last executing test programs: 9m24.149198051s ago: executing program 32 (id=61): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r4, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 9m17.502959216s ago: executing program 33 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000019140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) 9m2.593267146s ago: executing program 34 (id=132): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) open_tree(0xffffffffffffff9c, 0x0, 0x89901) rmdir(&(0x7f0000000640)='./file0\x00') 8m56.20599709s ago: executing program 3 (id=142): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000"], 0x48) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x4, 0x7, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x6e6bbd, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x1, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000eb5289c137d10130bd0cd8f6ae11bf544c95b74a67c39b3f1b0f5e3c7e7c6ce7ae6710ff083938962cf05c3a7c4659e95d151656baf9574bc5631ebe55d54174bdc88cae8db90a5383a5101094ce7732ba8dd49b6a1687aa962e996acf92a9e3cd5ca5bb47105abdc24bf8e0bff315a4d6a9f0ec230a256c5329d442f7b64b6e86ac8b9976f89a080c2b266f7881925301b005c93fef79579b28f185daefdff08e257e2083bedbdda5564448377db2bc412a1a61453d7dae733fffd8470971b2a65210", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001c000100000000000000000207000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000380)=""/18, 0x12, 0x0, &(0x7f00000003c0)) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x0, "3258c5c00e7f94ae1e008fba001a0000f4ff40000000000f2300e91aba2800", 0x34343459}) 8m54.580424254s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getrlimit(0xa, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = eventfd2(0x0, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) close_range(r4, r5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 8m50.843869613s ago: executing program 3 (id=145): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a32000000"], 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x8041) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) shutdown(r4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 8m49.640039333s ago: executing program 3 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpriority(0x2, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20fffe82) r2 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) connect$rxrpc(r0, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x317341, 0x0) 8m48.669946309s ago: executing program 3 (id=148): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 8m47.084356745s ago: executing program 3 (id=149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x1, 0x4000, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x100, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x1e, 0x6, 0x0, 0xc, {0x4e20, 0x4e21, [0x5, 0xa216, 0x9, 0xe], [0x3, 0x8, 0xc1e4, 0xfffffff6], 0x0, [0x3ff, 0x3b5b]}, 0x4b, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "9b74802c1272d568acf2daa1c4bc894febe338f07cb151b531ec0845e632260fc0dff9c68e76d885abd407e56a2e115c65cdfc7e67c5a36ac2f83bc1c9d0474920bae02568e0ea3eb25ab1229c5765b21f5314ce9dd79afa7082d7ec29187ed4878eaefd59641219d6050a8d37fae826d66129d4a752c084f02f75719f08a7817a8df4f4f354c58fb1e0891506fe208718d393d0af6bca00efa777276893dbf02343d2d37e5c6ed1c11b02afa601"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x20048800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x4100) 8m46.635875328s ago: executing program 35 (id=149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x1, 0x4000, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x100, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x1e, 0x6, 0x0, 0xc, {0x4e20, 0x4e21, [0x5, 0xa216, 0x9, 0xe], [0x3, 0x8, 0xc1e4, 0xfffffff6], 0x0, [0x3ff, 0x3b5b]}, 0x4b, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "9b74802c1272d568acf2daa1c4bc894febe338f07cb151b531ec0845e632260fc0dff9c68e76d885abd407e56a2e115c65cdfc7e67c5a36ac2f83bc1c9d0474920bae02568e0ea3eb25ab1229c5765b21f5314ce9dd79afa7082d7ec29187ed4878eaefd59641219d6050a8d37fae826d66129d4a752c084f02f75719f08a7817a8df4f4f354c58fb1e0891506fe208718d393d0af6bca00efa777276893dbf02343d2d37e5c6ed1c11b02afa601"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x20048800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x4100) 7m23.781062549s ago: executing program 2 (id=245): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r1, 0x705, 0x0) 7m22.066370846s ago: executing program 2 (id=247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x10, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe401020301090212"], 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) shutdown(r0, 0x1) 7m20.556361521s ago: executing program 2 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000280)) 7m19.436648934s ago: executing program 2 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) r3 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r4 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) connect$rxrpc(r0, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x317341, 0x0) 7m18.083372321s ago: executing program 2 (id=253): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x1c880, &(0x7f0000000000)=ANY=[], 0xf9, 0x603f, &(0x7f0000002480)="$eJzs3cuOHFcZB/CvL9NzCYmtCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIiYcca8QBYsllFglCops+xq9s902M809U95/eTZqq+PlXTp/yfmu5yVfUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC+8+0fnu5ExOVfpgcOR3wqehHdiNW6Phb1zMW8fD8ijsRWczwXEb3liHr9rW+HIs5FxEfPRNy7f2u9fvjMLvtx/tTN659891t//80f7hz58Zs/+mC8/QefPvvhb29HHP7+ax9+cntvth0AAABKUVVV1UmH+Ue3vg+P7QGAg2/4+j98P1DLj6vVanVB9eYMnu/33fnZXnXBdVM12e1mERGbzXXq9wxOxwPAgtmMj9vuAi2Sf9H6EfFU250A5lqn7Q6wL+7dv7XeSfl2mq8Hw0tBHlwLMpL/ZufB/R3bTacZv8ZkVr9fd6IXz27Tn9UZ9WGe5Py74/lfHrYP0nL7nf+sbJf/YHjrU3Fy/r3x/MeM5P/HiFjY/LsT8y9Vzr//OPlv9hZ4/5c/AAAAAAAHX/7//8Mtn/9dfvJN2ZWdzv8em1EfAAAAAAAAAGCvPen4fw8Y/w8AAADmVn2sXvvTMw8f60T87dCEZetD/EudiKfHlgcKk26WWWu7HwAAAAAAAAAAAABQkv7wGt5LnYiliHh6ba2qqvqrabx+XE+6/qIrffuhZG3/kQcAgKGPnkn38t9dGT7QiajnLqXP+ltaW1urqpXVtWqtWl3O72cHyyvVauO4Nk/rx5YHu3hD3B9U9Q9baazXNO14eVr7+M+rn2tQ9XbRsdloO3UASjd8NbrnFemAqapD0fa7HBaD/f/gsf+zG23/ngIAAAD7r6qqqpM+zvtoOuffbbtTAMAsrOTX//HzAmq1Wq1Wqw9e3VRNdrtZRMRmc536PYPh+AFgwWzGx213gRbJv2j9iDjSdieAudZpuwPsi3v3b613Ur6d5utBGt89Xwsykv9mZ2u9vP6k6TTj15jM6vfrTvTi2W3689yM+jBPcv7d8fwvD9sHabn9zn9Wtsu/3s7DLfSnbTn/3nj+Yw5O/t2J+Zcq599/rPx78gcAAAAAgDmW////sPO/eZMBAAAAAAAAYOHcu39rPd/3ms//f3bCcp3mnPs/D4ycf2fX+bv/9yDJ+XfH8x+7IKfXmL/7xsP8/3X/1voHN//5mTyd+/yXeoP6uZc63V4/XfNTLb0VV+NabMSpR5bvj7SffqR9aaT9zJT2s4+0D+r21dx+ItbjZ3Et3nzQvjzlwqiVKe3VlPacf8/+X6Scf7/xVee/lto7Y9Pa3fe7j+z3zemk57n4l/+8+OjetdcGU5e4E70H29ZUb9/xfenTzrb+TZ4axC9ubFw/8asrN29ePx1pMvLomUiTPZbzX0pfOf+XXhi257/7zf317vuDx85/XtyJ/rb5v9CYr7f35Rn3rQ05/0H6yvnnV6DJ+/8i57/9/v9KC/0BAAAAAAAAAAAAAACAnVRVtXWL6MWIuJDu/2nr3kwAYKZ+9700UyWhVqvVarV6r+r+nPVnRDXZ680iVkbXuRARv570wwCAefbfiPhH252gNfIvWP68v3r6ubY7A8zUjXff+8mVa9c2rt9ouycAAAAAAAAAwP8rj/95rDH+89Z1QGPjRo+M//pGHFvY8T+7g97WWOdpg56Pncf/Ph47j//dn/J8S1Pap41YvDylfWVK+8QbPRpy/s+njHP+R9OGlTT+60st9KdtOf/jaaznnP8XxpZr5l/9eZHz747kf/LmOz8/eePd9169+s6Vtzfe3vjp6VMXzp09f+7s+fMn37p6bePU8HuLPd5fOf889rXrQMuS88+Zy78sOf/Pp1r+Zcn5v5hq+Zcl55/f78m/LDn/fOwj/7Lk/F9OtfzLkvP/YqrlX5ac/yupln9Zcv5fSrX8y5LzfzXV8i9Lzv9EquVflpz/yVTLvyw5/3yGS/5lyfnnKxvkX5ac/5lUy78sOf+zqZZ/WXL+51It/7Lk/M+nWv5lyflfSLX8y5Lz/3Kq5V+WnP9XUi3/suT8X0u1/MuS8/9qquVflpz/11It/7Lk/L+eavmXJef/jVTLvyw5/2+mWv5lyfm/nmr5l+Xh5/+bmfHMv/8aMQfd2I+ZqqqqOeiGmSeYafsvEwAAAAAAAAAAAAAwbhaXE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh795i5KrvO4CfvdlrQ4IbCCHECWtjiBMW765v4BAHk4SUkialJKRNS2oce22c+FavnQBCYSm0JQpSkdoH+tDclEZRLwJFkZpKNEJqpPatPCXiJWolHiwVKgcllVIFtjpz/v//zszOzqztXfvMOZ8Pwj/vXP9z5szsftf6zgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJpt+Mj0nw9kWZb/3/hjXZZdnv99TbYn/3J256VeIQAAAHCh3mj8+Q9XpBP2LOFKTZf5t/f8xw/m5ubmss+/fubNv5ybS2eMZdnQ6ixrnBf9+69+Odd8meCJbHRgsOnrwR53P9Tj/OEe54/0OH9Vj/NX9zh/tMf5CzbAAmuK38c0bmxT46/rik2aXZWNNM7b1OFaTwysHhyMv8tpGGhcZ27kYHY4O5JNZ5MLrjPQ+C/LXtiQ39ddWbyvwab7Wp9l2dmfP7o/rmEgbONNWcudNTQ/d6/dkY29/vNH93/31Kvv7DR7boYFK82yzRvzdT6ZZfO/rsoGstVpm8R1Djatc32HdQ61rHOgcb387+3rPLvEdcbHPRrW+VKXda4Ppz10fZZls9mil2n3RDaYrW2717S9R4s9Ir+N/Kl8WzZ8TvvJhiXsJ/l1Xrm+dT9p3yfj9t8QtsnwImtofjpee3zVgu1+vvtJ/qjLsK/mt31Pfqejo82/Wm3ZV/PLPHrD4vtAx+euwz6Q9uWmfWBjr31gcNVQYx8YnF/zxpZ9YGrBdQazgcZ9nbmh+z4wceroiYmZhx+5+fDRfYemD00fm5rcuX3bju3bduyYOHj4yPRk8ee5bdI+sjYbTPvgxvBeE/fB97ZdtnmXnPvW8r0ORkvyOsgf+6dvzBd0+WC2yD6eX+bJzRf+Okjf95teB8NNr4OO76kdXgfDS3gd5Jc5u3lp3zOHm/7vtIaVei9c17QPXMrvh/l93v++xd8L14d1PfX+c/1+OLRgH4gPayC89vJT0s97o7eG7bJwv7g2P+OyVdnpmemTWx7ad+rUyaksjIviyqbnqn1/Wdv0mLIF+8vgOe8ve/7+1zde2+H0dWFbjd7U/bnKL7N9vPtz1Xh3b92eq7Jie7acujULY5ld7O3Z6btZvj1TluiyPfPLPHnzhf8smHJJ0/vfSK/3v6GR4eL9byhtjZGW97+FT81QY2VZdvbmpb3/jYT/L/b731Ulef/Lt9X9W7rvA/llnpo4131guOv73/VhDoT1vC8khtGm3P9m4/zZYjdtei577jfDwyNhvxmO99i632xbcJ381vL73jx5fvvN5utbn6uWn1squN/k2+qvJrvvN/llXpy68PeONfGvTe8dq3rtAyNDq/L1jqSdoHi/m1sT94Et2f7seHYkO5Cukz/L+X2Nb13aPrAq/H+x3zuuKck+kG+rZ7d23wfyy/x42/L+7LQ5nJIu0/SzU/vvFxbL/NcOz99e+2Zb7syfr/OjP/lkOq1Thsgv8+r2c80Z3bfTTeGUyzpsp/bXz2L79IHs4myna8I6j+zo/rup/DJX7Vzi/rQny7KXp15u/L4r/H73+6d/8oOW3/t2+p3yy1Mv3z1x70/PZf0AAJy/Nxt/zq4qftZs+hfrpfz7PwAAANAXYu4fDDOR/wEAAKAyYu4fCjOR/wEAAKAyYu4fDjOpSf5/8NZdz73xWJY+DXAuiOfHzXDPh4rLxY73bPh6bG5efvqHvzPy3FcfW9p9D2ZZ9uu739Xx8g9+KK6rcCKu8wOtpy9wzXVLuv8H7pu/XPPnJ5zdVdx+fDxL3Q1iV/mFia2N2x17eKoxX7w7a8x7Z596orj94ut4+TPbisv/TfjQkj0HB1quvzmsZ1OYY+EzZe7ZM78d8hmv99z69/zrlZ+Zv794vYGNb208zGe/Utxu/IyoZ64sLh8f92Lr/5evfe+5/PIP3dB5/Y8Ndl7/mXC7r4T5q93F5Zu3+Veb1v+nYf3x/uL1tnz7Rx3X//w7iss/H/aLb4bZvv47/uLdb3R6vuL97LmtuF68/8n/3d64Xry9ePvt6x99bKple7Tf/ouvF7ez+0u/GGq+fDw93k/0wG2t+/dAeH5beuRZln3vz7KW7Zx9sLjeP7etP97eids6r/+mtnWeGLiucf35x7Ou5XF9/W+3dny8cT17/nFdy+N55s6w/V6f+HF+u2fuDftjOP//Xipur/2zTJ+/s/X9Jl7+m+uK1228vYm29T/Ttv7Z6/Jt13v9d71erP/521e3rH/Px8L+dFcxe63/0DeuaLn+t75bPB8nvzx+7PjM6cMHmrZq8+t49eiatZdd/pa3XhHeS9u/3nv81IPTJ8cmxyazbKwPPzJwpdf/7TD/pxizy38PhZ/+otjvnv548X3rvb8svn4mnP5AeD7j98ev//VIy/7a/rzP3l7MC13/+8M6luodX/uv65Z0wTOfe+H0P/3Jq+0/F8THc+Lto43H9+yGqxvnDbxYnN/+ftXLf7699XX9s+HJxvxh2K5z4ZOZN15d3F/77cfPJnn6U8XrN/4kF6+ftX2eyLqh1sdxoev/Wfg55kfXtL7/xf3jh4+1fZrzumwgX8JseH/IZovz46Xi9n767NUd7y9+Dk82+85zWeaiZh6emThy+NjphyZOTc+cmph5+JG9R4+fPnZqb+OzS/d+odf151/faxuv7wPTO7dnjVf78WKssEu9/hP37T9wy+SNB6YP7jt98NR9J6ZPHto/M7N/+sDMjfsOHpz+cq/rHz6we2rrrm23bB0/dPjA7lt37dq2a/zwseP5MopF9bBz8ovjx07ubVxlZvf2XVM7dmyfHD96/MD07lsmJ8dP97p+43vTeH7tL42fnD6y79Tho9PjM4cfmd49tWvnzq09P/3x6ImDM2MTJ08fmzg9M31yongsY6caJ+ff+3pdn3qYOR7e79oMhJ/OP3vTzvT5uLnvPL7oTRUXaf3xNHstfBZU/P7W6+uY+0fCTGqS/wEAAKAOYu4PH/w/f4b8DwAAAJURc//qMBP5HwAAACoj5v4i+Y+mw7/XJf8vV///cf3/Bv1//f9M/z/R/9f/z/T/9f970P/X/+/n9ev/6//TW9n6/yH3Z2uyzL//AwAAQEXF3L82zET+BwAAgMqIuf+yMBP5HwAAACoj5v7Lw0xqkv8d/1//X/+/W/8/Xlb/P9P/L0P/f9N/6/8voP+v/5/p/5+3S92f7/f1l7D/v0b/n7IpW/8/5v63hJnUJP8DAABAHcTc/9YwE/kfAAAAKiPm/ivCTOR/AAAAqIyY+9eFmdQk/+v/6//r/zv+v/5/3/T/Hf+/A/3/le//N39b1f9vpf+v/1+y/r/j/1M6Zev/x9z/G2EmNcn/AAAAUAcx978tzET+BwAAgMqIuf/KMBP5HwAAACoj5v6rwkxqkv/r2f9/Jcsy/f9M/1//v22d+v/6/ytB/7//+/+O/784/X/9f/1//X+6K1v/P+b+t4eZ1CT/AwAAQB3E3H91mIn8DwAAAJURc/87wkzkfwAAAKiMmPuvCTOpSf6vZ//f8f/1/wv6/63rvET9/6/o/+v/Xwj9f/3/TP//vF3q/ny/r1//X/+f3srW/4+5/51hJjXJ/wAAAFAHMfdfG2Yi/wMAAEBlxNz/rjAT+R8AAAAqI+b+9WEmNcn/+v/6//r/+v+O/6//v5L6q/8/uOg5+v8F/f9Wy9f/n51fgP5/36xf/1//n97K1v+Puf/dYSY1yf8AAABQBzH3vyfMRP4HAACAyoi5/7owE/kfAAAAKiPm/rEwk5rkf/1//X/9f/1//X/9/5XUX/3/xen/F/T/Wzn+v/6//r/+P92Vrf8fc/+GMJOa5H8AAACog5j7N4aZyP8AAABQGTH3Xx9mIv8DAABAZcTcvynMpCb5X/9f/1//X/9f/1//fyXp/+v/d6P/r//fz+vX/9f/p7ey9f9j7r8hzKQm+R8AAADqIOb+G8NM5H8AAACojJj73xtmIv8DAABAZcTcvznMpCb5X/9f/1//v4/7/0P6/5n+f+np/+v/d6P/X67+/7D+v/6//j/LrGz9/5j73xdmUpP8DwAAAHUQc//7w0zkfwAAAKiMmPtvCjOR/wEAAKAyYu4fDzOpSf7X/9f/1//v4/6/4/+3rH8Z+v8jzafr/y8P/X/9/270/8vV/3f8f/1//X+WW9n6/zH33xxmUpP8DwAAAHUQc/+WMBP5HwAAACoj5v6JMBP5HwAAACoj5v7JMJOa5H/9/4vZ/29sY/1//X/9/3B+Cfv/jv+/AvT/9f+70f/X/+/n9ev/6//TW9n6/zH3T4WZ1CT/AwAAQB3E3L81zET+BwAAgMqIuX9bmIn8DwAAAJURc//2MJOa5P8+6f9vSQWovu7/O/6//n9f9v/Ty0D/X///fOj/6/93o/+v/9/P69f/1/+n1WCH08rW/4+5f0eYSU3yPwAAANRBzP07w0zkfwAAAKiMmPtvCTOR/wEAAKAyYu6/NcykJvm/T/r/FTn+v/6//n9f9v+Toj8/pP+/yPr1/zvT/9f/70b/X/+/n9ev/6//T29l6//H3L8rzKQm+R8AAADqIOb+D4SZyP8AAABQGTH33xZmIv8DAABAX+l0HMIo5v4PhpnUJP/r/1e9/z+3Wv9f/395+/+O/6//f270//X/u9H/1//v5/Xr/+v/01vZ+v8x9+8OM6lJ/gcAAIA6iLn/Q2Em8j8AAABURsz9t4eZyP8AAABQGTH37wkzqUn+1/+vev+/Nsf/b5yv/6//r/9fPvr/+v/d6P/3Z/8//Nii/1+i/n++D+n/U0Zl6//H3H9HmElN8j8AAADUQcz9Hw4zkf8BAACgMmLu/0iYifwPAAAAlRFz/0fDTGqS//X/9f8r0v93/H/9f/3/ktL/X7H+f+OtUP+/sGj/f43+fzfz/fkrHP+/z/v/jv9PWZWt/x9z/51hJjXJ/wAAAFAHMfd/LMxE/gcAAIDKiLn/N8NM5H8AAACojJj77wozqUn+1//X/9f/1//X/9f/X0n6/47/343j/5el/39p+vP9vn79f/1/eitb/z/m/t8KM6lJ/gcAAIA6iLn/7jAT+R8AAAAqI+b+j4eZyP8AAADQZ1Ytek7M/b8dZlKT/N9//f+xvuz/D6bb1//X/9f/1//X/19O+v/6/5n+/3m71P35fl+//r/+P72Vrf8fc/8nwkxqkv8BAACgDmLu/2SYifwPAAAAlRFz/++Emcj/AAAAUBkx998TZlKT/L/c/f/263fj+P/6/5n+v/6//r/+/wXqp/7/iP7/Avr/+v/9vH79f/1/eitb/z/m/t8NM6lJ/gcAAIA6iLn/3jAT+R8AAABK6sFzvkbM/Z8KM5H/AQAAoDJi7v90mElN8n//Hf+///r/+e3r/+v/Z/r/+v9NW1X/f/l0789/4xPLdT+O/1/Q/2+l/99f/f81y7x+/X/9f3orW/8/5v77wkxqkv8BAACgDmLu/0yYifwPAAAAlRFz/++Fmcj/AAAAUBkx9/9+mElN8r/+f8/+/98t5bE4/n/n9ev/6//r/+v/O/7/wv5//h6m/1/Q/9f/7+f16//r/9Nb2fr/Mfd/NsykJvkfAAAA6iDm/j8IM5H/AQAAoDJi7v/DMBP5HwAAACoj5v77w0xqkv/1/1f++P/6//r/+v/6//r/+v+O/9+Z/r/+fz+vX/9f/5/eytb/j7n/c2EmNcn/AAAAUAcx9/9RmIn8DwAAAJURc//eMBP5HwAAAPpAe6O0s5j7HwgzqUn+1//X/9f/1//X/9f/X0n6//r/3ej/6//38/r1//X/6a1s/f+Y+/eFmexpvRsAAACgf8Xc//kwk5r8+z8AAADUQcz9+8NM5H8AAACojJj7D4SZ1CT/6//r/+v/6//r/+v/ryT9f/3/bvT/9f/7ef36//r/9Fa2/n/M/dNhJjXJ/wAAAFAHMfcfDDOR/wEAAKAyYu4/FGYi/wMAAEBlxNz/YJhJTfK//r/+v/5/bfv/L32/bZ36//r/K0H/X/+/G/1//f9+Xr/+v/4/vZWt/x9z/+Ewk5rkfwAAAKiDmPu/EGYi/wMAAEBlxNz/xTAT+R8AAAAqI+b+I2EmNcn/+v/6//r/te3/L+34/2vm71f/X///fOj/6/93o/+v/9/P69f/1/+nt7L1/2PuPxpmUpP8DwAAAHUQc/+xMBP5HwAAACoj5v7jYSbyPwAAAFRGzP0nwkxqkv/1/8+t/z+wSDdQ/7/z+vX/K9D/b6L/r/9/PvT/9f+7uQj9/zebr6L/3+pS9+f7ff36//r/9FaK/v/I/Ncx9/9xmElN8j8AAADUQcz9J8NM5H8AAACojJj7Z8JM5H8A4P/Zu68ky64qj8O3Uz46usegKTAChsAzvBHBDPBewgsPwnsnvBMehPfeeyO8RyA8AiIglLnWKpXJc7Oq8lbus9f3PbCgqEanQtXd/EP6xQYAppG7/35xS5P9r//3/r/+X/+v/9f/75L+X/+/xPv/+v81f7/+X//PdkP0/3f517n77x+3NNn/AAAA0EHu/gfELfY/AAAATCN3/wPjFvsfAAAAppG7/0FxS5P9r//X/+v/9f/6f/3/Lun/9f+Hyf9bpP/X/6/1+/X/+n+2G63/z93/4Lilyf4HAACADnL3PyRusf8BAABgGrn7Hxq32P8AAAAwjdz9D4tbmux//b/+X/+v/9f/6/93Sf+v/1/i/X/9/5q/X/+v/2e70fr/3P0Pj1ua7H8AAADoIHf/I+IW+x8AAACmkbv/kXGL/Q8AAADTyN1/XdzSYv9frv/X/+v/19j/X67/1/8fuO9mfPp//f8S/b/+f83fr//X/7PdaP1/7v7r45YW+x8AAAB6yN3/qLjF/gcAAIAV2DvSz8rd/+i4xf4HAACAaeTuf0zc0mT/6//1//r/Ffb/3v/X/6+I/l//v0T/r/9f8/fr//X/bDda/5+7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYBq5+58QtzTZ//p//b/+X/+v/9f/75L+X/+/ZM39f/5c/b/+X/+v/+dwO+//73HD/j1q/5+7/4a4pcn+BwAAgA5y9z8xbrH/AQAAYBq5+58Ut9j/AAAAMI3c/U+OW5rsf/2//v9U//+f/9H/6//1/6d+XP9/PPT/+v8la+7/N97/1//r//X/bLXz/n9L73/mv87d/5S4pcn+BwAAgA5y9z81brH/AQAAYBq5+58Wt9j/AAAAMI3c/U+PW5rsf/2//t/7//p//b/+f5f0/8P2/2f+r97p9P9Hov/X/x/W/9/9CN+v/6eD0fr/3P3PiFua7H8AAADoIHf/M+MW+x8AAACmkbv/xrjF/gcAAIBp5O5/VtzSZP/r//X/+n/9/+n9/17L/v/OH9P/74b+f9j+f5n+/0j0//p/7//r/1k2Wv+fu//ZcUuT/Q8AAAAd5O5/Ttxi/wMAAMA0cvc/N26x/wEAAGAaufufF7c02f/6f/3/RfX/V+n/5+v/z/P9/8vm6P+9/787+n/9/xL9v/5/zd+v/9f/s91o/X/u/ufHLU32PwAAAExvb1O7/wVxi/0PAAAA08jd/8K4xf4HAACAaeTuf1Hc0mT/6//1/97/1/9fVP8/yfv/6+j/r9H/n4P+v0f/v9H/169F/z/O9+v/9f9sN1r/n7v/xXFLk/0PAAAAHeTuf0ncYv8DAADANHL3vzRusf8BAABgGrn7Xxa3NNn/+n/9v/5f/6//X0v/7/3/c9H/9+j/vf9/6tei/x/n+/X/+n+2G63/z93/8rilyf4HAACADnL3vyJusf8BAABgGrn7Xxm32P8AAAAwjdz9r4pbztz/e5fyqy4d/b/+X/+v/9f/6/93Sf+v/1+i/z93/3/1IX88/f9Y36//1/+z3Wj9f+7+m+IWf/0fAAAAppG7/9Vxi/0PAAAA08jd/5q4xf4HAACAaeTuf23c0mT/H9b/3/6/B/++/v9o9P/n/n79v/7/qP3/Hbee+p/T/+v/z4f+X/+/mbD/9/7/Or5f/6//Z7vR+v/c/a+LW5rsfwAAAOggd//r4xb7HwAAAKaRu/8NcYv9DwAAANPI3f/GuKXJ/j/+9/+v1f/r//X/cfX/3v/X/+v/9f/L9P8n3v/f88qDf6r/1//r/9mJ4+n/L9scV/+fu/9NcUuT/Q8AAAAd5O5/c9xi/wMAAMA0cve/JW6x/wEAAGAaufvfGrc02f/H3/97/1//f579/57+P+n/48+r/l//fx70//r/jf7/gp10P7/279f/6//ZbrT3/3P337w/9frtfwAAAOjg5v1/vHrztrjF/gcAAIBp5O5/e9xi/wMAAMA0cve/I25psv/1//r/E+//vf9f9P/x51X/r/8/D/p//f9G/3/BTrqfX/v36//1/2w3Wv+fu/+dcUuT/Q8AAAAd5O5/V9xi/wMAAMA0Yvcf/M3v9j8AAABM6d37/3j15j1xS5P937j/v/Zi+/9r7vLP9f/n/n79/7H0/zef+XtP/6//XxP9v/5/if5f/7/m7x+n/48fuE7/z3hG6/9z9783bmmy/wEAAKCD3P3vi1vsfwAAAJhG7v5b4hb7HwAAANbqrK4ud//745Ym+79x/z/J+//3vi2+QP8/b//v/f+4q+r/b9f/J/2//n+J/l//v+bvH6f/9/4/4xqt/8/d/4G4pcn+BwAAgA5y938wbrH/AQAAYBq5+z8Ut9j/AAAAMI3c/R+OW5rsf/3/2vt/7//r//X/Q/b/3v8v+n/9/xL9/97+fxPR/6/z+/X/+n+2G63/z93/kbilyf4HAACADnL3fzRusf8BAABgGrn7Pxa32P8AAAAwjdz9H49bmux//b/+f1f9/51/EP1/k/7/ev3/Rv9/KP2//n+J/t/7/2v+fv2//p/tRuv/c/d/Im5psv8BAACgg9z9n4xb7H8AAACYRu7+T8Ut9j8AAABMI3f/p+OGu/3fyX3S8brikB+P3lz/r//3/r/+3/v/+v9dunT9//7/D9f/b6H/P/3Xof/X/+v/9f/s1mj9f+7+z8Qt/vo/AAAATCN3/2fjFvsfAAAAppG7/3Nxi/0PAAAA08jd//m4pcn+1//r//X/q+3/r9H/n/79+v8xef9f/79E/6//X/P36//1/2w3Wv+fu/8LcUuT/Q8AAAAd5O7/Ytxi/wMAAMA0cvd/KW6x/wEAAGAaufu/HLc02f/6f/2//n+1/b/3/8/4fv3/mPT/+v8l+n/9/5q/X/+v/2e70fr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACmkbv/a3GL/Q8AAADTyN3/9bilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/MXx//jbR/+v/GdBo/X/u/m/ELU32PwAAAHSQu/+bcYv9DwAAAKM782/vPFTu/m/FLfY/AAAATCN3/7fjlib7f+b+f+mn6f8P6P/1/xv9v/5/x/T/F97/H+UXo/8/oP+/MJP0/97/1/8zsNH6/9z934lbmux/AAAA6CB3/3fjFvsfAAAAppG7/3txi/0PAAAA08jd//24pcn+n7n/X6L/P6D/1/9v9P/6/x3T/3v/f4n+X/+/5u/X/+v/2e6E+v8rNof0/7n7fxC3NNn/AAAA0EHu/lvjFvsfAAAAppG7/4dxi/0PAAAA08jd/6O4ZZ79f59bFv5N/f+x9//7v4n0//r/jf5f/6//36f/1/8v0f/r/9f8/fp//T/bjfb+f+7+H8ct8+x/AAAAaC93/0/iFvsfAAAAppG7/6dxi/0PAAAA08jd/7O4pcn+1/+P8f5/foP+X/+/4/7/so3+X/9/ien/9f9L9P/6/zV/v/5f/892o/X/uft/Hrc02f8AAADQQe7+X8Qt9j8AAABMI3f/L+MW+x8AAACmkbv/V3FLk/1/0f1/hhr6/30X2v9f3Pv/p+pp/f9J9v97Z/3nD9j/e/9f/3/J6f/1/0v0//r/NX9/9v/5+07/r//nbKP1/7n7fx23NNn/AAAA0EHu/t/ELfY/AAAATCN3/2/jFvsfAAAAppG7/3dxS5P97/3/Gfp/7/+P0f+f/Z+v/99d/3/nj+n/10H/r/9fov/X/6/5+73/r/9nu9H6/9z9t8UtTfY/AAAAdJC7//dxi/0PAAAA08jd/4e4xf4HAACAaeTuvz1uabL/9f/6/yn7/6v0/7P3/97/Xw/9v/5/if5f/7/m79f/6//ZbrT+P3f/H+OWJvsfAAAAOsjd/6e4xf4HAACAaeTu/3PcYv8DAADANHL3/yVuabL/9f/6//Pv/6+oX/ew/b/3//X/+v9hzNv/X6n/1/9fdP9/400HP6z/X+f36//1/2w3Wv+fu/+vcUuT/Q8AAAAd5O7/W9xi/wMAAMA0cvf/PW6x/wEAAGAaufv/Ebc02f+z9//3OuSn6f8PTPv+v/5f/6//H8a8/b/3//X/3v/X/+v/9f9sM1r/n7v/jrilyf4HAACADnL3/zNusf8BAABgbP9/9J+au/9fcYv9DwAAANPI3f/vuKXJ/p+9/z+M/v+A/l//v9H/6/93TP+v/1+i/9f/r/n79f/6f7Ybrf/P3f/fAAAA//+OdCcu") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) 7m17.520309403s ago: executing program 2 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getrlimit(0xa, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)) close_range(r3, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m17.142381575s ago: executing program 36 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getrlimit(0xa, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)) close_range(r3, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m13.877952921s ago: executing program 0 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000280)) 7m12.761286578s ago: executing program 0 (id=260): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) 7m12.25221407s ago: executing program 0 (id=261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x0) 7m12.195917573s ago: executing program 0 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) r3 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r4 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) connect$rxrpc(r0, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x317341, 0x0) 7m11.111268666s ago: executing program 0 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x7fffd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x8, 0xb}, {0xfffe, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x1}}}]}, 0x3c}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m10.204150629s ago: executing program 0 (id=264): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0}) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xf7, 0x9, 0x5, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x6, 0x6c0}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='\v\x00'], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x9, 0x8, 0x3a32, 0x2010, r1, 0x0, '\x00', r3, r4, 0x5, 0x4, 0x4}, 0x50) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f000001fb40)='./file0/file0\x00', &(0x7f000001fb80)='./file2\x00') 7m9.899490114s ago: executing program 37 (id=264): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0}) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xf7, 0x9, 0x5, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x6, 0x6c0}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='\v\x00'], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x9, 0x8, 0x3a32, 0x2010, r1, 0x0, '\x00', r3, r4, 0x5, 0x4, 0x4}, 0x50) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f000001fb40)='./file0/file0\x00', &(0x7f000001fb80)='./file2\x00') 6m40.781083595s ago: executing program 5 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x6) accept4$x25(r1, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) 6m39.398030716s ago: executing program 5 (id=296): socket$inet(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800000000000000d1c4000000", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000800", @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a0101006401"], 0x28) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) 6m34.870127565s ago: executing program 5 (id=303): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x1}, 0x2) 6m32.961260816s ago: executing program 5 (id=306): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 6m30.512442463s ago: executing program 5 (id=308): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 6m24.964478502s ago: executing program 5 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0x7fff}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008001}, 0x2404c100) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m9.399974056s ago: executing program 38 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0x7fff}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008001}, 0x2404c100) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m4.322083991s ago: executing program 4 (id=564): setrlimit(0x8, &(0x7f0000000080)) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) mlockall(0x2) 4m3.935097179s ago: executing program 4 (id=567): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x14) 4m1.374849316s ago: executing program 4 (id=573): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) dup(r0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) 3m56.526232874s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 3m49.209708257s ago: executing program 4 (id=591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = io_uring_setup(0x152e, &(0x7f0000000480)={0x0, 0x7c5b, 0x800, 0x8000002, 0x1d4}) close_range(r1, 0xffffffffffffffff, 0x0) 3m43.260614698s ago: executing program 4 (id=601): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000002000000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x101, 0x0, 0xfffffffa, 0x9c0, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0x8a, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x5f1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffb, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x20000000, 0x8009, 0xffffffff, 0x1, 0x0, 0x0, 0x3, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x804, 0x2, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2d, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0xa, 0x5, 0x0, 0x2, 0x40, 0x0, 0x8000000, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x77, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x354, 0x0, 0x3, 0x0, 0xcaa, 0x6, 0x3, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3]}, 0x45c) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m40.781098644s ago: executing program 39 (id=601): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000002000000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x101, 0x0, 0xfffffffa, 0x9c0, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0x8a, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x5f1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffb, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x20000000, 0x8009, 0xffffffff, 0x1, 0x0, 0x0, 0x3, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x804, 0x2, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2d, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0xa, 0x5, 0x0, 0x2, 0x40, 0x0, 0x8000000, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x77, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x354, 0x0, 0x3, 0x0, 0xcaa, 0x6, 0x3, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3]}, 0x45c) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 57.750179783s ago: executing program 7 (id=857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r1) 55.718231666s ago: executing program 7 (id=860): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 54.964259298s ago: executing program 7 (id=862): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 53.179699794s ago: executing program 7 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(0x0, 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 51.784615354s ago: executing program 6 (id=868): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 51.734882026s ago: executing program 7 (id=869): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r7, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) sendmsg$nl_generic(r7, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x284, 0x24, 0x100, 0x70bd2c, 0x25dfdbff, {0x1a}, [@typed={0x75, 0xe3, 0x0, 0x0, @binary="551a3e6ae55e7a8b4bfc3cbc2c42dace3d348c5095e878282f49f269a5d23d4870c7a82751fe60a562baa6cc67a9a845f6ed285ac3f8abeed17b28de66b1f71173c526d863fc30ee62e3671805fb93179f3e28c2cb1cbffb7242781cdbe8d3b17ed2c28129a182bab1fe1adba90e7f8a9a"}, @nested={0xbf, 0xa5, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="478fea7db489ddc4bdf42fb56bf057af3152cc48640a196d4f328d603f1551f51d6930e6c3d69b3a96be434428edff8d6d4b46a07516a86059a94bb6c8612fd66900ac48521aa60350e494fa876362fb09cd379f64fd26b2f73a24bb293b6ed774d3222f0b5a4cbca60d71bb004d3ed5b3282079a6892bf63a324ffbbb38fc005d97d14198339a691d82f3791e45bcec012bfef545ac97b211512c0e642b38ec8a0196501c66979ec0a2dde8663bc8a2874c5c0a21bb6e"]}, @generic="1022d7259e81ff759e1b0cbe8038b6a823f70bcb558e363f57a6cc46286290acffc025cca5c6d975b5fa252e8a0bf89924d7a03a5124edabf25460eb32e67e6bfb5336ee1547a8394e6425db29db11ba00e62d22900e3ce13f66110d280fe7ab73f2b44cba7b8a7d5df9f9b9016bf16d9f5a3102a1be0e44d333122444a7879ff2a8e41a96284b8853857350ffffd3c75ae00d5e1200e18883a505b611610990cdec7371a7a450f534cf7256bc338d5b5a4ee58ba29feb103eef7298705c07e37a69b0efd2f3d5e7778ac1f19bc2677fd4ab90a7e9bb77c0a6ea5fc50b0a1503f7e3b5a28e8691874a45371abe16d8", @nested={0x47, 0x1e, 0x0, 0x1, [@generic="0e5f4dca4370a5f626ede2d2547d8257cfc8da053127fdabd9dd5abba50de7f4354a28659730346ff3478782d1110d95db5996be4b08d42f0a18364b9917be26c1cd55"]}]}, 0x284}}, 0x4800) close_range(r3, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 50.401072556s ago: executing program 6 (id=871): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0xfffffffffffffff5, 0x0, {{0x4, 0x7, 0x2, 0xfff, 0x3, 0x1ff, 0x1, 0x80000000}}}, 0x60) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r1, 0x8, 0x1, [0x42f1]}, 0xa) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000980)={[{@grpid}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9c03}}, {@block_validity}, {@mb_optimize_scan}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@nouid32}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xfffffffffffffffe}}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") 48.710931407s ago: executing program 7 (id=875): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900240073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e6574646576"], 0xa4}}, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x2, 0x5001) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 46.989715323s ago: executing program 40 (id=875): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900240073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e6574646576"], 0xa4}}, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x2, 0x5001) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 46.970945934s ago: executing program 6 (id=879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) 44.887625242s ago: executing program 6 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(0x0, 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 43.679552367s ago: executing program 6 (id=883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) r1 = socket(0x10, 0x2, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 42.390942186s ago: executing program 6 (id=886): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r7, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) sendmsg$nl_generic(r7, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x284, 0x24, 0x100, 0x70bd2c, 0x25dfdbff, {0x1a}, [@typed={0x75, 0xe3, 0x0, 0x0, @binary="551a3e6ae55e7a8b4bfc3cbc2c42dace3d348c5095e878282f49f269a5d23d4870c7a82751fe60a562baa6cc67a9a845f6ed285ac3f8abeed17b28de66b1f71173c526d863fc30ee62e3671805fb93179f3e28c2cb1cbffb7242781cdbe8d3b17ed2c28129a182bab1fe1adba90e7f8a9a"}, @nested={0xbf, 0xa5, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="478fea7db489ddc4bdf42fb56bf057af3152cc48640a196d4f328d603f1551f51d6930e6c3d69b3a96be434428edff8d6d4b46a07516a86059a94bb6c8612fd66900ac48521aa60350e494fa876362fb09cd379f64fd26b2f73a24bb293b6ed774d3222f0b5a4cbca60d71bb004d3ed5b3282079a6892bf63a324ffbbb38fc005d97d14198339a691d82f3791e45bcec012bfef545ac97b211512c0e642b38ec8a0196501c66979ec0a2dde8663bc8a2874c5c0a21bb6e"]}, @generic="1022d7259e81ff759e1b0cbe8038b6a823f70bcb558e363f57a6cc46286290acffc025cca5c6d975b5fa252e8a0bf89924d7a03a5124edabf25460eb32e67e6bfb5336ee1547a8394e6425db29db11ba00e62d22900e3ce13f66110d280fe7ab73f2b44cba7b8a7d5df9f9b9016bf16d9f5a3102a1be0e44d333122444a7879ff2a8e41a96284b8853857350ffffd3c75ae00d5e1200e18883a505b611610990cdec7371a7a450f534cf7256bc338d5b5a4ee58ba29feb103eef7298705c07e37a69b0efd2f3d5e7778ac1f19bc2677fd4ab90a7e9bb77c0a6ea5fc50b0a1503f7e3b5a28e8691874a45371abe16d8", @nested={0x47, 0x1e, 0x0, 0x1, [@generic="0e5f4dca4370a5f626ede2d2547d8257cfc8da053127fdabd9dd5abba50de7f4354a28659730346ff3478782d1110d95db5996be4b08d42f0a18364b9917be26c1cd55"]}]}, 0x284}}, 0x4800) close_range(r3, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 39.319404297s ago: executing program 41 (id=886): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r7, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) sendmsg$nl_generic(r7, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x284, 0x24, 0x100, 0x70bd2c, 0x25dfdbff, {0x1a}, [@typed={0x75, 0xe3, 0x0, 0x0, @binary="551a3e6ae55e7a8b4bfc3cbc2c42dace3d348c5095e878282f49f269a5d23d4870c7a82751fe60a562baa6cc67a9a845f6ed285ac3f8abeed17b28de66b1f71173c526d863fc30ee62e3671805fb93179f3e28c2cb1cbffb7242781cdbe8d3b17ed2c28129a182bab1fe1adba90e7f8a9a"}, @nested={0xbf, 0xa5, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="478fea7db489ddc4bdf42fb56bf057af3152cc48640a196d4f328d603f1551f51d6930e6c3d69b3a96be434428edff8d6d4b46a07516a86059a94bb6c8612fd66900ac48521aa60350e494fa876362fb09cd379f64fd26b2f73a24bb293b6ed774d3222f0b5a4cbca60d71bb004d3ed5b3282079a6892bf63a324ffbbb38fc005d97d14198339a691d82f3791e45bcec012bfef545ac97b211512c0e642b38ec8a0196501c66979ec0a2dde8663bc8a2874c5c0a21bb6e"]}, @generic="1022d7259e81ff759e1b0cbe8038b6a823f70bcb558e363f57a6cc46286290acffc025cca5c6d975b5fa252e8a0bf89924d7a03a5124edabf25460eb32e67e6bfb5336ee1547a8394e6425db29db11ba00e62d22900e3ce13f66110d280fe7ab73f2b44cba7b8a7d5df9f9b9016bf16d9f5a3102a1be0e44d333122444a7879ff2a8e41a96284b8853857350ffffd3c75ae00d5e1200e18883a505b611610990cdec7371a7a450f534cf7256bc338d5b5a4ee58ba29feb103eef7298705c07e37a69b0efd2f3d5e7778ac1f19bc2677fd4ab90a7e9bb77c0a6ea5fc50b0a1503f7e3b5a28e8691874a45371abe16d8", @nested={0x47, 0x1e, 0x0, 0x1, [@generic="0e5f4dca4370a5f626ede2d2547d8257cfc8da053127fdabd9dd5abba50de7f4354a28659730346ff3478782d1110d95db5996be4b08d42f0a18364b9917be26c1cd55"]}]}, 0x284}}, 0x4800) close_range(r3, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 12.71981715s ago: executing program 9 (id=935): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 10.29643205s ago: executing program 8 (id=942): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x47, 0xc1b, &(0x7f0000001940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0xfffffde2, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) 9.473254682s ago: executing program 8 (id=944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_IOCTL(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, r8, 0x0) 9.232194472s ago: executing program 1 (id=945): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xfffa, 0x1000}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x7, 0x1000}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 7.642689656s ago: executing program 1 (id=946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x10, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000003000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[], 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) shutdown(r0, 0x1) 7.348649555s ago: executing program 9 (id=947): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6.400664871s ago: executing program 8 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40186f40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc, 0x8, 'syz1\x00', 0x10002}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdir(0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) close_range(r7, 0xffffffffffffffff, 0x0) 5.185181971s ago: executing program 8 (id=949): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 4.396610346s ago: executing program 1 (id=950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a32000000"], 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.148184961s ago: executing program 8 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xfffffffffffffedb, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x598e}]}, &(0x7f0000000180)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYBLOB="f2ff0000001714815aa5fe6f00000000005a6366d400"/35], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r9}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 4.103831297s ago: executing program 9 (id=952): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x1, &(0x7f0000001080)) 4.049976393s ago: executing program 1 (id=953): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x47, 0xc1b, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi27CufMO9LIlm3t+kPy7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER8/gsXTpxMB90KAOBRujT5lROnff8DwHvKZT//AwAAAAAAAAAAAADAYZeiiCORYujVzTRdPe+oX2y1b9ycGp/Y+7DBFClqUVT15aN+8tTpM585e260m3c//kH7aDw/eflC47nFa9eX5peX5+caU+3W7OLc/L7f4X6Pv9VINQCNay/emLtyZblx6vjpXS/fHH594Mkjw+fPHTs72q2dGp+YmOyp6et/x3/6be60wuOJKKIZKd4cfiM1I6IW9z8W9/jsPGyDVSdGqk5MjU9UHVloNdsr5YuplqtqEY2eg8a6Y/QI5uK+jEWsls0vGzxSdm/yenOpObMw3/hyc2mltdJabKdap7VlfxpRi9EUsRYRGwO3v11/FPHxSPHyic00ExFFdxw+XS0Mvnd7ag+hj/tQtrPRH7FWewzm7BAbiCIuRYpfvHY0Zssxy4/4ZMSXynw14pUyPxeRyg/GmYif7/E54vHUF0X8e6RYTJtprjofdM8rF7/a+GL7ymJPbfe88th/PzxKh/zcVI8iZqoz/mZ65xc7AAAAAAAAAAAAAAAAADxog1HEdyPFnzz7e9W64qjWpX/g/Oj7Xvjt3jXjz9zjfcra4xGxWtvfmtz+vHQ41cr/HkLH2Jd6FPGtvP7vjw66MQAAAAAAAAAAAAAAAAAAAO9pRbwQKb527Ghai957irfaVxuXmzMLnbvCdu/9271n+tbW1lYjdXIs53TO1ZxrOddzbuSMWj4+51jO6ZyrOddyrufcyBlFPj7nWM7pnKs513Ku59zIGX35+JxjOadzruZcy7mecyNnHJJ79wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvJvUooi3IsV3vrGZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmI45Fi/YV69XytFnE5It7a2trqPiJis8z7ddB9BQAAAAAAAAAAAAAAAAAAgEMrFfGJSPH0/22mRkTcHH594Mkjw+fPHTs7WkQRqSzprX9+8vKFxnOL164vzS8vz881ptqt2cW5+f3+cfWLrfaNm1PjEw+lM/c0+JDbP1h/bvH6S0utq19f2fP1ofqFmeWVpebs3i/HYNQipnv3jFQNnhqfqBq90Gq2q0NT7Q4NrEWM7bczAAAAAAAAAAAAAAAAAAAAHBpDqYgvRIqf/deZ1F033tdZ8/8rnWfFdu0rf7DzuwAWbsmu3t8fsJ/ttN+GjlQL7xtT4xMTkz27+/pvLy3blFIRz0SKT738kWo9fIqhPdfGl3XvL+uuncl1w79W1q3uqqqPTI1PNC4tto9dWFhYnG2uNGcW5huT15uz+/7FAQAAAAAAAAAAAAAAAAAAAHAXQ6mIn0SK//n7/0jd+87n9f99nWc96/9/q1pCX6mn3bmtWtv//mptf2f7A+dHhz7+7J32P4z1/2WbUiri25Hi9E8+Ut1Pv7v+f/qW2rLuzyLFG89+LNfVnijrmt3udN7xSmth/kRZ+9eR4tff7NZGVXs11z69U3uyrB2MFH+5ubv267n2Qzu1p8rao5HiB/+9d+2Hd2pPl7U/ixT/9HeNbu1QWfv7ufbITu3x2cWFuXsNazn/34sUf3vpd1K3z3ec/57f/7B6S267bc7vvv2g5n+4Z99qntc/zfPfvMf8n40U36t/LNd1xn4mv/5U9f+d+f9UpPjPf9tdeyXXfnCn9uR+u3XQyvn/bqT4/l/9dLvPef7zyO7MUO/8/2rf7tz+lLyN+R98gPP/VM++4dyu2bc5Fu9Fyy9988XmwsL8kg0bNmxsbxz0mYlHofz+//NI8f9HitS9jsnf/+/rPNu5/vvfb+18/5+/Jbcd0PXfB3v2nc9XLf19EfWVa9f7n4moL7/0zWOta82r81fn26dOnvjsZ8+ePHHybP8T3Yu7na19j927QTn/P4oUP/6HH2//HLP7+m/v6/+hW3LbAc3/07192nVds++heE8q5/9vIsVTn//p9s+bd7v+7/78f/QTu3P7798Bzf+HevYN53a13uZYAAAAAAAAAAAAPE6GUhF/ESl+949/M3XXEO3n3//N3ZLbDujffx3p2Tf3iNY17HuQAQAOkfL678OR4p+3fri9lnv39V/8Rre29/rvTg7D/f8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBxl6KIP4wUQ69upvWB8nlH/WKrfePm1PjE3ocNpkhRi6KqLx/1k6dOn/nM2XOj3bz78Q/aR+P5ycsXGs8tXru+NL+8PD/XmGq3Zhfn5vf9Dvd7/K1GqgFoXHvxxtyVK8uNU8dP73r55vDrA08eGT5/7tjZ0W7t1PjExGRPTV//O/7Tb5PusP+JKOKHkeLN4TfS9wcianH/Y3GPz87DNlh1YqTqxNT4RNWRhVazvVK+mGq5qhbR6DlorDtGj2Au7stYxGrZ/LLBI2X3Jq83l5ozC/ONLzeXVlorrcV2qnVaW/anEbUYTRFrEbExcPvb9UcR344UL5/YTP8yEFF0x+HTlya/cuL0vdtTewh93IeynY3+iLXaYzBnh9hAFPGPkeIXrx2NHwxE9EXnEZ+M+FKZr0a8UubnIlL5wTgT8fM9Pkc8nvqiiDORYjFtptcGyvNB97xy8auNL7avLPbUds8rj/33w6O057mpODTnpnoU8aPqjL+Z/tXfawAAAAAAAAAAAAAAAIBDpIi1SPG1Y0dTtT54e01xq321cbk5s9BZ1tdd+9ddM721tbXVSJ0cyzmdczXnWs71nBs5o5aPzzmWczrnas61nOs5N3JGkY/POZZzOudqzrWc6zk3ckZfPj7nWM7pTvZ1u7iW96/n3MgZh2TtHgAAAAAAAAAAAAAAAAAA8O5Si6K6i/t3vrGZtgY695eejk6uux/ou94vAwAA//9E4XBP") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0xfffffde2, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) 2.921941952s ago: executing program 8 (id=954): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x100000000000088, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xd, 0x8, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x1000) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000005c0)="ff5bb993e3d5f67c24fd68ec539ffd2676d2df5d72a3ac0825953eaf8c63bbfcf5d80db90cbb597ac79246dfc5d8db565b73eaaa4f94bd73b18d32a3cf6f8c457636d504a8448dacf568f2737cfa8856437cd5df569956ba9718bce194877eb17be509c6244abbb55bc63a1da7ed1c37b753e975b5732b538c525f9bc9b9d0c5b65d5c", 0x83}, {&(0x7f0000001080)="1393a72816f3a09c79135f8e0633828260b0f5f509e5fbb7c86c7de9c775816107ef97ffbfc6f3f92000f90eb6f7cb09aa279d9c9e5996a9edaca751ca836ea70d8cc35d5adce7ee75ed4e003cef6e41fd51723d038e2d6da369729ca1f915d8e8fd15f00ec718e1a9dc67951a5dddd1d1b403960c7ad7cc423cc6971e2325622808f512950b5ebae39abd26f17453f1726b784f356c182852a81649e35de6e374bb6acb1fd13f602ae0c80d4c91e938f011b37050da8a1f586d46e4e951352e8ad7f698e4bb82b75b77fa45060235e780fd9000886bbd9fd524b4a2b48ea096c123847ae8b81b3e13d4f558c1088c4cc6749bd35a6b73b5ff867ae30b063e40ba27160bdc4ac77d9fc252aca0b410d556937b8e5d4978e3177c7ea2866888f17c01299687992cd16edd98d647be9c2115dadef22cb9584b554d97e750ba5f907702931c87ab8adb359a9b00dd863a8964295f2dbd1378569341b1498d538dbfd0e4c48e0413459c32597ee65e02510daca28842660a1450e5c347d7b223f4261c2f66beba6bcb8d7b05b068f4c3839d0b32e80cd411019be9e7bd8bf9524896a85cbb6258e955342aa73d505371c58de26e05512cffce8ed05964934423431f45c639a69a61a2c8b39b7fcf929a52c4a16418520dd0255005092677686b6187b3b70a8196715e500063719875e0fb884f16bf65adbb361a030a0aed61dc3f1c79bd7428495ebe1ec004195a1a58cb41306d91af67a089ef25af6251484fe0d76b3c58f22288e4efb20e7a723bc247b241cd3bf8f0b1422f89bb7942df219acc89ecf78803b57824c157664b0c4a11b1cb9acd2ceeff0b1bbb8a015b1e219f4e1c0c51752046b0f26af2cfb78910d5ee6fc5d9cd7300ca0e09b042465bdf6458fd43a1480859043551ded1fecf7e2d9e4ebacb05185014b83a23567bec626b9029cf8f42e8bc00778837e8fa7a679345e81a99bef08557f99d9c43df4a6949ae8af75f141845e0776a37ee7ff121f414d3485c4520722de50579329df2b8fc7bcd9677ad5d6b8a09eac23017ebbb5dd3f32c073fedae99b1f917ac54f55bc47043b9e2de37ec1c61fbcc18567f4a15302d2c2dc403d47e168b06e903ac508655192705766bea57e4671ff469537e3761d4fc3ce15ee027ba1467b12e00dc5909d5c54723b00cf056037e133b4b6c6e614124c052f3776a78ab3b3a72514b8accd8e1a6a976b67daadd0e37a2102ef6f5e2989aafbf9929c76ee9945620050252ef985b6167a0d239eba1868a32db36ce0161a55982e9c522b82f0fa4a0e2d653b0a22b4953d523340127ecd0ba88fc4d55601394b83a81764d0827632aada89ed2362289521c83a2e29b77f6501339c61f2d95c53ab20fa1a3e5481144390716b1ebffa9eab5e22761765507adb5a24cbf5f0773f1a74d296a3352062fae8e5f2843e2c458366800c5bbe9a7df490b0fde057aecba605f5c79c2695af667d3c826a69d31b20bd67c9dff1528ba31791247903a5dee8d975dd5b406ea19df7dd352bc30281d85ff270ffc64a920952bf4dfe626f3600e6c74178a88e71eb54d0ab1b2952b7dc59655ca1d8dbb396a910d4a00a6a259405f80f1f10562313b8bbc37a488dbd6e95bd01968b8431f2a904c13a9cf5bf465e366ac9fc48a662a6439837a8666b0e934d16dcae0da3f6e0ec553bcbee7d455314156a07508dc0cfe1d9305537e8687f2fe8623f69629037a1c9e9c452b399562df8147f37439f25b42202363e7a40cb0de1fd08496cb0f3e1f67c5a43acc4130ce8acc067fd73cf78a09bfd690abd9a1c890fe793b21c96d7ee57f3d80619c16b2690f69749f3e5d2354bf7ce523a9e0507d6ed73ca353adf43a548ba2abe5a9c9349a7ae2be32ded77ed199251f1ea482183388f916201e6b82ec6d2a3fcadaf483d36ca862037462e1fc4822c07864ebbf2dbab6134c7950df2fc9213166c943a65173a6e33fe0fcf8a2e50dc24ea9b3fe2852d95f6e1ce99d5f5e9c4288175cad73728d08674e405804ffd3da08a02ed21a0105af267c58b1eef232a1eb5b861df796b9bce517857cd0669bf50cf7416f4d9658a177bbbeb6bccdc1671bde13038876e52f8565e2bd70d630ccbf2067d683c1264f70c15ca4c57de5d0692e680e2f752578a262efc1920ff70fef7632f5769cc107d3894deb1c538eca2c50efd0b861a3e8c9673fb50808909ce43ef84ee005b987d8057d51ea85b797334a8336c57f1b76ab6a5edf3afd76588d0c0a3f89a12797617e9d3685458bcc6d480eb56b39b8a8a48047af65b1c660a8caa0af6c7b4bf26e1252675be802821fd4deae3a88b11de7149ff67c617c2c08e26642bb792dd85d52278d33ffd39b59ac7f6705136bb9dd416fa6cd877b2241af2758111c9223335b2e277ff860e1477cb8b95a0120bafc312e0a461970f7384126a3aab3d0234ef362852373c0dc548ce93274b0c7932c34f3623f98a4abc2ebf77cbbcb9510bfd1788b8cccca96b025cc069b0e2850b3aa44d72a2b2dcf043b9b33ee09b5938668b6ab8079e44d4130ccd36b7f79cd06f11d533e9ada15bd2ad613c74e8ba763e606dcfa344225ffc3c03f42543face31b25a0b4d129c347126a54bb5c4b2bb5cad1248474cab7895c96d6460879648fec875d0c16f0656e36d90c2fa65a81152366c7ece51262765a33af19e11a8a50926711e4400cab6270524d85652b05cbdb4ff3821f0c61d5d11601bc9e3860b734d0f927581ff240dcc4b2f0fe2a8cd848c35b13f8c746fc3632fac5ba7f9597953c2a6fa2b8d946333be57310156c344d105dd4674bd6c07be8771650970f044aec046a31350f86078b12854e0f36af15d152c0dcdb2cc21f986aee49d4fc5f002a7c8b5fa7d337dff7e608a0bd4fcd0c5b33c95ccd192b8b5893caa8c69bab0ce486121b6ef14482a01969c320f089c4a8d9200001f5f3d02e5f89ad7d110c45a376b32b000145669a430168a4b06d3fc0ea1d9aa292f1b02099cae1d4ee8ea58c64347c84b92ebc520c7307104ceedcd8a4b19ae01db55e07916ed38e24e955d96ed07c82f6a16fa814b5d269f38fcde352969bd73ff6e6a718cca1dbd66f2abb8af1f9789a6ddf11a0a3e4369ade546a563eb2248c3a4e9230eba8a6cf0d1ff7280cda586f109de69f7610adeda8e9fd98137224d7ad25e1646d252efc81d4448cbf509453b927bda3f14429f4622cd71f043ecc8fbb056f9025f107ec781ebb9fd93cff1cdcea77aa86806d07588d28aa74ec40ee4ff09852e8285bba80fc16a24c3a54055b512e02479acc148f0e9108f9d3f7c37d2eb514c931564c247c26e772c4abc4e1eb4ce92b1fbe3de384d130427ec2b127116d355129b9585ab217ea154b6aa6ce8de30fa380755b5644510cde19c9c6eafa8fbd8bedd5173d0b30163e8bb09e478c71cedffa7af10bef32d4a212a181ba61afeb68f57f4c0eb46d9823bf5e1f52613b637518cc91a1414e3fffbbb101f604b658a91c48c58666b2776c2f1793c3135bc1d64529bcf373e7e30e1f3ccfc9444cff80909bfd7f10fbe1d9201d8748007267c9992af9d7d1c8c6accbb16925cf287a4229a5e0283226fe7723310c6b80b75f8f4f7ddf353c7acf8072a5d56ff16de0609c704bc715451a97a182fc530fe43c650516049d94b8984c2cc587218bd60c62fd9490079059eb0a9810158143c94553deaad05e7b12fc392ee37dcb09403b63d8670662f5cee7c44df16ee47a563a33ff1b1d3e0d015c8fea51fa901ef875d50f788764b6e6e147e26558850997adb7691b20683bca63284d0a0e488b13f881acdd5fdbe5e450174081a46f75ecfa7c5d0b8636ae66e5ffa313e7e854a5b0530da5ec8bcf9e8b32c65250cf72fb054449065a362da583bc8475dfbd48112a60ba6836a25e0a63124d4cccf1caa5ca94646a1311cce2b7609116dd3f725802d2e9832bca6362927db160146def193e08a5709a23935bb9bf24661f493770cb5e78c38335938965b09cb06c5bfdb0a207351f8bff2c6587a9f01093993aae5b4d12f3beee9b2dcb0a710473ac02f0433190fa15644b1d193b9eecc93d3ee7ba8a7dd20cfd369b173a05be9e833b99652c6bc5e0251e95a824c36acd585b25dcbba00773aa66b87549d0d8a1ea2970e09d31c9f8837b58321b9ce8c0e760296848837eab2ff943c3371f10883cfe9fdd29d8f902db02cd5615c3056390bb5f17193a9bee0b07dea964c2553af9558af7da0d65ff9fa3b9b4d79c6c20deb3819f85b9a55d9e8739839c854a60d94c069d1735d1a641d27549eec3eb9459629884c50f56750244a085c90212d03fef5dc0f7523692df38fb8652dcd0b276a8528e57d53611db72d25a7571265c24008f1ae7a73e4aeae70af594c82f7380b7bf86e831f212fee61073a6e6c0dad7e63a2febe91072cee97d06eb28f84c731e6ab9dd5c8ad2e62d12c9e4ed08129965b929e32f5dfb3f2335123a6c112a1f3a9a28b5a94bfa1c9fee2c49a7bfbddd3d988be2d1a5a50863fe05a20e57f92dc035d3de32c1d089dd6662cb2bb16904b0a67d46f354dd2741f67cf21a9ddc917c3903b690de5cf8aaea92a30732e9dee6f693163558d9fc0c646e93b5bce659f2cb60065294cab5858401973c329f47ff613909a1da0e9868eb61d1a79393ebed458749f494ad8c26238d8a70685a0a455d15e2d0968c23692aa029dde9fb25e49fb1ce9d3ec2617ec42e4ca42da02471ae96d85d306c3e81f68edeeb50e3a5352aefd450dee0a9f54a1d43e194203d258154eb524403dee19d7004bcc4ff4d2fe80d196f14dbd5307cfab84b3c663b8c5d735e4df7ad6542e7d2ed4a0d51490a3118a2a7b3928ec888e6aeebd86d27cfdda25ed4344a278127981c593a59f88b98e69ed5909340362e0876a68104fc1d046763d848261ca6f6a201b7f5eea8ec6b30fa19005113c2593081b0b920172be2656e7b71047a8d520e550ed58a4503c3b2341ea90240b582ad3e6b56a60fcad26991cf4b17460eb89f9d7ffd19007067a9bd874c0907db2c2381e22fd0918bca6e6042f670af5a7d385090d4f8166a5c774f7dbfa19402128e627e18e351afdb7abe349cde651b339bcab9c50b53a61034507ebacff478059214294b2a30acd34125a6f720b31f3f39e02f76ee83d6aa466341c747487f676772178d03eeabf0e05f4f01f413d1b7ced688feb20f8e1ab448945ed320389d5c4313a73251d92419bfe0f19d7999be1caede5f5824e756c6d350e6333137f5ce7edc34113f32bb84cfae485e7dbd3c1a306ff2f52266d6e1c4eeab2f532e6fdb9009c98e5461164e6058143f7448d4949c93dad85bb153970fb9758da469b99cb515cbb2c8de8fa583d9c4b2663eba24bc96658366459db09b53a0d4f4ad7183cb4fe802caa6eead9d1164734bfd581e3d1fbec14ccb8e80ff3e9eef1a99ec21408379b2de0dfd73ada757bcaef871a5431e6572d51c0fe1cd53fe5263e91dcad8fd580c0ab4e01ad62a8c5338dfdad63aa8bc361775331c36ba538346d6acc9aa488a8033e1eb8c17faceebb0722090445c13b3e78e5cbe7d9e116373d8ff03", 0xf81}, {0x0}], 0x3) 2.821190376s ago: executing program 9 (id=955): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xfffa, 0x1000}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x7, 0x1000}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 2.380539933s ago: executing program 1 (id=956): socket$inet(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800000000000000d1c4000000", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000800", @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a0101006401"], 0x28) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) 1.058435138s ago: executing program 9 (id=957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r2, 0x402, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 64.931275ms ago: executing program 9 (id=958): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x3cb480) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x28, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)={0x48, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10048d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x66) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0x4, 0x80000) 0s ago: executing program 1 (id=959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x10, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000003000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[], 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Interface activated: batadv_slave_0 [ 303.897635][ T7377] veth1_macvtap: entered promiscuous mode [ 303.926552][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.933748][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.999257][ T6112] hsr_slave_0: left promiscuous mode [ 304.008862][ T6112] hsr_slave_1: left promiscuous mode [ 304.017301][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.026648][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.038814][ T6112] hsr_slave_0: left promiscuous mode [ 304.045359][ T6112] hsr_slave_1: left promiscuous mode [ 304.051250][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.059588][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.437623][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 304.478366][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 304.733934][ T5873] Bluetooth: hci3: command tx timeout [ 305.003287][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 305.033570][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 305.457499][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.545882][ T7377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.587819][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.637254][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.648484][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.680589][ T7377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.719913][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.817933][ T141] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.828534][ T141] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.900101][ T141] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.909682][ T141] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.261823][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.269702][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.353148][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.373549][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.400437][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.420283][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.528596][ T7659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.610149][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.631203][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.665515][ T7659] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.774841][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.782070][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.811738][ T5873] Bluetooth: hci3: command tx timeout [ 306.829868][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.837481][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.868042][ T7652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.913191][ T7652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.989400][ T7652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.932355][ T7652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.076571][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.156598][ T7702] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.424032][ T7702] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.252175][ T7702] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.310919][ T7702] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.413990][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.605559][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.670186][ T7652] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.805606][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.812850][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.831279][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.838480][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.895551][ T7702] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.952841][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.960014][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.005462][ T7777] loop8: detected capacity change from 0 to 32768 [ 311.050889][ T7659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.418668][ T7777] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 311.422580][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.435076][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.518406][ T7571] veth0_vlan: entered promiscuous mode [ 311.758250][ T7652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.853720][ T7571] veth1_vlan: entered promiscuous mode [ 311.894613][ T7191] ocfs2: Unmounting device (7,8) on (node local) [ 312.308564][ T7571] veth0_macvtap: entered promiscuous mode [ 312.379320][ T7571] veth1_macvtap: entered promiscuous mode [ 312.548088][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.617491][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.769482][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.804757][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.854221][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.888202][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.402048][ T6324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.546272][ T6324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.665317][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.890561][ T6324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.916887][ T7702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.950205][ T6324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.006294][ T7659] veth0_vlan: entered promiscuous mode [ 315.893616][ T7659] veth1_vlan: entered promiscuous mode [ 316.100078][ T7659] veth0_macvtap: entered promiscuous mode [ 316.245024][ T7834] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.79'. [ 316.257958][ T7659] veth1_macvtap: entered promiscuous mode [ 316.317532][ T7834] netlink: zone id is out of range [ 316.359085][ T7834] netlink: get zone limit has 8 unknown bytes [ 316.396147][ T7659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.436139][ T7659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.548829][ T6112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.601521][ T6112] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.610297][ T6112] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.744774][ T141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.955306][ T7847] netlink: 'syz.6.277': attribute type 2 has an invalid length. [ 317.963273][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.6.277'. [ 318.350758][ T6324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.375295][ T6324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.666516][ T7652] veth0_vlan: entered promiscuous mode [ 318.780301][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.805380][ T7702] veth0_vlan: entered promiscuous mode [ 318.831958][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.164377][ T7652] veth1_vlan: entered promiscuous mode [ 319.238183][ T7859] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 319.737639][ T7702] veth1_vlan: entered promiscuous mode [ 320.428285][ T7652] veth0_macvtap: entered promiscuous mode [ 320.507158][ T7652] veth1_macvtap: entered promiscuous mode [ 320.661707][ T7702] veth0_macvtap: entered promiscuous mode [ 320.676983][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.799021][ T7702] veth1_macvtap: entered promiscuous mode [ 320.869812][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.081983][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.108951][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.203334][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.8.286'. [ 323.313983][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.428499][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.560282][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.645755][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.896133][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.910204][ T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.949441][ T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.107264][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.117109][ T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.154759][ T7909] netlink: 28 bytes leftover after parsing attributes in process `syz.8.290'. [ 326.181363][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.207698][ T7909] netlink: 28 bytes leftover after parsing attributes in process `syz.8.290'. [ 326.251570][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.290'. [ 326.270552][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.290'. [ 326.729896][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.736321][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.772435][ T6327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.780270][ T6327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.971656][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.979529][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.091450][ T5958] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 327.307515][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.341156][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.345637][ T5958] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 327.419609][ T5958] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 327.495719][ T5958] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.597883][ T5958] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 327.611605][ T5958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.641425][ T5958] usb 9-1: Product: syz [ 327.665643][ T5958] usb 9-1: Manufacturer: syz [ 327.692843][ T5958] usb 9-1: SerialNumber: syz [ 327.779797][ T5958] hub 9-1:1.0: bad descriptor, ignoring hub [ 327.818861][ T5958] hub 9-1:1.0: probe with driver hub failed with error -5 [ 328.089884][ T5958] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 328.232255][ T7939] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 328.240048][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'. [ 328.498646][ T5958] usb 9-1: USB disconnect, device number 2 [ 328.582838][ T5958] usblp0: removed [ 328.640585][ T7944] syzkaller0: entered promiscuous mode [ 328.685086][ T7944] syzkaller0: entered allmulticast mode [ 328.925346][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.296'. [ 329.126607][ T7954] vim2m vim2m.0: vidioc_s_fmt queue busy [ 329.213238][ T7958] netlink: 24 bytes leftover after parsing attributes in process `syz.8.297'. [ 329.826196][ T7931] loop9: detected capacity change from 0 to 32768 [ 329.859851][ T7931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.294 (7931) [ 332.267806][ T7931] BTRFS error (device loop9): open_ctree failed: -4 [ 332.411477][ T5874] Bluetooth: hci3: command 0x0405 tx timeout [ 337.699773][ T8000] hub 9-0:1.0: USB hub found [ 337.709560][ T8000] hub 9-0:1.0: 1 port detected [ 337.905011][ T7996] loop4: detected capacity change from 0 to 4096 [ 338.125272][ T7996] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 338.487488][ T8012] netlink: 'syz.4.307': attribute type 4 has an invalid length. [ 338.495453][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.307'. [ 338.909372][ T5999] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 339.514021][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.9.312'. [ 339.801442][ T5999] usb 9-1: Using ep0 maxpacket: 32 [ 339.853190][ T5999] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.195219][ T5999] usb 9-1: config 0 has no interfaces? [ 340.243539][ T5999] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 340.283875][ T5999] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.318592][ T5999] usb 9-1: Product: syz [ 340.333083][ T5999] usb 9-1: Manufacturer: syz [ 340.338087][ T5999] usb 9-1: SerialNumber: syz [ 340.391752][ T5999] usb 9-1: config 0 descriptor?? [ 340.640991][ T5999] usb 9-1: USB disconnect, device number 3 [ 341.671768][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.316'. [ 341.946564][ T8039] vim2m vim2m.0: vidioc_s_fmt queue busy [ 344.805820][ T8050] syzkaller0: entered promiscuous mode [ 344.907511][ T8050] syzkaller0: entered allmulticast mode [ 348.129382][ T8074] loop6: detected capacity change from 0 to 32768 [ 348.252644][ T8074] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 349.002735][ T7571] ocfs2: Unmounting device (7,6) on (node local) [ 351.008859][ T5918] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 351.214939][ T5918] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.241436][ T5944] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 351.243929][ T5918] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 351.277242][ T5918] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.321416][ T5918] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 351.330873][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.356808][ T5918] usb 10-1: Product: syz [ 351.361114][ T5918] usb 10-1: Manufacturer: syz [ 351.378463][ T5918] usb 10-1: SerialNumber: syz [ 351.411470][ T5944] usb 7-1: Using ep0 maxpacket: 32 [ 351.426751][ T5918] hub 10-1:1.0: bad descriptor, ignoring hub [ 351.449433][ T5918] hub 10-1:1.0: probe with driver hub failed with error -5 [ 351.450617][ T5944] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.506777][ T5944] usb 7-1: config 0 has no interfaces? [ 351.526812][ T5944] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 351.555627][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.568065][ T5944] usb 7-1: Product: syz [ 351.581561][ T5944] usb 7-1: Manufacturer: syz [ 351.586214][ T5944] usb 7-1: SerialNumber: syz [ 351.624756][ T5944] usb 7-1: config 0 descriptor?? [ 351.631029][ T5918] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 351.859294][ T5944] usb 7-1: USB disconnect, device number 2 [ 352.025222][ T43] usb 10-1: USB disconnect, device number 2 [ 352.035385][ T43] usblp0: removed [ 352.473032][ T8138] netlink: zone id is out of range [ 352.834075][ T8138] netlink: set zone limit has 4 unknown bytes [ 353.867030][ T8148] input: syz1 as /devices/virtual/input/input5 [ 356.038784][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 356.311640][ T8193] vim2m vim2m.0: vidioc_s_fmt queue busy [ 359.623081][ T8224] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 361.051682][ T5944] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 361.239006][ T5944] usb 10-1: Using ep0 maxpacket: 32 [ 361.299691][ T8238] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.347'. [ 361.305479][ T5944] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.342648][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.361754][ T5944] usb 10-1: config 0 has no interfaces? [ 361.367645][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.379998][ T8238] netlink: zone id is out of range [ 361.386883][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.394623][ T8238] netlink: get zone limit has 8 unknown bytes [ 361.406608][ T5944] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 361.420274][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.431509][ T5944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.440815][ T5944] usb 10-1: Product: syz [ 361.445325][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.454200][ T5944] usb 10-1: Manufacturer: syz [ 361.459267][ T5944] usb 10-1: SerialNumber: syz [ 361.575386][ T5944] usb 10-1: config 0 descriptor?? [ 361.809454][ T24] usb 10-1: USB disconnect, device number 3 [ 363.172474][ T8247] netlink: 'syz.4.349': attribute type 2 has an invalid length. [ 363.180173][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 363.602549][ T5874] Bluetooth: hci6: command tx timeout [ 363.612180][ T8256] Zero length message leads to an empty skb [ 364.277823][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.355'. [ 364.451860][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 364.680651][ T8289] vim2m vim2m.0: vidioc_s_fmt queue busy [ 364.749692][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.798088][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.818664][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.844557][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.961748][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 364.971554][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.983240][ T9] usb 7-1: Product: syz [ 364.989729][ T9] usb 7-1: Manufacturer: syz [ 365.014924][ T9] usb 7-1: SerialNumber: syz [ 365.070286][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 365.098743][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 365.279857][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 365.343432][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.458255][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 365.488212][ T8293] loop4: detected capacity change from 0 to 512 [ 365.505449][ T8293] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 365.521009][ T8293] EXT4-fs (loop4): invalid journal inode [ 365.526772][ T8293] EXT4-fs (loop4): can't get journal size [ 365.554773][ T8293] EXT4-fs (loop4): 1 truncate cleaned up [ 365.562349][ T8293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.584658][ T30] audit: type=1800 audit(1757965391.725:48): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.358" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 365.613633][ T24] usb 7-1: USB disconnect, device number 3 [ 365.662536][ T30] audit: type=1804 audit(1757965391.805:49): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.358" name="/newroot/12/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 365.688344][ T5874] Bluetooth: hci6: command tx timeout [ 365.709206][ T24] usblp0: removed [ 365.917699][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.578795][ T7702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.665972][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.064946][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 367.159721][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 367.369622][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 367.400000][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 367.731387][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.738582][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.761476][ T5874] Bluetooth: hci6: command tx timeout [ 367.791807][ T8237] bridge_slave_0: entered allmulticast mode [ 367.799798][ T8237] bridge_slave_0: entered promiscuous mode [ 367.830069][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.880463][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.919397][ T8237] bridge_slave_1: entered allmulticast mode [ 367.970228][ T8237] bridge_slave_1: entered promiscuous mode [ 369.425770][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.475644][ T8338] netlink: 'syz.4.364': attribute type 2 has an invalid length. [ 369.483621][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.364'. [ 369.580733][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.730155][ T5958] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 369.844357][ T5874] Bluetooth: hci6: command tx timeout [ 370.136713][ T5958] usb 10-1: Using ep0 maxpacket: 32 [ 370.192494][ T5958] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.229692][ T5958] usb 10-1: config 0 has no interfaces? [ 370.244393][ T5958] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 370.266774][ T5958] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.354143][ T5958] usb 10-1: Product: syz [ 370.389710][ T5958] usb 10-1: Manufacturer: syz [ 370.414992][ T5958] usb 10-1: SerialNumber: syz [ 370.420630][ T8237] team0: Port device team_slave_0 added [ 370.457366][ T5958] usb 10-1: config 0 descriptor?? [ 370.465831][ T8237] team0: Port device team_slave_1 added [ 370.737298][ T5958] usb 10-1: USB disconnect, device number 4 [ 370.897076][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.906801][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.057203][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.119806][ T13] bridge_slave_1: left allmulticast mode [ 371.125977][ T13] bridge_slave_1: left promiscuous mode [ 371.149790][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.180752][ T13] bridge_slave_0: left allmulticast mode [ 371.187695][ T13] bridge_slave_0: left promiscuous mode [ 371.222514][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.750958][ T8340] loop8: detected capacity change from 0 to 32768 [ 371.797723][ T8340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.366 (8340) [ 371.821973][ T5958] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 374.891481][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 375.667656][ T5958] usb 10-1: device descriptor read/all, error -71 [ 380.585032][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.604134][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.625719][ T13] bond0 (unregistering): Released all slaves [ 380.688172][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.698995][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.750608][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.865254][ T8237] hsr_slave_0: entered promiscuous mode [ 380.883394][ T8237] hsr_slave_1: entered promiscuous mode [ 380.896834][ T8237] debugfs: 'hsr0' already exists in 'hsr' [ 380.903741][ T8237] Cannot create hsr debugfs directory [ 381.886004][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 381.896073][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 381.914538][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 381.928343][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 382.164229][ T8452] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.379'. [ 382.190200][ T8452] netlink: zone id is out of range [ 382.218792][ T8452] netlink: get zone limit has 8 unknown bytes [ 382.671480][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 382.845847][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 382.861726][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.913922][ T10] usb 10-1: config 0 has no interfaces? [ 383.082770][ T10] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 383.094761][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.170605][ T10] usb 10-1: Product: syz [ 383.185384][ T10] usb 10-1: Manufacturer: syz [ 383.236333][ T10] usb 10-1: SerialNumber: syz [ 383.254674][ T10] usb 10-1: config 0 descriptor?? [ 383.371693][ T8237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.489212][ T10] usb 10-1: USB disconnect, device number 7 [ 383.590510][ T13] hsr_slave_0: left promiscuous mode [ 383.668838][ T13] hsr_slave_1: left promiscuous mode [ 383.703061][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.836243][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.942416][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.950832][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.062468][ T13] veth1_macvtap: left promiscuous mode [ 384.098705][ T13] veth0_macvtap: left promiscuous mode [ 384.123717][ T13] veth1_vlan: left promiscuous mode [ 384.125129][ T8455] loop4: detected capacity change from 0 to 32768 [ 384.179965][ T13] veth0_vlan: left promiscuous mode [ 384.229218][ T8455] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.380 (8455) [ 384.421913][ T8455] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 384.531550][ T8455] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 385.462622][ T8455] BTRFS error (device loop4): open_ctree failed: -4 [ 388.008918][ T8506] loop6: detected capacity change from 0 to 32768 [ 388.167340][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.173937][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.196121][ T8506] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 388.735293][ T7571] ocfs2: Unmounting device (7,6) on (node local) [ 388.882016][ T13] team0 (unregistering): Port device team_slave_1 removed [ 388.947729][ T13] team0 (unregistering): Port device team_slave_0 removed [ 389.940464][ T8237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.961204][ T8237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.985488][ T8237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 390.294887][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 391.635461][ T8551] loop6: detected capacity change from 0 to 262144 [ 391.707573][ T8551] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.397 (8551) [ 391.723826][ T8551] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 391.736281][ T8551] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 391.788066][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 391.966510][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 391.990837][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.999235][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.019748][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.093000][ T9] usb 10-1: config 0 has no interfaces? [ 392.098274][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.105748][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.205579][ T9] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 392.216459][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.225444][ T9] usb 10-1: Product: syz [ 392.295310][ T8551] BTRFS info (device loop6): enabling ssd optimizations [ 392.302510][ T8551] BTRFS info (device loop6): enabling free space tree [ 392.339947][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.347214][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.363389][ T9] usb 10-1: Manufacturer: syz [ 392.484245][ T7571] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 392.660008][ T9] usb 10-1: SerialNumber: syz [ 392.883514][ T9] usb 10-1: config 0 descriptor?? [ 392.895459][ T9] usb 10-1: can't set config #0, error -71 [ 392.915001][ T8237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.010815][ T9] usb 10-1: USB disconnect, device number 8 [ 394.459078][ T8611] input: syz1 as /devices/virtual/input/input6 [ 395.440597][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.050495][ T8626] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.409'. [ 396.080056][ T8237] veth0_vlan: entered promiscuous mode [ 396.110459][ T8237] veth1_vlan: entered promiscuous mode [ 396.158914][ T8626] netlink: zone id is out of range [ 396.231462][ T8626] netlink: zone id is out of range [ 396.262987][ T8626] netlink: get zone limit has 8 unknown bytes [ 396.764243][ T8237] veth0_macvtap: entered promiscuous mode [ 396.896685][ T8237] veth1_macvtap: entered promiscuous mode [ 397.379413][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.698193][ T8631] loop8: detected capacity change from 0 to 262144 [ 398.712304][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.761591][ T8631] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.412 (8631) [ 398.785174][ T8631] BTRFS info (device loop8): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 398.795374][ T8631] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 398.835955][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.342394][ T6112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.414645][ T6112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.417281][ T8631] BTRFS info (device loop8): enabling ssd optimizations [ 399.433238][ T8631] BTRFS info (device loop8): enabling free space tree [ 399.441246][ T6112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.326252][ T7191] BTRFS info (device loop8): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 403.443997][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.479725][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.668079][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.784841][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.881372][ T30] audit: type=1326 audit(1757965433.975:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0db8eba9 code=0x7ffc0000 [ 408.305508][ T30] audit: type=1326 audit(1757965433.995:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0db8eba9 code=0x7ffc0000 [ 408.611411][ T30] audit: type=1326 audit(1757965433.995:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9f0db8eba9 code=0x7ffc0000 [ 408.781250][ T30] audit: type=1326 audit(1757965433.995:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0db8eba9 code=0x7ffc0000 [ 408.881543][ T30] audit: type=1326 audit(1757965433.995:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0db8eba9 code=0x7ffc0000 [ 409.080797][ T8763] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.424'. [ 409.164070][ T8763] netlink: zone id is out of range [ 409.212781][ T8763] netlink: zone id is out of range [ 409.454128][ T8763] netlink: get zone limit has 8 unknown bytes [ 410.351808][ T8780] loop6: detected capacity change from 0 to 512 [ 410.387645][ T8779] tipc: Started in network mode [ 410.411893][ T8779] tipc: Node identity c2090933b816, cluster identity 4711 [ 410.419193][ T8779] tipc: Enabled bearer , priority 0 [ 410.458478][ T8780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 410.831571][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 410.895107][ T8780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.963700][ T8779] tipc: Resetting bearer [ 411.008244][ T8780] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.267485][ T8778] tipc: Disabling bearer [ 411.680180][ T7571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.593869][ T8804] loop8: detected capacity change from 0 to 4096 [ 412.609219][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.9.435'. [ 412.795418][ T8804] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 413.045708][ T8810] netlink: 'syz.8.434': attribute type 4 has an invalid length. [ 413.053570][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.8.434'. [ 414.003195][ T8825] loop8: detected capacity change from 0 to 512 [ 414.103252][ T8825] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.154510][ T8830] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.440'. [ 414.195873][ T8825] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 414.201411][ T8830] netlink: zone id is out of range [ 414.250382][ T8825] EXT4-fs (loop8): DAX unsupported by block device. [ 414.265947][ T8830] netlink: zone id is out of range [ 414.271138][ T8830] netlink: get zone limit has 8 unknown bytes [ 415.932578][ T5873] Bluetooth: hci5: command 0x0406 tx timeout [ 417.327180][ T8861] tipc: Started in network mode [ 417.387484][ T8861] tipc: Node identity ea1db40750d8, cluster identity 4711 [ 417.420663][ T8861] tipc: Enabled bearer , priority 0 [ 417.476871][ T8868] tipc: Resetting bearer [ 417.577515][ T8857] tipc: Disabling bearer [ 419.701996][ T5958] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 420.012045][ T5958] usb 10-1: Using ep0 maxpacket: 32 [ 420.028263][ T5958] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.071354][ T5958] usb 10-1: config 0 has no interfaces? [ 420.113814][ T5958] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 420.148262][ T5958] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.186972][ T5958] usb 10-1: Product: syz [ 420.219732][ T5958] usb 10-1: Manufacturer: syz [ 420.281590][ T8902] input: syz1 as /devices/virtual/input/input7 [ 420.290445][ T5958] usb 10-1: SerialNumber: syz [ 420.342526][ T5958] usb 10-1: config 0 descriptor?? [ 420.627717][ T5958] usb 10-1: USB disconnect, device number 9 [ 420.645886][ T8906] comedi comedi0: Minor 3 could not be opened [ 420.962135][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 421.068633][ T8909] loop1: detected capacity change from 0 to 512 [ 422.241987][ T8909] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.279653][ T8909] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 422.371462][ T8909] EXT4-fs (loop1): DAX unsupported by block device. [ 425.080531][ T8941] tipc: Started in network mode [ 425.104562][ T8941] tipc: Node identity ba832197efd5, cluster identity 4711 [ 425.173825][ T8941] tipc: Enabled bearer , priority 0 [ 425.182904][ T8951] syzkaller0: entered promiscuous mode [ 425.239352][ T8951] syzkaller0: entered allmulticast mode [ 425.590578][ T8940] tipc: Resetting bearer [ 425.709261][ T8940] tipc: Disabling bearer [ 426.337989][ T8966] vlan2: entered allmulticast mode [ 428.404954][ T8984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 430.321443][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 430.424252][ T8984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 430.659065][ T8984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 430.669806][ T8984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 430.898617][ T8984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 430.917432][ T8984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 431.097562][ T8984] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 431.123936][ T8984] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 431.248815][ T9012] fuse: Bad value for 'fd' [ 431.429368][ T9014] tipc: Enabling of bearer rejected, failed to enable media [ 431.646274][ T8984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.690895][ T8984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 431.750123][ T8984] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 431.791127][ T8984] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 431.994226][ T8984] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 432.097064][ T9025] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.483'. [ 432.172395][ T9025] netlink: zone id is out of range [ 432.177549][ T9025] netlink: zone id is out of range [ 432.231473][ T9025] netlink: get zone limit has 8 unknown bytes [ 432.481580][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 432.729907][ T9036] loop9: detected capacity change from 0 to 64 [ 432.731326][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 433.001350][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 433.131403][ T5874] Bluetooth: hci5: command 0x0406 tx timeout [ 433.711708][ T5874] Bluetooth: hci3: command 0x0405 tx timeout [ 433.969945][ T5874] Bluetooth: hci6: command 0x0c1a tx timeout [ 434.801403][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 435.230581][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 435.230655][ T5874] Bluetooth: hci5: command 0x0406 tx timeout [ 435.672621][ T9065] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.491'. [ 435.761622][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 436.011353][ T5873] Bluetooth: hci6: command 0x0c1a tx timeout [ 437.041907][ T9068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.946728][ T9075] loop4: detected capacity change from 0 to 256 [ 438.651424][ T5873] Bluetooth: hci6: command 0x0c1a tx timeout [ 441.296485][ T9075] FAT-fs (loop4): Directory bread(block 64) failed [ 441.303135][ T9075] FAT-fs (loop4): Directory bread(block 65) failed [ 441.309708][ T9075] FAT-fs (loop4): Directory bread(block 66) failed [ 441.316249][ T9075] FAT-fs (loop4): Directory bread(block 67) failed [ 441.322877][ T9075] FAT-fs (loop4): Directory bread(block 68) failed [ 441.329394][ T9075] FAT-fs (loop4): Directory bread(block 69) failed [ 441.335991][ T9075] FAT-fs (loop4): Directory bread(block 70) failed [ 441.342727][ T9075] FAT-fs (loop4): Directory bread(block 71) failed [ 441.349298][ T9075] FAT-fs (loop4): Directory bread(block 72) failed [ 441.355999][ T9075] FAT-fs (loop4): Directory bread(block 73) failed [ 441.965399][ T9084] loop7: detected capacity change from 0 to 512 [ 442.127293][ T9084] EXT4-fs: Ignoring removed mblk_io_submit option [ 442.207137][ T9087] tipc: Enabled bearer , priority 0 [ 442.207774][ T9087] syzkaller0: entered promiscuous mode [ 442.207796][ T9087] syzkaller0: entered allmulticast mode [ 442.238778][ T9084] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 442.238824][ T9084] EXT4-fs (loop7): DAX unsupported by block device. [ 442.674648][ T9085] tipc: Resetting bearer [ 442.713199][ T9095] netlink: 56 bytes leftover after parsing attributes in process `syz.1.495'. [ 442.813295][ T9085] tipc: Disabling bearer [ 443.231855][ T9] tipc: Node number set to 1431708055 [ 447.243780][ T9138] netlink: 'syz.9.501': attribute type 2 has an invalid length. [ 447.323368][ T9138] netlink: 'syz.9.501': attribute type 4 has an invalid length. [ 447.373083][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 447.582491][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 447.674982][ T9] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 447.922896][ T9] usb 7-1: config 0 has no interface number 0 [ 448.011161][ T9] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 448.095558][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.362677][ T9] usb 7-1: Product: syz [ 448.366908][ T9] usb 7-1: Manufacturer: syz [ 448.451351][ T9] usb 7-1: SerialNumber: syz [ 448.495721][ T9] usb 7-1: config 0 descriptor?? [ 448.615263][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 448.771684][ T9] gspca_topro: reg_w err -71 [ 448.801668][ T9] gspca_topro: Sensor soi763a [ 448.866114][ T9] usb 7-1: USB disconnect, device number 4 [ 449.622125][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.920173][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.433046][ T9181] loop6: detected capacity change from 0 to 512 [ 454.454696][ T9181] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.478906][ T9183] tipc: Started in network mode [ 454.491546][ T9183] tipc: Node identity c6274e25d89e, cluster identity 4711 [ 454.532051][ T9181] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 454.558638][ T9183] tipc: Enabled bearer , priority 0 [ 454.579446][ T9181] EXT4-fs (loop6): DAX unsupported by block device. [ 454.731721][ T9183] tipc: Resetting bearer [ 454.737916][ T9182] syzkaller0: entered promiscuous mode [ 454.940148][ T9179] tipc: Resetting bearer [ 455.075958][ T9179] tipc: Disabling bearer [ 456.092231][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 458.005679][ T9207] loop4: detected capacity change from 0 to 256 [ 460.104116][ T9197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 460.112052][ T9197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 460.125315][ T9207] FAT-fs (loop4): Directory bread(block 64) failed [ 460.131921][ T9207] FAT-fs (loop4): Directory bread(block 65) failed [ 460.140557][ T9207] FAT-fs (loop4): Directory bread(block 66) failed [ 460.147349][ T9207] FAT-fs (loop4): Directory bread(block 67) failed [ 460.154006][ T9207] FAT-fs (loop4): Directory bread(block 68) failed [ 460.160511][ T9207] FAT-fs (loop4): Directory bread(block 69) failed [ 460.167111][ T9207] FAT-fs (loop4): Directory bread(block 70) failed [ 460.173674][ T9207] FAT-fs (loop4): Directory bread(block 71) failed [ 460.180239][ T9207] FAT-fs (loop4): Directory bread(block 72) failed [ 460.186780][ T9207] FAT-fs (loop4): Directory bread(block 73) failed [ 460.676627][ T9209] loop7: detected capacity change from 0 to 32768 [ 460.704269][ T9197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 460.710422][ T9197] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 460.723614][ T9209] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.520 (9209) [ 460.781675][ T9209] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 460.792816][ T9209] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 460.958935][ T9197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 460.991004][ T9197] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 461.029517][ T9209] BTRFS info (device loop7): enabling ssd optimizations [ 461.036947][ T9209] BTRFS info (device loop7): enabling free space tree [ 462.161487][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 462.167627][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 462.442579][ T7659] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 462.731488][ T5874] Bluetooth: hci5: command 0x0406 tx timeout [ 462.731512][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 463.066379][ T5874] Bluetooth: hci6: command 0x0c1a tx timeout [ 463.069494][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 467.270490][ T9254] loop7: detected capacity change from 0 to 512 [ 467.291764][ T913] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 467.336240][ T9254] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.457737][ T9254] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 467.517895][ T9254] EXT4-fs (loop7): DAX unsupported by block device. [ 467.527467][ T913] usb 10-1: Using ep0 maxpacket: 32 [ 467.559834][ T913] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.619586][ T913] usb 10-1: config 0 has no interfaces? [ 467.713826][ T913] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 467.825914][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 467.925637][ T913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.971727][ T913] usb 10-1: Product: syz [ 468.032256][ T913] usb 10-1: Manufacturer: syz [ 468.041368][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 468.075295][ T9] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 468.091865][ T9] usb 7-1: config 0 has no interface number 0 [ 468.101369][ T913] usb 10-1: SerialNumber: syz [ 468.178600][ T9] usb 7-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 468.577931][ T913] usb 10-1: config 0 descriptor?? [ 468.605301][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 468.614391][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.650544][ T9] usb 7-1: Product: syz [ 468.661569][ T9] usb 7-1: Manufacturer: syz [ 468.692141][ T9] usb 7-1: SerialNumber: syz [ 468.722984][ T9] usb 7-1: config 0 descriptor?? [ 468.998165][ T5958] usb 10-1: USB disconnect, device number 10 [ 469.789977][ T9] msi2500 7-1:0.246: Registered as swradio24 [ 469.819256][ T9] msi2500 7-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 471.763452][ T9284] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 473.112145][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.7.540'. [ 473.149691][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.7.540'. [ 473.196776][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.540'. [ 473.401367][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.540'. [ 473.925842][ T5958] usb 7-1: USB disconnect, device number 5 [ 474.248883][ T9303] loop7: detected capacity change from 0 to 64 [ 475.708265][ T9311] loop7: detected capacity change from 0 to 512 [ 476.337843][ T9311] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.395291][ T9311] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 476.461444][ T9311] EXT4-fs (loop7): DAX unsupported by block device. [ 480.055978][ T9346] loop4: detected capacity change from 0 to 2048 [ 480.120251][ T9346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.519859][ T9362] overlayfs: failed to resolve './bus': -2 [ 482.027502][ T9365] loop6: detected capacity change from 0 to 64 [ 482.112847][ T9366] hub 9-0:1.0: USB hub found [ 482.386615][ T9366] hub 9-0:1.0: 1 port detected [ 483.231114][ T9371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.562'. [ 485.565694][ T9369] loop7: detected capacity change from 0 to 32768 [ 485.628573][ T9369] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 485.997641][ T7659] ocfs2: Unmounting device (7,7) on (node local) [ 486.894094][ T9401] block nbd6: shutting down sockets [ 487.178350][ T9408] comedi comedi0: Minor 3 could not be opened [ 488.660285][ T9418] loop1: detected capacity change from 0 to 512 [ 488.690237][ T9418] EXT4-fs: Ignoring removed mblk_io_submit option [ 488.752695][ T9418] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 488.791936][ T9418] EXT4-fs (loop1): DAX unsupported by block device. [ 490.472570][ T9424] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 491.518192][ T9430] loop4: detected capacity change from 0 to 512 [ 491.586340][ T9430] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 491.619870][ T9430] EXT4-fs (loop4): invalid journal inode [ 491.647213][ T9430] EXT4-fs (loop4): can't get journal size [ 491.863199][ T9430] EXT4-fs (loop4): 1 truncate cleaned up [ 491.870915][ T9430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.004558][ T30] audit: type=1800 audit(1757965518.145:55): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.580" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 492.380577][ T9442] loop8: detected capacity change from 0 to 256 [ 493.402482][ T9442] exfat: Deprecated parameter 'namecase' [ 493.421495][ T9443] loop4: detected capacity change from 512 to 0 [ 493.431116][ C1] blk_print_req_error: 29 callbacks suppressed [ 493.431140][ C1] I/O error, dev loop4, sector 96 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 493.446947][ C1] buffer_io_error: 6 callbacks suppressed [ 493.446972][ C1] Buffer I/O error on dev loop4, logical block 48, lost sync page write [ 493.467990][ T9430] EXT4-fs error (device loop4): ext4_splice_branch:472: inode #15: block 48: comm syz.4.580: IO error syncing itable block [ 493.531311][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 493.540907][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 493.550376][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 493.561172][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 493.568096][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 493.582070][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 493.591623][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 493.601081][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 493.610220][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 493.625283][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 493.656515][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 493.666079][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 493.675543][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 493.897214][ T9442] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x2b52634e, utbl_chksum : 0xe619d30d) [ 493.917405][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 494.725214][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 494.842087][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 494.851790][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 494.861284][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 494.871354][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 494.881165][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 494.943704][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 494.953315][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 494.961779][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 494.988310][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 495.038367][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 495.055352][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 495.072494][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 495.088767][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 495.097427][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 495.109003][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 495.143952][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 495.152662][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 495.202785][ T9453] block nbd9: shutting down sockets [ 495.208237][ T9430] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.580: Error while async write back metadata [ 495.533988][ T9458] loop7: detected capacity change from 0 to 256 [ 495.670770][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 495.767133][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 496.223535][ T9432] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm ext4lazyinit: Error while async write back metadata [ 497.450726][ T9430] EXT4-fs: 2 callbacks suppressed [ 497.450783][ T9430] EXT4-fs (loop4): I/O error while writing superblock [ 497.553966][ T9458] FAT-fs (loop7): Directory bread(block 64) failed [ 497.561011][ T9458] FAT-fs (loop7): Directory bread(block 65) failed [ 497.568254][ T9458] FAT-fs (loop7): Directory bread(block 66) failed [ 497.575024][ T9458] FAT-fs (loop7): Directory bread(block 67) failed [ 497.582216][ T9458] FAT-fs (loop7): Directory bread(block 68) failed [ 497.588912][ T9458] FAT-fs (loop7): Directory bread(block 69) failed [ 497.596163][ T9458] FAT-fs (loop7): Directory bread(block 70) failed [ 497.602884][ T9458] FAT-fs (loop7): Directory bread(block 71) failed [ 497.610186][ T9458] FAT-fs (loop7): Directory bread(block 72) failed [ 497.619301][ T9458] FAT-fs (loop7): Directory bread(block 73) failed [ 498.252517][ T9432] EXT4-fs (loop4): previous I/O error to superblock detected [ 498.270315][ T9432] EXT4-fs (loop4): I/O error while writing superblock [ 498.287350][ C1] EXT4-fs warning (device loop4): ext4_end_bio:368: I/O error 10 writing to inode 15 starting block 36) [ 498.298806][ C1] Buffer I/O error on device loop4, logical block 36 [ 498.305742][ C1] Buffer I/O error on device loop4, logical block 37 [ 498.312426][ C1] Buffer I/O error on device loop4, logical block 38 [ 498.319109][ C1] Buffer I/O error on device loop4, logical block 39 [ 498.325863][ C1] Buffer I/O error on device loop4, logical block 40 [ 498.332537][ C1] Buffer I/O error on device loop4, logical block 41 [ 498.339196][ C1] Buffer I/O error on device loop4, logical block 42 [ 498.345856][ C1] Buffer I/O error on device loop4, logical block 43 [ 498.812146][ C0] blk_print_req_error: 19 callbacks suppressed [ 498.812177][ C0] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 498.828431][ T7702] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 499.761515][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 499.771374][ C1] I/O error, dev loop4, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 499.781103][ C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 499.795946][ T7702] EXT4-fs error: 3 callbacks suppressed [ 499.795969][ T7702] EXT4-fs error (device loop4): ext4_get_inode_loc:4998: inode #2: block 5: comm syz-executor: unable to read itable block [ 499.849013][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 499.858681][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 499.868184][ C0] buffer_io_error: 5 callbacks suppressed [ 499.868206][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 499.897758][ T7702] EXT4-fs (loop4): I/O error while writing superblock [ 499.961657][ T7702] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 500.018493][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 500.028097][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 500.037590][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 500.430148][ T7702] EXT4-fs (loop4): I/O error while writing superblock [ 500.472930][ T9471] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 500.495509][ T7702] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 500.553155][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 500.562782][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 500.572274][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 500.595061][ T7702] EXT4-fs (loop4): I/O error while writing superblock [ 500.824587][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4983: inode #2: block 5: comm kworker/u8:0: unable to read itable block [ 500.853262][ T9476] loop7: detected capacity change from 0 to 64 [ 500.932841][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 500.947254][ T12] EXT4-fs (loop4): I/O error while writing superblock [ 501.032831][ T7702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.291114][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 501.303906][ T7702] EXT4-fs (loop4): I/O error while writing superblock [ 504.975011][ T6327] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.344636][ T6327] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.460380][ T9504] loop6: detected capacity change from 0 to 256 [ 505.883992][ T9504] FAT-fs (loop6): Directory bread(block 64) failed [ 505.890755][ T9504] FAT-fs (loop6): Directory bread(block 65) failed [ 505.898167][ T9504] FAT-fs (loop6): Directory bread(block 66) failed [ 505.904923][ T9504] FAT-fs (loop6): Directory bread(block 67) failed [ 505.913128][ T9504] FAT-fs (loop6): Directory bread(block 68) failed [ 505.919830][ T9504] FAT-fs (loop6): Directory bread(block 69) failed [ 505.928773][ T9504] FAT-fs (loop6): Directory bread(block 70) failed [ 505.935494][ T9504] FAT-fs (loop6): Directory bread(block 71) failed [ 505.942761][ T9504] FAT-fs (loop6): Directory bread(block 72) failed [ 505.949431][ T9504] FAT-fs (loop6): Directory bread(block 73) failed [ 506.509179][ T6327] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.904897][ T6327] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.559302][ T6327] bridge_slave_1: left allmulticast mode [ 508.593617][ T6327] bridge_slave_1: left promiscuous mode [ 508.628862][ T9517] comedi comedi0: Minor 3 could not be opened [ 508.696341][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.842711][ T6327] bridge_slave_0: left allmulticast mode [ 509.902351][ T6327] bridge_slave_0: left promiscuous mode [ 509.936433][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.867028][ T9529] loop7: detected capacity change from 0 to 64 [ 511.171807][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.178157][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.119941][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.134579][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.142788][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.151537][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.187227][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.379736][ T9534] loop9: detected capacity change from 0 to 4096 [ 512.408008][ T9534] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.505147][ T9534] EXT4-fs (loop9): Test dummy encryption mode enabled [ 512.650755][ T9534] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.662430][ T9542] input: syz1 as /devices/virtual/input/input8 [ 513.201474][ T9544] EXT4-fs (loop9): resizing filesystem from 512 to 0 blocks [ 513.209027][ T9544] EXT4-fs warning (device loop9): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 513.371475][ T5958] IPVS: starting estimator thread 0... [ 513.834193][ T9545] IPVS: using max 22 ests per chain, 52800 per kthread [ 513.836208][ T7377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.242180][ T5874] Bluetooth: hci2: command tx timeout [ 515.394219][ T9567] tipc: Can't bind to reserved service type 2 [ 515.459544][ T6327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.571884][ T6327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.598859][ T6327] bond0 (unregistering): Released all slaves [ 515.780630][ T9575] loop1: detected capacity change from 0 to 64 [ 516.336858][ T5874] Bluetooth: hci2: command tx timeout [ 516.916027][ T6327] tipc: Left network mode [ 517.541358][ T5965] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 518.471462][ T5874] Bluetooth: hci2: command tx timeout [ 518.485267][ T5965] usb 9-1: Using ep0 maxpacket: 32 [ 518.500144][ T5965] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 518.657048][ T5965] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 518.668403][ T5965] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 26368, setting to 1024 [ 518.697813][ T5965] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 518.741476][ T5965] usb 9-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 518.749694][ T5965] usb 9-1: Product: syz [ 518.811554][ T5965] usb 9-1: Manufacturer: syz [ 518.816214][ T5965] usb 9-1: SerialNumber: syz [ 518.927607][ T5965] usb 9-1: config 0 descriptor?? [ 519.031422][ T9592] comedi comedi0: Minor 3 could not be opened [ 519.157919][ T5965] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 519.265046][ T5965] usb 9-1: USB disconnect, device number 4 [ 519.271810][ T12] usb 9-1: Failed to submit usb control message: -71 [ 519.281572][ T12] usb 9-1: unable to send the bmi data to the device: -71 [ 519.300322][ T12] usb 9-1: unable to get target info from device [ 519.316930][ T12] usb 9-1: could not get target info (-71) [ 519.360928][ T12] usb 9-1: could not probe fw (-71) [ 519.415539][ T9598] loop9: detected capacity change from 0 to 64 [ 520.383502][ T6327] hsr_slave_0: left promiscuous mode [ 520.596664][ T5874] Bluetooth: hci2: command tx timeout [ 520.642115][ T6327] hsr_slave_1: left promiscuous mode [ 521.436670][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.444633][ T6327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.565879][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.596917][ T6327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.704146][ T9609] loop8: detected capacity change from 0 to 64 [ 521.868068][ T6327] veth1_macvtap: left promiscuous mode [ 522.081447][ T6327] veth0_macvtap: left promiscuous mode [ 522.099348][ T6327] veth1_vlan: left promiscuous mode [ 522.119820][ T6327] veth0_vlan: left promiscuous mode [ 522.877272][ T9614] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 525.598015][ T9639] input: syz1 as /devices/virtual/input/input9 [ 527.850346][ T9648] process 'syz.1.639' launched './file0' with NULL argv: empty string added [ 530.110399][ T9662] loop6: detected capacity change from 0 to 512 [ 530.128630][ T9662] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.158529][ T9662] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 530.184953][ T9662] EXT4-fs (loop6): DAX unsupported by block device. [ 530.184973][ T9664] loop9: detected capacity change from 0 to 64 [ 531.951159][ T9673] loop9: detected capacity change from 0 to 512 [ 532.198096][ T9673] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 532.261862][ T9673] EXT4-fs (loop9): invalid journal inode [ 532.294280][ T9673] EXT4-fs (loop9): can't get journal size [ 532.336723][ T6327] team0 (unregistering): Port device team_slave_1 removed [ 532.393313][ T9673] EXT4-fs (loop9): 1 truncate cleaned up [ 532.517901][ T9673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.750129][ T30] audit: type=1800 audit(1757965558.885:56): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.644" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 532.832828][ T30] audit: type=1804 audit(1757965558.975:57): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.644" name="/newroot/78/file0/bus" dev="loop9" ino=18 res=1 errno=0 [ 532.899602][ T6327] team0 (unregistering): Port device team_slave_0 removed [ 535.489616][ T7377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.432555][ T9699] comedi comedi0: Minor 3 could not be opened [ 537.142628][ T9693] loop7: detected capacity change from 0 to 32768 [ 537.283390][ T9693] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 538.481404][ T9693] XFS (loop7): Ending clean mount [ 538.557430][ T7659] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 539.094144][ T9723] loop7: detected capacity change from 0 to 64 [ 539.129601][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 540.029384][ T9725] loop8: detected capacity change from 0 to 64 [ 541.595494][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.646507][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.681955][ T9535] bridge_slave_0: entered allmulticast mode [ 541.707717][ T9535] bridge_slave_0: entered promiscuous mode [ 541.737743][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.003676][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.010979][ T9535] bridge_slave_1: entered allmulticast mode [ 542.909867][ T9535] bridge_slave_1: entered promiscuous mode [ 543.257822][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.366082][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.735093][ T30] audit: type=1804 audit(1757965569.865:58): pid=9747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.662" name="/newroot/62/file0" dev="fuse" ino=1 res=1 errno=0 [ 543.856461][ T9535] team0: Port device team_slave_0 added [ 544.020677][ T9535] team0: Port device team_slave_1 added [ 544.464124][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.481331][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.600099][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.620448][ T9746] loop6: detected capacity change from 0 to 32768 [ 544.629415][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.650786][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.802722][ T9746] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 544.897632][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.985016][ T9746] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 545.586572][ T9761] loop9: detected capacity change from 0 to 32768 [ 545.658648][ T9761] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.666 (9761) [ 545.791566][ T9761] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 545.801967][ T9761] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 546.759132][ T9535] hsr_slave_0: entered promiscuous mode [ 546.974979][ T9535] hsr_slave_1: entered promiscuous mode [ 547.009977][ T9761] BTRFS info (device loop9): enabling ssd optimizations [ 547.020004][ T9761] BTRFS info (device loop9): enabling free space tree [ 547.082904][ T9535] debugfs: 'hsr0' already exists in 'hsr' [ 547.088675][ T9535] Cannot create hsr debugfs directory [ 547.542194][ T7377] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 547.570871][ T7571] ocfs2: Unmounting device (7,6) on (node local) [ 547.985363][ T9818] loop7: detected capacity change from 0 to 64 [ 548.922664][ T9819] comedi comedi0: Minor 3 could not be opened [ 550.672620][ T9833] loop8: detected capacity change from 0 to 256 [ 551.869749][ T9833] FAT-fs (loop8): Directory bread(block 64) failed [ 551.876643][ T9833] FAT-fs (loop8): Directory bread(block 65) failed [ 551.884149][ T9833] FAT-fs (loop8): Directory bread(block 66) failed [ 551.892006][ T9833] FAT-fs (loop8): Directory bread(block 67) failed [ 551.899400][ T9833] FAT-fs (loop8): Directory bread(block 68) failed [ 551.907147][ T9833] FAT-fs (loop8): Directory bread(block 69) failed [ 551.914583][ T9833] FAT-fs (loop8): Directory bread(block 70) failed [ 551.921483][ T9833] FAT-fs (loop8): Directory bread(block 71) failed [ 551.928828][ T9833] FAT-fs (loop8): Directory bread(block 72) failed [ 551.935687][ T9833] FAT-fs (loop8): Directory bread(block 73) failed [ 552.373285][ T9834] block nbd6: Attempted send on invalid socket [ 552.379739][ T9834] blk_print_req_error: 7 callbacks suppressed [ 552.379759][ T9834] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.551997][ T9834] block nbd6: Attempted send on invalid socket [ 552.599241][ T9834] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.625705][ T9831] loop1: detected capacity change from 0 to 4096 [ 552.671738][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 552.770119][ T9834] block nbd6: Attempted send on invalid socket [ 552.824516][ T9834] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.888890][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 552.986970][ T9834] block nbd6: Attempted send on invalid socket [ 553.039739][ T9834] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.111562][ T9834] block nbd6: Attempted send on invalid socket [ 553.194270][ T9834] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.207470][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 553.221343][ T9834] block nbd6: Attempted send on invalid socket [ 553.227987][ T9834] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.239457][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 553.281563][ T9834] block nbd6: Attempted send on invalid socket [ 553.454202][ T9834] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.499355][ T9831] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 553.541995][ T9834] block nbd6: Attempted send on invalid socket [ 553.571124][ T9834] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.651981][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 553.695243][ T9834] block nbd6: Attempted send on invalid socket [ 553.731163][ T9834] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.838953][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 554.194113][ T9834] block nbd6: Attempted send on invalid socket [ 554.301300][ T9834] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 554.419583][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 554.447847][ T9834] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 554.479565][ T9834] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 555.724319][ T9852] loop1: detected capacity change from 0 to 64 [ 556.883488][ T6317] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 558.313188][ T9868] tty tty2: ldisc open failed (-12), clearing slot 1 [ 559.994354][ T9535] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 560.425298][ T9535] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 561.439374][ T9535] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 561.709957][ T9906] input: syz1 as /devices/virtual/input/input10 [ 561.786519][ T9535] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.587751][ T9929] tipc: Started in network mode [ 563.656807][ T9929] tipc: Node identity 32a8a806b214, cluster identity 4711 [ 564.292702][ T9929] tipc: Enabled bearer , priority 0 [ 564.355642][ T9935] syzkaller0: entered promiscuous mode [ 564.361153][ T9935] syzkaller0: entered allmulticast mode [ 564.606309][ T9926] tipc: Resetting bearer [ 564.643745][ T9940] loop8: detected capacity change from 0 to 64 [ 564.665728][ T9926] tipc: Disabling bearer [ 564.788909][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.602653][ T9535] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.738798][ T9948] loop9: detected capacity change from 0 to 512 [ 565.747075][ T9948] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 565.756720][ T9948] EXT4-fs (loop9): invalid journal inode [ 565.762467][ T9948] EXT4-fs (loop9): can't get journal size [ 565.769982][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.777096][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.790369][ T9950] loop7: detected capacity change from 0 to 64 [ 565.807700][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.814882][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.838168][ T9948] EXT4-fs (loop9): 1 truncate cleaned up [ 566.063441][ T9948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.117068][ T30] audit: type=1800 audit(1757965592.255:59): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.697" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 566.429391][ T7377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.454448][ T9535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.912230][ T9977] comedi comedi0: Minor 3 could not be opened [ 570.729684][ T9986] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 570.743770][ T9986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 570.754595][ T9986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 570.771463][ T9986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 570.779525][ T9986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 571.596577][ T9994] loop1: detected capacity change from 0 to 512 [ 571.646768][ T9994] EXT4-fs: Ignoring removed mblk_io_submit option [ 571.710132][ T9994] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 571.734645][ T9994] EXT4-fs (loop1): DAX unsupported by block device. [ 572.772318][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.779697][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.082361][ T5874] Bluetooth: hci2: command tx timeout [ 573.161085][ T9998] loop6: detected capacity change from 0 to 32768 [ 573.181454][ T9998] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.709 (9998) [ 573.205250][ T9998] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 573.215475][ T9998] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 573.873626][ T9998] BTRFS info (device loop6): enabling ssd optimizations [ 573.880641][ T9998] BTRFS info (device loop6): enabling free space tree [ 574.276387][ T7571] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 575.183139][ T5874] Bluetooth: hci2: command tx timeout [ 575.552641][T10037] input: syz1 as /devices/virtual/input/input11 [ 577.201856][ T5874] Bluetooth: hci2: command tx timeout [ 578.772703][ T9985] chnl_net:caif_netlink_parms(): no params data found [ 579.007702][ T6317] bridge_slave_1: left allmulticast mode [ 579.059745][ T6317] bridge_slave_1: left promiscuous mode [ 579.097199][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.207880][ T6317] bridge_slave_0: left allmulticast mode [ 579.249061][ T6317] bridge_slave_0: left promiscuous mode [ 579.281353][ T5874] Bluetooth: hci2: command tx timeout [ 579.282326][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.313397][T10059] loop1: detected capacity change from 0 to 4096 [ 579.600895][T10059] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 579.746949][T10060] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 579.754809][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 582.970045][ T5944] IPVS: starting estimator thread 0... [ 584.082899][T10077] loop8: detected capacity change from 0 to 32768 [ 584.097464][T10071] IPVS: using max 21 ests per chain, 50400 per kthread [ 584.121430][T10077] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.723 (10077) [ 584.156599][T10077] BTRFS info (device loop8): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 584.166860][T10077] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 585.045024][T10077] BTRFS info (device loop8): enabling ssd optimizations [ 585.052042][T10077] BTRFS info (device loop8): enabling free space tree [ 585.835024][ T7191] BTRFS info (device loop8): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 586.177176][T10110] 9pnet_fd: Insufficient options for proto=fd [ 587.158558][T10121] loop1: detected capacity change from 0 to 4096 [ 587.361732][T10121] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 587.509908][T10126] netlink: 'syz.1.732': attribute type 4 has an invalid length. [ 587.517854][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'. [ 588.201282][ T30] audit: type=1800 audit(1757965614.325:60): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.732" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 588.410003][ T6317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.571205][ T6317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.723698][ T6317] bond0 (unregistering): Released all slaves [ 590.460799][T10150] loop1: detected capacity change from 0 to 4096 [ 590.562089][T10150] EXT4-fs: Ignoring removed mblk_io_submit option [ 590.672666][T10150] EXT4-fs (loop1): Test dummy encryption mode enabled [ 590.771798][T10150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.026774][ T6317] hsr_slave_0: left promiscuous mode [ 591.267423][ T6317] hsr_slave_1: left promiscuous mode [ 591.304580][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.874100][ T8237] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.318997][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.798093][T10164] comedi comedi0: Minor 3 could not be opened [ 594.731055][T10179] loop6: detected capacity change from 0 to 256 [ 597.665566][T10179] FAT-fs (loop6): Directory bread(block 64) failed [ 597.672895][T10179] FAT-fs (loop6): Directory bread(block 65) failed [ 597.679586][T10179] FAT-fs (loop6): Directory bread(block 66) failed [ 597.686362][T10179] FAT-fs (loop6): Directory bread(block 67) failed [ 597.693029][T10179] FAT-fs (loop6): Directory bread(block 68) failed [ 597.699564][T10179] FAT-fs (loop6): Directory bread(block 69) failed [ 597.706252][T10179] FAT-fs (loop6): Directory bread(block 70) failed [ 597.712828][T10179] FAT-fs (loop6): Directory bread(block 71) failed [ 597.719453][T10179] FAT-fs (loop6): Directory bread(block 72) failed [ 597.726037][T10179] FAT-fs (loop6): Directory bread(block 73) failed [ 599.788806][T10196] loop9: detected capacity change from 0 to 32768 [ 599.872767][T10196] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.752 (10196) [ 599.889393][T10196] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 599.899697][T10196] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 600.330250][ T6317] team0 (unregistering): Port device team_slave_1 removed [ 600.483482][T10196] BTRFS info (device loop9): enabling ssd optimizations [ 600.490684][T10196] BTRFS info (device loop9): enabling free space tree [ 601.145967][ T7377] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 601.798102][ T6317] team0 (unregistering): Port device team_slave_0 removed [ 606.166133][T10281] loop1: detected capacity change from 0 to 256 [ 609.767795][T10281] FAT-fs (loop1): Directory bread(block 64) failed [ 609.774551][T10281] FAT-fs (loop1): Directory bread(block 65) failed [ 609.781159][T10281] FAT-fs (loop1): Directory bread(block 66) failed [ 609.787820][T10281] FAT-fs (loop1): Directory bread(block 67) failed [ 609.794576][T10281] FAT-fs (loop1): Directory bread(block 68) failed [ 609.801107][T10281] FAT-fs (loop1): Directory bread(block 69) failed [ 609.807810][T10281] FAT-fs (loop1): Directory bread(block 70) failed [ 609.814415][T10281] FAT-fs (loop1): Directory bread(block 71) failed [ 609.820998][T10281] FAT-fs (loop1): Directory bread(block 72) failed [ 609.827565][T10281] FAT-fs (loop1): Directory bread(block 73) failed [ 610.342126][T10290] comedi comedi0: Minor 3 could not be opened [ 610.797959][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.817945][T10294] loop7: detected capacity change from 0 to 512 [ 610.824684][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.989230][T10294] EXT4-fs: Ignoring removed mblk_io_submit option [ 611.005061][ T9985] bridge_slave_0: entered allmulticast mode [ 611.041488][ T9985] bridge_slave_0: entered promiscuous mode [ 611.047714][T10294] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 611.095874][T10294] EXT4-fs (loop7): DAX unsupported by block device. [ 611.392573][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.441941][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.449182][ T9985] bridge_slave_1: entered allmulticast mode [ 611.530669][ T9985] bridge_slave_1: entered promiscuous mode [ 612.235089][ T9985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.558399][ T9985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.869849][ T9985] team0: Port device team_slave_0 added [ 612.907780][ T9985] team0: Port device team_slave_1 added [ 613.058871][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.071338][ T5944] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 613.302995][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.363094][ T9985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.377919][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.385438][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.495806][ T9985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.324971][ T5944] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.342832][ T5944] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 614.364679][ T5944] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 614.373855][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.384651][ T5944] usb 9-1: Product: syz [ 614.398050][ T5944] usb 9-1: Manufacturer: syz [ 614.403080][ T5944] usb 9-1: SerialNumber: syz [ 614.478157][ T5944] hub 9-1:1.0: bad descriptor, ignoring hub [ 614.551705][ T5965] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 614.574314][ T5944] hub 9-1:1.0: probe with driver hub failed with error -5 [ 614.911440][ T5965] usb 7-1: Using ep0 maxpacket: 8 [ 614.988174][T10333] loop1: detected capacity change from 0 to 256 [ 616.828628][ T5944] usb 9-1: USB disconnect, device number 5 [ 617.770163][T10333] FAT-fs (loop1): Directory bread(block 64) failed [ 617.776933][T10333] FAT-fs (loop1): Directory bread(block 65) failed [ 617.783645][T10333] FAT-fs (loop1): Directory bread(block 66) failed [ 617.790209][T10333] FAT-fs (loop1): Directory bread(block 67) failed [ 617.796914][T10333] FAT-fs (loop1): Directory bread(block 68) failed [ 617.803694][T10333] FAT-fs (loop1): Directory bread(block 69) failed [ 617.810311][T10333] FAT-fs (loop1): Directory bread(block 70) failed [ 617.816915][T10333] FAT-fs (loop1): Directory bread(block 71) failed [ 617.823552][T10333] FAT-fs (loop1): Directory bread(block 72) failed [ 617.831563][T10333] FAT-fs (loop1): Directory bread(block 73) failed [ 618.243415][ T9985] hsr_slave_0: entered promiscuous mode [ 618.250225][ T9985] hsr_slave_1: entered promiscuous mode [ 618.264858][T10338] loop7: detected capacity change from 0 to 64 [ 618.312323][ T9985] debugfs: 'hsr0' already exists in 'hsr' [ 618.321338][ T9985] Cannot create hsr debugfs directory [ 620.710582][T10354] loop7: detected capacity change from 0 to 512 [ 620.792193][T10354] EXT4-fs: Ignoring removed mblk_io_submit option [ 620.861417][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 620.879862][T10354] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 620.932960][T10354] EXT4-fs (loop7): DAX unsupported by block device. [ 621.075956][ T24] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 621.124609][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 621.205685][ T24] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 621.752247][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 621.760326][ T24] usb 9-1: SerialNumber: syz [ 621.783647][ T24] usb 9-1: can't set config #1, error -71 [ 621.822980][ T24] usb 9-1: USB disconnect, device number 6 [ 621.863825][ T5965] usb 7-1: unable to read config index 0 descriptor/start: -110 [ 621.888778][ T5965] usb 7-1: can't read configurations, error -110 [ 622.161893][ T5965] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 622.333324][ T5965] usb 7-1: device descriptor read/64, error -32 [ 622.852649][ T5965] usb usb7-port1: attempt power cycle [ 623.261334][ T5965] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 623.309186][ T5965] usb 7-1: device descriptor read/8, error -32 [ 623.538582][T10375] comedi comedi0: Minor 3 could not be opened [ 623.824755][ T5965] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 623.876901][ T5965] usb 7-1: device descriptor read/8, error -32 [ 624.831846][ T5965] usb usb7-port1: unable to enumerate USB device [ 624.980950][T10321] raw-gadget.1 gadget.6: failed to queue disconnect event [ 625.547771][T10388] loop1: detected capacity change from 0 to 256 [ 628.428650][T10388] FAT-fs (loop1): Directory bread(block 64) failed [ 628.435317][T10388] FAT-fs (loop1): Directory bread(block 65) failed [ 628.441989][T10388] FAT-fs (loop1): Directory bread(block 66) failed [ 628.448492][T10388] FAT-fs (loop1): Directory bread(block 67) failed [ 628.455233][T10388] FAT-fs (loop1): Directory bread(block 68) failed [ 628.461856][T10388] FAT-fs (loop1): Directory bread(block 69) failed [ 628.468418][T10388] FAT-fs (loop1): Directory bread(block 70) failed [ 628.474975][T10388] FAT-fs (loop1): Directory bread(block 71) failed [ 628.483119][T10388] FAT-fs (loop1): Directory bread(block 72) failed [ 628.489628][T10388] FAT-fs (loop1): Directory bread(block 73) failed [ 628.786443][ T9985] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 629.229882][T10396] hub 9-0:1.0: USB hub found [ 629.296912][T10396] hub 9-0:1.0: 1 port detected [ 631.092913][T10398] loop6: detected capacity change from 0 to 4096 [ 631.314807][T10398] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 631.646496][T10418] netlink: 'syz.6.795': attribute type 4 has an invalid length. [ 631.655523][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.795'. [ 633.925766][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.952961][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.432549][ T9986] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.461939][ T9986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.469839][ T9986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.492860][ T9986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 634.504431][ T9986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 634.682592][T10433] netlink: 'syz.7.800': attribute type 2 has an invalid length. [ 634.690361][T10433] netlink: 'syz.7.800': attribute type 4 has an invalid length. [ 636.661124][ T9986] Bluetooth: hci2: command tx timeout [ 637.842690][T10466] loop9: detected capacity change from 0 to 64 [ 639.166937][ T9986] Bluetooth: hci2: command 0x041b tx timeout [ 640.491371][ T5944] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 640.544935][ T8742] bridge_slave_1: left allmulticast mode [ 640.586657][ T8742] bridge_slave_1: left promiscuous mode [ 640.619581][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.649425][ T8742] bridge_slave_0: left allmulticast mode [ 640.673634][ T8742] bridge_slave_0: left promiscuous mode [ 640.706077][ T5944] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.721518][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.737740][ T5944] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 640.747958][ T5944] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.765446][ T5944] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 640.808679][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.878483][ T5944] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 641.215556][ T5874] Bluetooth: hci2: command 0x041b tx timeout [ 641.589307][T10484] loop6: detected capacity change from 0 to 32768 [ 641.599467][T10484] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.812 (10484) [ 641.615102][T10484] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 641.625267][T10484] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 641.699474][ T8742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.717526][ T8742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.757292][T10484] BTRFS info (device loop6): enabling ssd optimizations [ 641.764655][T10484] BTRFS info (device loop6): enabling free space tree [ 642.051647][ T8742] bond0 (unregistering): Released all slaves [ 642.094335][ T7571] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 642.260358][T10429] chnl_net:caif_netlink_parms(): no params data found [ 642.844241][ T8742] hsr_slave_0: left promiscuous mode [ 642.907567][ T8742] hsr_slave_1: left promiscuous mode [ 642.944303][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.014751][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.055179][ T5918] usb 10-1: USB disconnect, device number 11 [ 643.281355][ T5874] Bluetooth: hci2: command 0x041b tx timeout [ 645.034203][T10524] loop9: detected capacity change from 0 to 64 [ 645.361792][ T5874] Bluetooth: hci2: command 0x041b tx timeout [ 646.497391][ T8742] team0 (unregistering): Port device team_slave_1 removed [ 647.000267][T10537] loop9: detected capacity change from 0 to 256 [ 647.230981][T10537] FAT-fs (loop9): Directory bread(block 64) failed [ 647.237744][T10537] FAT-fs (loop9): Directory bread(block 65) failed [ 647.245079][T10537] FAT-fs (loop9): Directory bread(block 66) failed [ 647.251789][T10537] FAT-fs (loop9): Directory bread(block 67) failed [ 647.258949][T10537] FAT-fs (loop9): Directory bread(block 68) failed [ 647.265840][T10537] FAT-fs (loop9): Directory bread(block 69) failed [ 647.273108][T10537] FAT-fs (loop9): Directory bread(block 70) failed [ 647.279779][T10537] FAT-fs (loop9): Directory bread(block 71) failed [ 647.287020][T10537] FAT-fs (loop9): Directory bread(block 72) failed [ 647.293735][T10537] FAT-fs (loop9): Directory bread(block 73) failed [ 649.583791][ T8742] team0 (unregistering): Port device team_slave_0 removed [ 652.729707][T10561] loop7: detected capacity change from 0 to 256 [ 654.230065][T10561] FAT-fs (loop7): Directory bread(block 64) failed [ 654.236870][T10561] FAT-fs (loop7): Directory bread(block 65) failed [ 654.243697][T10561] FAT-fs (loop7): Directory bread(block 66) failed [ 654.250407][T10561] FAT-fs (loop7): Directory bread(block 67) failed [ 654.257501][T10561] FAT-fs (loop7): Directory bread(block 68) failed [ 654.264203][T10561] FAT-fs (loop7): Directory bread(block 69) failed [ 654.271301][T10561] FAT-fs (loop7): Directory bread(block 70) failed [ 654.278023][T10561] FAT-fs (loop7): Directory bread(block 71) failed [ 654.285449][T10561] FAT-fs (loop7): Directory bread(block 72) failed [ 654.292738][T10561] FAT-fs (loop7): Directory bread(block 73) failed [ 658.307999][T10590] loop7: detected capacity change from 0 to 32768 [ 658.350834][T10590] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.833 (10590) [ 658.404683][T10590] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 658.415030][T10590] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 659.480038][T10429] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.498066][T10590] BTRFS info (device loop7): enabling ssd optimizations [ 659.505200][T10590] BTRFS info (device loop7): enabling free space tree [ 659.515742][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.571472][T10429] bridge_slave_0: entered allmulticast mode [ 659.653885][T10429] bridge_slave_0: entered promiscuous mode [ 661.112212][T10429] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.119431][T10429] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.129125][T10429] bridge_slave_1: entered allmulticast mode [ 661.280579][T10429] bridge_slave_1: entered promiscuous mode [ 661.286999][ T7659] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 662.020535][T10429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.191048][T10429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.481523][T10629] loop6: detected capacity change from 0 to 4096 [ 663.489154][T10629] EXT4-fs: Ignoring removed mblk_io_submit option [ 663.582267][T10629] EXT4-fs (loop6): Test dummy encryption mode enabled [ 663.666160][T10629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.538066][T10429] team0: Port device team_slave_0 added [ 664.856147][T10429] team0: Port device team_slave_1 added [ 665.127504][ T7571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.360811][T10429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.441668][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.781523][T10429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.797029][T10429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.804460][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.831556][T10429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.504521][T10429] hsr_slave_0: entered promiscuous mode [ 668.547557][T10429] hsr_slave_1: entered promiscuous mode [ 668.572210][T10429] debugfs: 'hsr0' already exists in 'hsr' [ 668.782261][T10672] loop8: detected capacity change from 0 to 64 [ 668.828844][T10429] Cannot create hsr debugfs directory [ 668.871448][ T1204] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 670.057111][ T1204] usb 7-1: Using ep0 maxpacket: 8 [ 671.140160][T10682] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 671.211360][T10682] netlink: 224 bytes leftover after parsing attributes in process `syz.1.856'. [ 671.353710][T10685] loop7: detected capacity change from 0 to 64 [ 673.362427][T10692] loop8: detected capacity change from 0 to 4096 [ 673.370340][T10692] EXT4-fs: Ignoring removed mblk_io_submit option [ 673.462790][T10692] EXT4-fs (loop8): Test dummy encryption mode enabled [ 673.526332][T10692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.284783][ T24] IPVS: starting estimator thread 0... [ 674.340101][ T1204] usb 7-1: device descriptor read/all, error -71 [ 674.571391][T10706] IPVS: using max 28 ests per chain, 67200 per kthread [ 674.630150][ T7191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.957104][T10712] loop7: detected capacity change from 0 to 512 [ 674.971743][T10712] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 674.983273][T10712] EXT4-fs (loop7): invalid journal inode [ 674.988957][T10712] EXT4-fs (loop7): can't get journal size [ 675.007177][T10712] EXT4-fs (loop7): 1 truncate cleaned up [ 675.014953][T10712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.050131][ T30] audit: type=1800 audit(1757965701.185:61): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.866" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 675.650717][T10718] netlink: 'syz.8.867': attribute type 2 has an invalid length. [ 675.658881][T10718] netlink: 'syz.8.867': attribute type 4 has an invalid length. [ 676.327719][T10429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 676.338410][T10704] loop1: detected capacity change from 0 to 32768 [ 676.373401][ T7659] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 676.620860][T10429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 676.636389][ T7659] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 676.836500][T10704] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 677.465002][T10429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 677.499741][T10704] JBD2: journal reset failed [ 677.505379][T10704] (syz.1.863,10704,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 677.521787][T10704] (syz.1.863,10704,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 677.683483][T10429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 677.717321][T10731] loop6: detected capacity change from 0 to 64 [ 677.797093][T10730] comedi comedi0: Minor 3 could not be opened [ 677.844580][ T9986] Bluetooth: hci2: command 0x041b tx timeout [ 678.163796][ T9316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.899509][T10745] loop9: detected capacity change from 0 to 64 [ 680.536906][ T6314] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.081357][ T1204] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 682.216741][ T6314] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.401533][ T1204] usb 2-1: Using ep0 maxpacket: 8 [ 682.424273][ T1204] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 682.437832][ T1204] usb 2-1: config 0 has no interface number 0 [ 682.448365][ T1204] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 682.499547][ T1204] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 682.508924][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.522480][ T1204] usb 2-1: Product: syz [ 682.526640][ T1204] usb 2-1: Manufacturer: syz [ 682.534378][ T1204] usb 2-1: SerialNumber: syz [ 682.562968][ T1204] usb 2-1: config 0 descriptor?? [ 683.076680][T10429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.115882][ T1204] msi2500 2-1:0.246: Registered as swradio24 [ 683.133083][ T1204] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 683.197003][T10771] loop6: detected capacity change from 0 to 512 [ 683.209223][T10771] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 683.223402][T10771] EXT4-fs (loop6): invalid journal inode [ 683.229208][T10771] EXT4-fs (loop6): can't get journal size [ 683.260853][T10771] EXT4-fs (loop6): 1 truncate cleaned up [ 683.270496][T10771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.312633][ T6314] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.325241][ T30] audit: type=1800 audit(1757965709.455:62): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.881" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 683.568215][T10429] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.640842][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.651608][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.660103][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.670102][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.696249][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.989310][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.996544][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.228748][ T6314] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.304308][ T7571] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 684.421661][ T7571] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 684.433448][T10779] loop8: detected capacity change from 0 to 8192 [ 684.484436][T10779] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 684.508901][T10530] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.516107][T10530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.765406][ C0] blk_print_req_error: 2 callbacks suppressed [ 684.765435][ C0] I/O error, dev loop8, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 684.774500][T10782] loop8: detected capacity change from 8192 to 0 [ 684.791405][ C0] I/O error, dev loop8, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 684.800945][ C0] Buffer I/O error on dev loop8, logical block 33, lost sync page write [ 684.841228][ C0] I/O error, dev loop8, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 684.850481][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 684.952458][ C0] I/O error, dev loop8, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 684.961927][T10779] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 684.985822][ T9187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.369364][ T6314] bridge_slave_1: left allmulticast mode [ 685.381299][ T6314] bridge_slave_1: left promiscuous mode [ 685.393268][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.483185][ T6314] bridge_slave_0: left allmulticast mode [ 685.488893][ T6314] bridge_slave_0: left promiscuous mode [ 685.510767][T10781] loop9: detected capacity change from 0 to 32768 [ 685.537626][ T24] usb 2-1: USB disconnect, device number 2 [ 685.544929][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.632672][T10781] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 685.722487][T10781] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 685.763354][ T5874] Bluetooth: hci3: command tx timeout [ 687.851695][ T5874] Bluetooth: hci3: command tx timeout [ 688.493442][ T7377] ocfs2: Unmounting device (7,9) on (node local) [ 689.937935][ T5874] Bluetooth: hci3: command tx timeout [ 690.613202][ T9986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.624217][ T9986] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.649364][ T9986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.658376][ T9986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.666483][ T9986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.997988][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.015856][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.028446][ T6314] bond0 (unregistering): Released all slaves [ 691.069606][ T9986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.084965][ T9986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.101757][ T9986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.113516][ T9986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.131097][ T9986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 691.175568][ T5951] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 691.224637][T10813] netlink: 'syz.8.893': attribute type 2 has an invalid length. [ 691.336965][ T6314] tipc: Left network mode [ 691.351288][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 691.370368][ T5951] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 691.380131][ T5951] usb 2-1: config 0 has no interface number 0 [ 691.404895][ T5951] usb 2-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=86.58 [ 691.447247][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.471368][ T5951] usb 2-1: Product: syz [ 691.475599][ T5951] usb 2-1: Manufacturer: syz [ 691.492536][ T5951] usb 2-1: SerialNumber: syz [ 691.514997][ T5951] usb 2-1: config 0 descriptor?? [ 691.538623][ T5951] gspca_main: spca500-2.14.0 probing 084d:0003 [ 691.827784][ T1204] usb 2-1: USB disconnect, device number 3 [ 691.902065][T10831] netlink: 'syz.8.896': attribute type 2 has an invalid length. [ 691.910011][T10831] netlink: 'syz.8.896': attribute type 4 has an invalid length. [ 692.008000][T10775] chnl_net:caif_netlink_parms(): no params data found [ 692.017023][ T5874] Bluetooth: hci3: command tx timeout [ 692.727810][ T9986] Bluetooth: hci0: command tx timeout [ 693.211631][ T9986] Bluetooth: hci5: command tx timeout [ 694.290214][T10847] bridge0: port 3(syz_tun) entered blocking state [ 694.297852][T10847] bridge0: port 3(syz_tun) entered disabled state [ 694.320966][T10847] syz_tun: entered allmulticast mode [ 694.343734][T10847] syz_tun: entered promiscuous mode [ 694.373891][T10847] bridge0: port 3(syz_tun) entered blocking state [ 694.380799][T10847] bridge0: port 3(syz_tun) entered forwarding state [ 694.801375][ T9986] Bluetooth: hci0: command tx timeout [ 694.809055][ T6314] hsr_slave_0: left promiscuous mode [ 694.831905][ T6314] hsr_slave_1: left promiscuous mode [ 694.839409][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.881411][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.940793][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.949776][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.036483][ T6314] veth1_macvtap: left promiscuous mode [ 695.056417][ T6314] veth0_macvtap: left promiscuous mode [ 695.087012][ T6314] veth1_vlan: left promiscuous mode [ 695.101423][ T6314] veth0_vlan: left promiscuous mode [ 695.282638][ T9986] Bluetooth: hci5: command 0x041b tx timeout [ 695.367094][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.883796][ T9986] Bluetooth: hci0: command tx timeout [ 697.381355][ T9986] Bluetooth: hci5: command 0x041b tx timeout [ 697.984156][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 698.039631][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 698.981817][ T9986] Bluetooth: hci0: command tx timeout [ 699.040255][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.902'. [ 699.049713][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.902'. [ 699.542987][ T9986] Bluetooth: hci5: command 0x041b tx timeout [ 700.286469][ T913] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 700.521456][ T913] usb 2-1: Using ep0 maxpacket: 16 [ 700.579045][ T913] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 700.621414][ T913] usb 2-1: config 0 has no interface number 0 [ 700.706316][ T913] usb 2-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=86.58 [ 700.717109][ T913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.728600][ T913] usb 2-1: Product: syz [ 700.733066][ T913] usb 2-1: Manufacturer: syz [ 700.737736][ T913] usb 2-1: SerialNumber: syz [ 700.756710][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.767691][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.778259][ T913] usb 2-1: config 0 descriptor?? [ 700.797269][ T913] gspca_main: spca500-2.14.0 probing 084d:0003 [ 700.851566][T10775] bridge_slave_0: entered allmulticast mode [ 700.895527][T10775] bridge_slave_0: entered promiscuous mode [ 700.937483][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.975899][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.001514][T10775] bridge_slave_1: entered allmulticast mode [ 701.023138][ T9] usb 2-1: USB disconnect, device number 4 [ 701.025614][T10775] bridge_slave_1: entered promiscuous mode [ 701.179774][T10918] netlink: 'syz.9.909': attribute type 2 has an invalid length. [ 701.190257][T10918] netlink: 'syz.9.909': attribute type 4 has an invalid length. [ 701.602398][ T5874] Bluetooth: hci5: command 0x041b tx timeout [ 701.816187][T10775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.976465][T10924] 9pnet_fd: Insufficient options for proto=fd [ 701.977757][T10775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.321248][T10775] team0: Port device team_slave_0 added [ 702.330400][T10775] team0: Port device team_slave_1 added [ 703.086520][T10930] loop9: detected capacity change from 0 to 4096 [ 703.196524][T10775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.203763][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.328801][T10930] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 703.338782][T10775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.454166][T10822] chnl_net:caif_netlink_parms(): no params data found [ 703.532972][T10938] netlink: 'syz.9.914': attribute type 4 has an invalid length. [ 703.542371][T10938] netlink: 24 bytes leftover after parsing attributes in process `syz.9.914'. [ 704.049769][T10775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.880557][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.930802][T10775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.187628][T10945] loop1: detected capacity change from 0 to 4096 [ 705.214566][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.9.917'. [ 705.222580][T10945] EXT4-fs: Ignoring removed mblk_io_submit option [ 705.244478][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.9.917'. [ 705.351013][T10945] EXT4-fs (loop1): Test dummy encryption mode enabled [ 705.399683][T10945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.795940][T10814] chnl_net:caif_netlink_parms(): no params data found [ 705.968720][T10775] hsr_slave_0: entered promiscuous mode [ 705.978012][T10775] hsr_slave_1: entered promiscuous mode [ 705.993197][ T5965] IPVS: starting estimator thread 0... [ 706.106171][T10961] IPVS: using max 21 ests per chain, 50400 per kthread [ 706.278951][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.292891][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.320545][T10822] bridge_slave_0: entered allmulticast mode [ 706.349283][T10822] bridge_slave_0: entered promiscuous mode [ 706.372793][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.398737][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.431425][T10822] bridge_slave_1: entered allmulticast mode [ 706.451500][T10822] bridge_slave_1: entered promiscuous mode [ 706.502686][ T8237] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.543223][T10976] 9pnet_fd: Insufficient options for proto=fd [ 707.704660][T10822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.130804][T10814] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.167733][T10814] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.030983][T10814] bridge_slave_0: entered allmulticast mode [ 710.123175][T10814] bridge_slave_0: entered promiscuous mode [ 710.136542][T10822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.272993][T10814] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.309102][T10814] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.322292][T10814] bridge_slave_1: entered allmulticast mode [ 710.333635][T10814] bridge_slave_1: entered promiscuous mode [ 710.425129][T10822] team0: Port device team_slave_0 added [ 710.686236][T10822] team0: Port device team_slave_1 added [ 710.860182][T10814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.904630][T10814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.168169][T10822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.188887][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.274680][T10822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.457939][T10822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.465002][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.501234][T10822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.438602][T10814] team0: Port device team_slave_0 added [ 712.693770][T10814] team0: Port device team_slave_1 added [ 713.074264][T10814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.096283][T10814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.339188][T10814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.850543][T10814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.863484][T10814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.907168][T10814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.974161][ C1] I/O error, dev loop8, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 714.983481][ T59] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 715.205931][T10822] hsr_slave_0: entered promiscuous mode [ 715.222415][T10822] hsr_slave_1: entered promiscuous mode [ 715.228796][T10822] debugfs: 'hsr0' already exists in 'hsr' [ 715.252236][T10822] Cannot create hsr debugfs directory [ 715.445582][ T6314] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.780789][ T6314] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.812828][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.8.937'. [ 715.842059][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.8.937'. [ 716.029952][T10814] hsr_slave_0: entered promiscuous mode [ 716.055511][T10814] hsr_slave_1: entered promiscuous mode [ 716.067894][T10814] debugfs: 'hsr0' already exists in 'hsr' [ 716.079498][T11029] loop1: detected capacity change from 0 to 1024 [ 716.081480][T10814] Cannot create hsr debugfs directory [ 716.235277][ T6314] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.359020][T11020] loop9: detected capacity change from 0 to 40427 [ 718.135234][ T6314] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.674441][T11020] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 720.641912][ T1204] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 720.791370][ T1204] usb 2-1: device descriptor read/64, error -71 [ 720.916531][T10775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 721.045789][ T1204] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 721.075148][T10775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 721.110581][T10775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 721.213232][ T6314] bridge_slave_1: left allmulticast mode [ 721.231464][ T1204] usb 2-1: device descriptor read/64, error -71 [ 721.232496][ T6314] bridge_slave_1: left promiscuous mode [ 721.291551][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.342917][ T1204] usb usb2-port1: attempt power cycle [ 721.356192][ T6314] bridge_slave_0: left allmulticast mode [ 721.374172][ T6314] bridge_slave_0: left promiscuous mode [ 721.380046][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.405979][ T6314] bridge_slave_1: left allmulticast mode [ 721.425035][ T6314] bridge_slave_1: left promiscuous mode [ 721.432944][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.448265][ T6314] bridge_slave_0: left allmulticast mode [ 721.456652][ T6314] bridge_slave_0: left promiscuous mode [ 721.464651][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.854927][ T1204] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 721.901765][ T1204] usb 2-1: device descriptor read/8, error -71 [ 722.841304][ T1204] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 723.056816][ T1204] usb 2-1: device descriptor read/8, error -71 [ 723.172450][ T1204] usb usb2-port1: unable to enumerate USB device [ 724.002681][T11075] loop1: detected capacity change from 0 to 4096 [ 724.022743][T11075] EXT4-fs: Ignoring removed mblk_io_submit option [ 724.151016][T11075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 724.755514][T11075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.092255][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.128537][ T8237] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.152437][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.171705][ T6314] bond0 (unregistering): Released all slaves [ 726.330629][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 726.474072][T11094] vim2m vim2m.0: vidioc_s_fmt queue busy [ 726.616875][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.628336][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.642397][ T6314] bond0 (unregistering): Released all slaves [ 726.661002][T10775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 726.944928][ T6314] tipc: Left network mode [ 728.331923][T11110] loop9: detected capacity change from 0 to 32768 [ 728.568704][T11110] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 728.745351][T11108] [ 728.747735][T11108] ====================================================== [ 728.754750][T11108] WARNING: possible circular locking dependency detected [ 728.761766][T11108] syzkaller #0 Not tainted [ 728.766188][T11108] ------------------------------------------------------ [ 728.773203][T11108] syz.9.958/11108 is trying to acquire lock: [ 728.779180][T11108] ffffffff8e727e08 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x14c0 [ 728.788827][T11108] [ 728.788827][T11108] but task is already holding lock: [ 728.796200][T11108] ffff888142f8a7e8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x899/0x1200 [ 728.807686][T11108] [ 728.807686][T11108] which lock already depends on the new lock. [ 728.807686][T11108] [ 728.818091][T11108] [ 728.818091][T11108] the existing dependency chain (in reverse order) is: [ 728.827101][T11108] [ 728.827101][T11108] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 728.835753][T11108] blk_alloc_queue+0x619/0x760 [ 728.841067][T11108] blk_mq_alloc_queue+0x172/0x280 [ 728.846644][T11108] __blk_mq_alloc_disk+0x29/0x120 [ 728.852228][T11108] nbd_dev_add+0x492/0xbb0 [ 728.857201][T11108] nbd_init+0x181/0x320 [ 728.861908][T11108] do_one_initcall+0x123/0x6e0 [ 728.867219][T11108] kernel_init_freeable+0x5c2/0x910 [ 728.873056][T11108] kernel_init+0x1c/0x2b0 [ 728.877935][T11108] ret_from_fork+0x56d/0x730 [ 728.883064][T11108] ret_from_fork_asm+0x1a/0x30 [ 728.888374][T11108] [ 728.888374][T11108] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 728.895620][T11108] fs_reclaim_acquire+0x102/0x150 [ 728.901191][T11108] prepare_alloc_pages+0x162/0x610 [ 728.906841][T11108] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 728.913302][T11108] __alloc_pages_noprof+0xb/0x1b0 [ 728.918883][T11108] pcpu_populate_chunk+0x110/0xb00 [ 728.924545][T11108] pcpu_alloc_noprof+0x86a/0x14c0 [ 728.930125][T11108] bpf_map_alloc_percpu+0x9a/0x4b0 [ 728.935774][T11108] htab_map_alloc+0x10ca/0x1570 [ 728.941186][T11108] map_create+0x592/0x1f80 [ 728.946140][T11108] __sys_bpf+0x44d2/0x4de0 [ 728.951121][T11108] __x64_sys_bpf+0x78/0xc0 [ 728.956079][T11108] do_syscall_64+0xcd/0x4e0 [ 728.961118][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.967548][T11108] [ 728.967548][T11108] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 728.975318][T11108] __lock_acquire+0x12a6/0x1ce0 [ 728.980735][T11108] lock_acquire+0x179/0x350 [ 728.985797][T11108] __mutex_lock+0x193/0x1060 [ 728.990925][T11108] pcpu_alloc_noprof+0xb4c/0x14c0 [ 728.996514][T11108] sbitmap_init_node+0x2fd/0x770 [ 729.002002][T11108] sbitmap_queue_init_node+0x40/0x4a0 [ 729.007921][T11108] blk_mq_init_tags+0x12d/0x2b0 [ 729.013338][T11108] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 729.019439][T11108] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 729.025715][T11108] __blk_mq_update_nr_hw_queues+0xcc1/0x1200 [ 729.032258][T11108] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 729.038363][T11108] nbd_start_device+0x1b0/0xd70 [ 729.043777][T11108] nbd_genl_connect+0x134b/0x1c60 [ 729.049340][T11108] genl_family_rcv_msg_doit+0x209/0x2f0 [ 729.055433][T11108] genl_rcv_msg+0x55c/0x800 [ 729.060483][T11108] netlink_rcv_skb+0x158/0x420 [ 729.065786][T11108] genl_rcv+0x28/0x40 [ 729.070306][T11108] netlink_unicast+0x5aa/0x870 [ 729.075607][T11108] netlink_sendmsg+0x8d1/0xdd0 [ 729.080907][T11108] ____sys_sendmsg+0xa98/0xc70 [ 729.086214][T11108] ___sys_sendmsg+0x134/0x1d0 [ 729.091449][T11108] __sys_sendmsg+0x16d/0x220 [ 729.096598][T11108] do_syscall_64+0xcd/0x4e0 [ 729.101637][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.108071][T11108] [ 729.108071][T11108] other info that might help us debug this: [ 729.108071][T11108] [ 729.118302][T11108] Chain exists of: [ 729.118302][T11108] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 729.118302][T11108] [ 729.132016][T11108] Possible unsafe locking scenario: [ 729.132016][T11108] [ 729.139472][T11108] CPU0 CPU1 [ 729.144923][T11108] ---- ---- [ 729.150286][T11108] lock(&q->q_usage_counter(io)#49); [ 729.155699][T11108] lock(fs_reclaim); [ 729.162225][T11108] lock(&q->q_usage_counter(io)#49); [ 729.170155][T11108] lock(pcpu_alloc_mutex); [ 729.174675][T11108] [ 729.174675][T11108] *** DEADLOCK *** [ 729.174675][T11108] [ 729.182825][T11108] 6 locks held by syz.9.958/11108: [ 729.187949][T11108] #0: ffffffff9042c010 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 729.196207][T11108] #1: ffffffff9042c0c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 729.205245][T11108] #2: ffff888026696188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x27/0x60 [ 729.216553][T11108] #3: ffff8880266960d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x31/0x60 [ 729.227434][T11108] #4: ffff888142f8a7e8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x899/0x1200 [ 729.239368][T11108] #5: ffff888142f8a820 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x899/0x1200 [ 729.251566][T11108] [ 729.251566][T11108] stack backtrace: [ 729.257464][T11108] CPU: 1 UID: 0 PID: 11108 Comm: syz.9.958 Not tainted syzkaller #0 PREEMPT(full) [ 729.257509][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 729.257532][T11108] Call Trace: [ 729.257545][T11108] [ 729.257560][T11108] dump_stack_lvl+0x116/0x1f0 [ 729.257622][T11108] print_circular_bug+0x275/0x350 [ 729.257684][T11108] check_noncircular+0x14c/0x170 [ 729.257747][T11108] __lock_acquire+0x12a6/0x1ce0 [ 729.257812][T11108] ? irqentry_exit+0x3b/0x90 [ 729.257874][T11108] lock_acquire+0x179/0x350 [ 729.257932][T11108] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 729.257996][T11108] ? __pfx___might_resched+0x10/0x10 [ 729.258048][T11108] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 729.258102][T11108] __mutex_lock+0x193/0x1060 [ 729.258135][T11108] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 729.258189][T11108] ? stack_depot_save_flags+0x3de/0x9c0 [ 729.258257][T11108] ? __pfx___mutex_lock+0x10/0x10 [ 729.258289][T11108] ? blk_mq_init_tags+0x87/0x2b0 [ 729.258348][T11108] ? blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 729.258401][T11108] ? __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 729.258455][T11108] ? nbd_start_device+0x1b0/0xd70 [ 729.258515][T11108] ? nbd_genl_connect+0x134b/0x1c60 [ 729.258553][T11108] ? netlink_sendmsg+0x8d1/0xdd0 [ 729.258586][T11108] ? ____sys_sendmsg+0xa98/0xc70 [ 729.258626][T11108] ? ___sys_sendmsg+0x134/0x1d0 [ 729.258680][T11108] ? __sys_sendmsg+0x16d/0x220 [ 729.258735][T11108] ? do_syscall_64+0xcd/0x4e0 [ 729.258766][T11108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.258809][T11108] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 729.258863][T11108] pcpu_alloc_noprof+0xb4c/0x14c0 [ 729.258930][T11108] sbitmap_init_node+0x2fd/0x770 [ 729.258979][T11108] sbitmap_queue_init_node+0x40/0x4a0 [ 729.259031][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.259079][T11108] blk_mq_init_tags+0x12d/0x2b0 [ 729.259140][T11108] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 729.259197][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.259242][T11108] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.259306][T11108] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 729.259363][T11108] __blk_mq_update_nr_hw_queues+0xcc1/0x1200 [ 729.259426][T11108] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 729.259488][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.259533][T11108] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 729.259600][T11108] ? __pfx_down_write+0x10/0x10 [ 729.259637][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.259688][T11108] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 729.259744][T11108] nbd_start_device+0x1b0/0xd70 [ 729.259812][T11108] nbd_genl_connect+0x134b/0x1c60 [ 729.259857][T11108] ? __pfx_nbd_genl_connect+0x10/0x10 [ 729.259893][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.259943][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.259995][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.260039][T11108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 729.260092][T11108] genl_family_rcv_msg_doit+0x209/0x2f0 [ 729.260135][T11108] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 729.260177][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.260222][T11108] ? genl_get_cmd+0x194/0x580 [ 729.260265][T11108] ? netlink_alloc_large_skb+0x69/0x130 [ 729.260326][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.260371][T11108] ? __radix_tree_lookup+0x21f/0x2c0 [ 729.260429][T11108] genl_rcv_msg+0x55c/0x800 [ 729.260473][T11108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 729.260514][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.260560][T11108] ? __pfx_nbd_genl_connect+0x10/0x10 [ 729.260597][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.260642][T11108] ? __lock_acquire+0x62e/0x1ce0 [ 729.260704][T11108] netlink_rcv_skb+0x158/0x420 [ 729.260738][T11108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 729.260779][T11108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 729.260824][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.260870][T11108] ? netlink_deliver_tap+0x1ae/0xd30 [ 729.260926][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.260972][T11108] ? is_vmalloc_addr+0x86/0xa0 [ 729.261038][T11108] genl_rcv+0x28/0x40 [ 729.261074][T11108] netlink_unicast+0x5aa/0x870 [ 729.261112][T11108] ? __pfx_netlink_unicast+0x10/0x10 [ 729.261173][T11108] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 729.261241][T11108] netlink_sendmsg+0x8d1/0xdd0 [ 729.261279][T11108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.261315][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.261360][T11108] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 729.261404][T11108] ____sys_sendmsg+0xa98/0xc70 [ 729.261446][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.261491][T11108] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.261548][T11108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.261602][T11108] ___sys_sendmsg+0x134/0x1d0 [ 729.261660][T11108] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.261728][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.261790][T11108] __sys_sendmsg+0x16d/0x220 [ 729.261848][T11108] ? __pfx___sys_sendmsg+0x10/0x10 [ 729.261904][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.261949][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.262009][T11108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 729.262059][T11108] do_syscall_64+0xcd/0x4e0 [ 729.262095][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.262133][T11108] RIP: 0033:0x7fc90978eba9 [ 729.262161][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.262197][T11108] RSP: 002b:00007fc90a62d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.262232][T11108] RAX: ffffffffffffffda RBX: 00007fc9099d6090 RCX: 00007fc90978eba9 [ 729.262257][T11108] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007 [ 729.262281][T11108] RBP: 00007fc909811e19 R08: 0000000000000000 R09: 0000000000000000 [ 729.262304][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.262327][T11108] R13: 00007fc9099d6128 R14: 00007fc9099d6090 R15: 00007ffc76e7dd38 [ 729.262363][T11108] [ 729.906545][T10775] 8021q: adding VLAN 0 to HW filter on device bond0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 729.937264][ T30] audit: type=1800 audit(1757965754.795:63): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.958" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 730.021068][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.042870][T10530] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.050028][T10530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.278376][ T9986] block nbd0: Receive control failed (result -107) [ 730.278415][ T5874] block nbd0: Receive control failed (result -107) [ 730.311236][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 730.370656][T10530] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.377820][T10530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.520619][ C0] I/O error, dev loop8, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 730.546607][T11082] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 730.572850][T11108] nbd0: detected capacity change from 0 to 32 [ 730.619136][ T5877] block nbd0: Dead connection, failed to find a fallback [ 730.642030][ C0] I/O error, dev loop8, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 730.651524][T11082] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 730.659808][T11082] FAT-fs (loop8): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 730.714574][ T5877] block nbd0: shutting down sockets [ 730.719851][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 730.771510][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 730.780570][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 730.884548][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 730.894998][ T6314] hsr_slave_0: left promiscuous mode [ 730.961733][T11108] ocfs2: Unmounting device (7,9) on (node local) [ 730.968127][ T6314] hsr_slave_1: left promiscuous mode [ 730.981792][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.001808][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.021205][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.029095][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.054743][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.069493][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.101892][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.153277][ T6314] hsr_slave_0: left promiscuous mode [ 731.171449][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.197617][ T6314] hsr_slave_1: left promiscuous mode [ 731.206466][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.211827][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.241271][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.249080][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.256889][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.281270][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.285871][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.301641][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.311571][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.320638][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.328520][ T5877] ldm_validate_partition_table(): Disk read failed. [ 731.329631][ T6314] veth1_macvtap: left promiscuous mode [ 731.335321][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.348517][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 731.352986][ T6314] veth0_macvtap: left promiscuous mode [ 731.357854][ T5877] Dev nbd0: unable to read RDB block 0 [ 731.364750][ T6314] veth1_vlan: left promiscuous mode [ 731.367814][ T5877] nbd0: unable to read partition table [ 731.373603][ T6314] veth0_vlan: left promiscuous mode [ 731.384427][ T5877] ldm_validate_partition_table(): Disk read failed. [ 731.393016][ T5877] Dev nbd0: unable to read RDB block 0 [ 731.398969][ T5877] nbd0: unable to read partition table [ 731.544012][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 731.579654][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 731.774853][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 731.796963][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 731.947279][T11082] bridge0: port 3(syz_tun) entered disabled state [ 731.957263][T11082] syz_tun (unregistering): left allmulticast mode [ 731.968072][T11082] syz_tun (unregistering): left promiscuous mode [ 731.975179][T11082] bridge0: port 3(syz_tun) entered disabled state [ 732.714612][ T6314] IPVS: stop unused estimator thread 0... [ 733.485910][ T6314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.517346][ T6314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.558451][ T6314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.606284][ T6314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.686624][ T6314] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.725934][ T6314] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.776616][ T6314] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.826105][ T6314] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.902063][ T6314] bridge_slave_1: left allmulticast mode [ 733.908439][ T6314] bridge_slave_1: left promiscuous mode [ 733.915995][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.925166][ T6314] bridge_slave_0: left allmulticast mode [ 733.930799][ T6314] bridge_slave_0: left promiscuous mode [ 733.937217][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.946233][ T6314] bridge_slave_1: left allmulticast mode [ 733.952768][ T6314] bridge_slave_1: left promiscuous mode [ 733.958431][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.966877][ T6314] bridge_slave_0: left allmulticast mode [ 733.972956][ T6314] bridge_slave_0: left promiscuous mode [ 733.978895][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.988086][ T6314] bridge_slave_1: left allmulticast mode [ 733.994029][ T6314] bridge_slave_1: left promiscuous mode [ 733.999695][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.008659][ T6314] bridge_slave_0: left allmulticast mode [ 734.014530][ T6314] bridge_slave_0: left promiscuous mode [ 734.020165][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.029622][ T6314] bridge_slave_1: left allmulticast mode [ 734.035357][ T6314] bridge_slave_1: left promiscuous mode [ 734.041009][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.049759][ T6314] bridge_slave_0: left promiscuous mode [ 734.055963][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.065670][ T6314] bridge_slave_1: left allmulticast mode [ 734.071400][ T6314] bridge_slave_1: left promiscuous mode [ 734.077072][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.086477][ T6314] bridge_slave_0: left allmulticast mode [ 734.092230][ T6314] bridge_slave_0: left promiscuous mode [ 734.097878][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.257216][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.267969][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.278041][ T6314] bond0 (unregistering): Released all slaves [ 734.341740][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.351876][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.362512][ T6314] bond0 (unregistering): Released all slaves [ 734.424672][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.434655][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.444636][ T6314] bond0 (unregistering): Released all slaves [ 734.542519][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.552730][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.562670][ T6314] bond0 (unregistering): Released all slaves [ 734.639828][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.650220][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.660009][ T6314] bond0 (unregistering): Released all slaves [ 734.740811][ T6314] tipc: Left network mode [ 734.981732][ T6314] hsr_slave_0: left promiscuous mode [ 734.987482][ T6314] hsr_slave_1: left promiscuous mode [ 734.993276][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.002721][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.014431][ T6314] hsr_slave_0: left promiscuous mode [ 735.020097][ T6314] hsr_slave_1: left promiscuous mode [ 735.025874][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.034118][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.045559][ T6314] hsr_slave_0: left promiscuous mode [ 735.052040][ T6314] hsr_slave_1: left promiscuous mode [ 735.057708][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.065529][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.076596][ T6314] hsr_slave_0: left promiscuous mode [ 735.085134][ T6314] hsr_slave_1: left promiscuous mode [ 735.090805][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.098246][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.105940][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.113358][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.124480][ T6314] hsr_slave_0: left promiscuous mode [ 735.130209][ T6314] hsr_slave_1: left promiscuous mode [ 735.135966][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.143508][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.151100][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.158576][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.174533][ T6314] veth1_macvtap: left promiscuous mode [ 735.180027][ T6314] veth0_macvtap: left promiscuous mode [ 735.185844][ T6314] veth1_vlan: left promiscuous mode [ 735.191125][ T6314] veth0_vlan: left promiscuous mode [ 735.197502][ T6314] veth1_macvtap: left promiscuous mode [ 735.205283][ T6314] veth0_macvtap: left promiscuous mode [ 735.210851][ T6314] veth1_vlan: left promiscuous mode [ 735.216482][ T6314] veth0_vlan: left promiscuous mode [ 735.394725][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 735.422135][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 735.560720][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 735.575974][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 735.720588][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 735.748382][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 735.916235][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 735.938927][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 736.103823][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 736.127390][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 737.243621][ T6314] IPVS: stop unused estimator thread 0... [ 737.250396][ T6314] IPVS: stop unused estimator thread 0...