 463.343208][ T9206] [ 463.350748][ T9206] CPU0 CPU1 [ 463.356143][ T9206] ---- ---- [ 463.361859][ T9206] lock(&tree->tree_lock/1); [ 463.366567][ T9206] lock(&HFS_I(tree->inode)->extents_lock); [ 463.375065][ T9206] lock(&tree->tree_lock/1); [ 463.382340][ T9206] lock(&HFS_I(tree->inode)->extents_lock); [ 463.388414][ T9206] [ 463.388414][ T9206] *** DEADLOCK *** [ 463.388414][ T9206] [ 463.396667][ T9206] 4 locks held by syz.7.884/9206: [ 463.401692][ T9206] #0: ffff8880506ea370 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 463.410922][ T9206] #1: ffff88807856a460 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 463.419991][ T9206] #2: ffff88807972a9a8 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: hfs_file_fsync+0x99/0x140 [ 463.430871][ T9206] #3: ffff8880294a20b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 463.440628][ T9206] [ 463.440628][ T9206] stack backtrace: [ 463.446520][ T9206] CPU: 1 PID: 9206 Comm: syz.7.884 Not tainted syzkaller #0 [ 463.453832][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.464145][ T9206] Call Trace: [ 463.467532][ T9206] [ 463.470477][ T9206] dump_stack_lvl+0x168/0x230 [ 463.475311][ T9206] ? load_image+0x3b0/0x3b0 [ 463.479941][ T9206] ? show_regs_print_info+0x20/0x20 [ 463.485243][ T9206] ? print_circular_bug+0x12b/0x1a0 [ 463.490471][ T9206] check_noncircular+0x274/0x310 [ 463.495443][ T9206] ? add_chain_block+0x940/0x940 [ 463.500420][ T9206] ? lockdep_lock+0xdc/0x1e0 [ 463.505023][ T9206] ? mark_lock+0x94/0x320 [ 463.509448][ T9206] __lock_acquire+0x2c33/0x7c60 [ 463.514329][ T9206] ? verify_lock_unused+0x140/0x140 [ 463.519621][ T9206] ? verify_lock_unused+0x140/0x140 [ 463.524826][ T9206] ? look_up_lock_class+0x71/0x110 [ 463.529969][ T9206] ? register_lock_class+0xb1/0x880 [ 463.535274][ T9206] lock_acquire+0x197/0x3f0 [ 463.539801][ T9206] ? hfs_extend_file+0xd7/0x1280 [ 463.544768][ T9206] ? __might_sleep+0xf0/0xf0 [ 463.549361][ T9206] ? read_lock_is_recursive+0x10/0x10 [ 463.554752][ T9206] ? hfs_extend_file+0xd7/0x1280 [ 463.559773][ T9206] __mutex_lock_common+0x1eb/0x2390 [ 463.565076][ T9206] ? hfs_extend_file+0xd7/0x1280 [ 463.570012][ T9206] ? verify_lock_unused+0x140/0x140 [ 463.575209][ T9206] ? is_bpf_text_address+0x254/0x270 [ 463.580512][ T9206] ? unwind_get_return_address+0x49/0x80 [ 463.586142][ T9206] ? stack_trace_save+0xe0/0xe0 [ 463.590995][ T9206] ? mutex_lock_io_nested+0x60/0x60 [ 463.596221][ T9206] mutex_lock_nested+0x17/0x20 [ 463.600991][ T9206] hfs_extend_file+0xd7/0x1280 [ 463.605760][ T9206] ? __mutex_trylock_common+0x14f/0x250 [ 463.611482][ T9206] ? hfs_get_block+0xbd0/0xbd0 [ 463.616305][ T9206] ? writeback_single_inode+0x221/0x8b0 [ 463.621870][ T9206] ? hfs_file_fsync+0xa3/0x140 [ 463.626634][ T9206] ? generic_file_write_iter+0x157/0x1b0 [ 463.632273][ T9206] ? vfs_write+0x712/0xd00 [ 463.636798][ T9206] ? hfs_find_init+0x15b/0x1d0 [ 463.641822][ T9206] ? hfs_find_init+0x15b/0x1d0 [ 463.647201][ T9206] ? hfs_find_init+0x15b/0x1d0 [ 463.651997][ T9206] ? __mutex_lock_common+0x431/0x2390 [ 463.657403][ T9206] ? hfs_brec_find+0x18b/0x500 [ 463.662263][ T9206] hfs_bmap_reserve+0x103/0x420 [ 463.667126][ T9206] __hfs_ext_write_extent+0x1fa/0x470 [ 463.672545][ T9206] hfs_ext_write_extent+0x15e/0x1e0 [ 463.677775][ T9206] ? verify_lock_unused+0x140/0x140 [ 463.682982][ T9206] ? hfs_ext_keycmp+0x310/0x310 [ 463.687835][ T9206] ? hfs_free_extents+0x430/0x430 [ 463.692865][ T9206] hfs_write_inode+0x8e/0x970 [ 463.697541][ T9206] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 463.702912][ T9206] ? __writeback_single_inode+0x471/0xda0 [ 463.708652][ T9206] ? __lock_acquire+0x7c60/0x7c60 [ 463.713686][ T9206] ? do_raw_spin_lock+0x11d/0x280 [ 463.718955][ T9206] ? __rwlock_init+0x140/0x140 [ 463.723733][ T9206] ? __lock_acquire+0x7c60/0x7c60 [ 463.728871][ T9206] __writeback_single_inode+0x6c3/0xda0 [ 463.734454][ T9206] writeback_single_inode+0x221/0x8b0 [ 463.739886][ T9206] ? write_inode_now+0x280/0x280 [ 463.745185][ T9206] write_inode_now+0x217/0x280 [ 463.750754][ T9206] ? bdi_split_work_to_wbs+0x820/0x820 [ 463.756234][ T9206] ? rwsem_write_trylock+0x12f/0x1b0 [ 463.761628][ T9206] ? clear_nonspinnable+0x60/0x60 [ 463.766752][ T9206] hfs_file_fsync+0xa3/0x140 [ 463.771362][ T9206] generic_file_write_iter+0x157/0x1b0 [ 463.776850][ T9206] vfs_write+0x712/0xd00 [ 463.781244][ T9206] ? file_end_write+0x250/0x250 [ 463.786109][ T9206] ? __fget_files+0x40f/0x480 [ 463.790968][ T9206] ? mutex_lock_nested+0x17/0x20 [ 463.796000][ T9206] ? __fdget_pos+0x2bf/0x370 [ 463.800598][ T9206] ? ksys_write+0x71/0x250 [ 463.805018][ T9206] ksys_write+0x14d/0x250 [ 463.809345][ T9206] ? __ia32_sys_read+0x80/0x80 [ 463.814109][ T9206] ? lockdep_hardirqs_on+0x94/0x140 [ 463.819626][ T9206] do_syscall_64+0x4c/0xa0 [ 463.824043][ T9206] ? clear_bhb_loop+0x30/0x80 [ 463.828838][ T9206] ? clear_bhb_loop+0x30/0x80 [ 463.833523][ T9206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.839422][ T9206] RIP: 0033:0x7f4537ef4ba9 [ 463.843840][ T9206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.863447][ T9206] RSP: 002b:00007f453613b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.871860][ T9206] RAX: ffffffffffffffda RBX: 00007f453813c090 RCX: 00007f4537ef4ba9 [ 463.880175][ T9206] RDX: 0000000000000c34 RSI: 0000200000000940 RDI: 000000000000000b [ 463.888145][ T9206] RBP: 00007f4537f77e19 R08: 0000000000000000 R09: 0000000000000000 [ 463.896112][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.904133][ T9206] R13: 00007f453813c128 R14: 00007f453813c090 R15: 00007ffdd2c73998 [ 463.912132][ T9206] [ 463.990365][ T5241] hfs: node 4:3 still has 1 user(s)! [ 464.831904][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.841326][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.874797][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.883235][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.894212][ T8828] device veth0_vlan entered promiscuous mode [ 464.901216][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.912243][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.924934][ T8828] device veth1_vlan entered promiscuous mode [ 464.953957][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.963195][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.971679][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.981499][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.992117][ T8828] device veth0_macvtap entered promiscuous mode [ 465.006961][ T8828] device veth1_macvtap entered promiscuous mode [ 465.027961][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.045762][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.058316][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.069595][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.081880][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.093059][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.110964][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.131554][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.142173][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.152415][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.163214][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.175931][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.190131][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.200510][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.213923][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.228165][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.242557][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.256596][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.268706][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.277599][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.290762][ T8828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.299953][ T8828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.312855][ T8828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.322029][ T8828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.376956][ T8828] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 465.401319][ T3082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.416246][ T3082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.423800][ T8828] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 465.439315][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.470273][ T3082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.479283][ T3082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.489022][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 465.559830][ T8395] device hsr_slave_0 left promiscuous mode [ 465.566374][ T8395] device hsr_slave_1 left promiscuous mode [ 465.572718][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.582019][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.592199][ T8395] device bridge_slave_1 left promiscuous mode [ 465.598536][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.606899][ T8395] device bridge_slave_0 left promiscuous mode [ 465.613270][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.697335][ T8395] team0 (unregistering): Port device team_slave_1 removed [ 465.708735][ T8395] team0 (unregistering): Port device team_slave_0 removed [ 465.721075][ T8395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.735212][ T8395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.790222][ T8395] bond0 (unregistering): Released all slaves