last executing test programs: 8m59.851884032s ago: executing program 32 (id=147): r0 = socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 8m39.153492332s ago: executing program 4 (id=195): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000371900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000006900)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m38.252343174s ago: executing program 4 (id=196): mkdir(0x0, 0xc0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tcx}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x3, 0x0, [{0x8008000, 0x1000, &(0x7f0000001600)=""/4096}, {0xffff1000, 0x43, &(0x7f00000010c0)=""/67}, {0x2, 0x21, &(0x7f0000001140)=""/33}]}) getxattr(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974792e2f0034f3bb8af920310de62c675f594ed01c807f24dfdd087c4a50c388b9467b019b6dac8864968cbb86430ea2e3471e210b6e86fb440193583d078f76e4db3c56926cb78e317cf2d0d7d96ab3d0c1da99f05d044951acc08457df1e9002b2d92f11bb2b5603ab630d9800cb9d1fc2eee6811ec1d287ee4d995def367f3e61d30e32a274ed328ed07c16625728fa4c29e01690b149fab1f1e6be691df199b4c689b92c2b7f0000000043af8bd1d9fcaaa1a89a81f98f2e00bceca3518801ef52"], &(0x7f0000000680)=""/79, 0x4f) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000001c0)={0xd, 0x0, 0x1}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0xe, 0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x20044000) 8m33.589471449s ago: executing program 4 (id=202): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) rt_sigaction(0x10, &(0x7f00000004c0)={&(0x7f0000002700)="f3dfd2c4237d390b35650fa8c4831d02fc06c42191d9eff3400f7edfc4e2dd288f00000000473c0167660f71e5d12e660f7f0e", 0x1, 0x0, {[0xab4]}}, 0x0, 0x8, &(0x7f00000028c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0x0) r2 = dup(0xffffffffffffffff) connect$bt_rfcomm(r2, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) getpeername$packet(r2, 0x0, &(0x7f0000000500)) symlinkat(&(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "a6341a1a379332f5", "42d33c81cf7b0400000000000000ed74", "62266bd8"}, 0x28) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) 8m32.416388351s ago: executing program 4 (id=205): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010003", 0x7) (fail_nth: 2) 8m32.207165549s ago: executing program 4 (id=206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000440)='./file1\x00', 0x208410, &(0x7f0000000540)=ANY=[], 0xfe, 0x5a7d, &(0x7f0000022340)="$eJzs3X+QHNV9IPDXM7Pa1a5+rAQ2MpjVIqOE4Nha8av8IxUrucROgeOSyykHcbJhQSsiWxIq/QggkyBy4LMK7MIpUglO/iAuzB1GcVEFF6NQJvw4ibOxVVx81BXmzs5h/+ErwqEKoKNcnPdqZ/rNzvRMb8/OzgpJfD4lbU+/efPt16/f9PT3zexOAAAA4G3h8G27jn3izN/93p9NvH7z7/3DtlvCULlaPhArDKfLG96qFnI89VdWVJfZcfGrX/jmz0av+e3vPjj4jTcObTpn849+57RrHv3cpQfv/usnXlv88C9fLIobx9P50+vJy0kIA985+hdfPPTMGVNlyZKpn6V9ISxLlj+xLAnh1sYQY78IIWxKV1Zk4j/0+oWbp5a33N7fVL40U894f3ubOs59IYS9x65/b/jxb2249Qcrv/V3fQde2jddJRloGE8hLLmq8fFTj12Y/p8SR1scj0m6XB9CGGx43AcK2vWeDtu/Jmf9rHS5IF0OFcSJ96/KrJcy9bLrUV9mOViwvbnKa0e39YosyqwnPYob5bUzli9Ll99Ol+fPMn453YdyEkpJqNSbvzWZHiOh4bglIakey4H6eql+bEO6/5n1JLNeyqyX+zL7Vd1uOtDKSdJcHutlyuPpuJKWn9N4rm7jUw23G+u9K5alT9Q3snUyQYdabtT3qyq26+gMbTkeSg3noHbl9QOfHoyhtGwoWd7ymMk24n2HNtyxurzxycPDOe1IHkzS+ElX8fd+f9mizz6wf0/2db0e/6pSGr/UVfyfXHbklSv2f/1rufHvjPHLXcW/4LHBly976rZVuf1zNPZPpav44y8+/eWVp199ILf998T4A13FX3fwSP/iY489ntv+sdg/C7uK/8KHP/rT+5975KXc+CHGH+wq/saDO77SP3LsvNz4j8f+Gepu/Lx64JLnR0Z+PpoX/9kYf3FX8e/b1/+he5fefmnu8V0f+2e4q/gfP/fRWxcde+TsvHNnck+vXjkB3p5OS6+xvpSud5tnzlVDvvBXo5XaNd+i9P/iXm4oc/GZzRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfe8d7/8rH/9enhlyvpen9644VSbRnLF4SQLAwh7No9vnP3lu3Xjn7uuj07t49vHR3fPTqxfffOG0cv+vXRnRM7to7fOHXv2PsurD1ueUhqy+Tslm33T05Oloaby+L2/s25B368+gP/+19CGHvHD0cque1fc/e2e09v8zMjWTf5kW17PvHDi/823a/htF3Dbdo1OTk5GXLa9X8uf/PePz/6s/NCGHvnTO16+oXf/MemBlULpuOkSv2h1qD+ZLBtO+qtTtsT+6uyecvWibGZ+3fq8eWc/fi3X3jpF5tv+Oqbtf4dyN2PDvt34brJraW/3PDx//eXN9UKitr1Vh33ov6OexHbF/tvIO3vJel+LcnZr0rOft32g8ef+86Z+1/bF8Yqr65s3XbRfvWlA6AveVdH241bGEyWNZUPpPXjEY+PW7N72441u27c+74t28avnbh2YvsH11609pKxiy+5eE11z9f0eP/j9n+lw/0/PuNp6R/v+3b82dl4am7Xgqkqs+qPqXYV90dji/Kef4Of+uJdH7z7qU/UCorGeaxdP59Ul8mbg1PHeW1oGG+tfdVuv4qOTwhhtF0/vPLapeGM/77l1qLzUOORafyZkaybfGbVv/7tB/5mxW/UCo7Leb6xQV2e5+utnm5Ptb8G0uMxeYL2b38op/s11LZda595qu+Ow//yJ/X2LVgQbhjfvXvn2trPRWlLFyVn3dyuXWdl1uN+raz+LNefbvVh2ma8TukLtfZlz5+xerZXh9L7hpLlbfcrK953aMMdq8sbnzyc19PJg7UtLgyLa8vk3Tk1t2YeWK43uN32T9TnX9H4GPnY3zz86Yf//qKW8XFB7WfRfiU5+/Wt5+676xtf/fd/37v9+thvHhn+1//5R6trBSf8eaVca0i91Wl7ksbzygUhNDz/2rZjZWi/H7nPv1L7/Sl6/mW3M12/fbzRzPpQKHf1fL3gscGXL3vqtlW5z9ejMz1fG3f2pqbHlQueryfK+Mk+v5JKczvm7/nVNFCSdZPf/dJp+564ef2ZtYKi18t67Xbj+sIO8o+c/frHK54fuW703/233p03vvnrD135o/F1f1or6P64x7b05rgPpP07kNO/9VbHvLOxf99/zXVbN9XKi/r5rbv+TZcF+U88ley6ce/nx7dundi5q7P96vT1NG4n28vdvp7Gs9vygv0qtezX/N3opL86fb7F9m/qur+an29DIenqdWHv95ct+uwD+/cMtzwq3dBVpTR+qav4P7nsyCtX7P/613Lj3xnjV7qKP/7i019eefrVB3Lj35Ok8QeK4y8JLfHXHTzSv/jYY4/nxh+L7V/YVftf+PBHf3r/c4+8lBs/xPhD3fX/qwcueX5k5Oe58Z9N0u1MXSOF8NDrF26urSehL32+xXb0NbUrZNeTzHops15uXC+lswhxA+UkaS6P9dLycxra0s4f5pTHq7CBFbXlG3E9ZG/MXH6iKTWc+9uVF12nAgCc6uL7//EaNL7/P5FeKOXPNMC0ueZhK3Lixjxsej5nQdP9K9L48fFxHnDk/WFsannLaO1Cf7bvI8TnQ3aeM27nvPc0x2g7P3GwcSPV7bfMcxbNv6/KrMd21ebLKw15aKo1r6mEDubfW7cz8/x7ZveL388a/VJLs0Yb5q2yx68vnTFr93mHTHsrUxHyxkd2Xix+nmNkSVhf3V6H4yP7OZp4HLKfo4nbOTNz4uz2czR542O4tR+a2hXHR6w3w/ioNrn4/cjW4xdm6N/p49c+Wvb4zeJ4D0zVn+/3Z3swb9j2lHb85g3n9/2wE2Jesk384zwvuaglfvoEO9HnDWN57KdKh/OJn84p79V8YjxdxHYdnaEtx4P5ROBUFfP/+Boxlf9PXYD/30y9ojwle9UY4+V+Tqjcvj1FeUfr5/QGu3od33hwx1f6R46dl3ud83inn9Pb0bQ2WPC5n6J+XJ1ZL+zHnAmaonwvu52ifs9+LmMoLO6q3+/bd/eH7l16+6W5/b6+9kJa3O93Na0tLuj3kyBfaB9fvnAq5Qut8Xv0OYai+bP8fKRcb8e85CPpB5/mKx/5g5zy2eYjgy036vtVdeLmI9MvpE35SN/xbRcAcPKI+X/9/bM0///neGGRXkcU5a3nZ9ZjvNy8Nef6JC9v/f10eUOm/lD6GxWzvW7++LmP3rro2CNn5+Yt93Sah/7HprXhwjx0bnlzbh6xvjefF8/NI+p51tzyxNz21/PEueXpOW/TNuTpc8ujc/unnkc3zwPcdWQ605gpfpwHyI1fnwfoYZ77y+lKxy/PLZivy2wsrnY6X3e88+ipkr4lzfvZnBcP9iaPTn99dr7y6E/llM82jx5quVHfr6oTN49uLpdHAwCnqpj/x8u4av7fH8JTscLCeGNu77Pn5gU9um7P/j2Qevxn5yWvnI7fo/d/i/O++c5b5zuvn+95iZP9/d/5nhcarv4Bz+7myXKCN8yTvWWfd52XvPif67c6zovTjcqLAQA4kcX8P6b58f3/pzL15pqftORvfbVLyOn85OTLzxvrncT5+eXheOXn/Sdzfn6yz3/N7+dkTq38f1qX74u/MXkK5//VNsv/AQBOSjH/j7/2GP/+339O17N/t77DPP2e7Md5vY/uffQgT+8gT+/xPFuM3/g5gJN4HqB8cs0D1G4snK5/Ks0DVPUFkwEAACeBvmqm1Pp79p9Jl9nfs8/7vfwr0mUScr96d0aV9PL46t07Jyau3LNj0/juiSu3X7dpYteV1+/csnv3RP3aeW55Y27ekuaNfaGS9kf7etm8bWn69xCW5vw9hGz9GPas6o3Wv4eQ3ezCgr8jMH38Omtv3vErzVC/3fiIx7vT8fGHOfWj+vG/5o8uuHLzriu3bN+ye8v41i17J5rrDVd/k7rz782M43FW35ea+dGiNPvv74yHZ27tKLW0oy/tj7zvZ08y7ViWtmRZ3vcf5LT7e//1z//43Mk37w9h7B3ld8+p/5J1k//p8onf3334hzum2l+asf31mmm7ir6vNFs/7k9l63W7dr9383V7tme/UbI7cT6jVF+fp881pE//cofzExtzymf7+/vllhsnpo7nJwAAaBLf/4/Xs/H9w6+mF1CxvDBP316rN9f3j3Pz9LHO8vTs95IV5enZ+nF/O83TB+aYp2e3X5Snt6vfLk/Py7vz4v9BTv3Z6nycdPE5j0raDw/s35M7Tq7qbJxkv8+gaJxk6892nCRzHCfZ7ReNk3b1242TvOOeF/+TOfXzFI2HSn08zO1zObnj4c7OxsOvZdaLxkO2/mzHQ2mO4yG7/aLx0K5+u/GQd3xb4zdPEHR73mgeH1MDozouJq68/rqdn2+oN9/ffxFaP5LRSfsWTD92fr//o1ud9+/8fu5r7u0PYV21JK/98f2BBbNqf6efK5t7+4v6fxafK1sSWj5Xltv+Z+c2E9Z5++f3+10y8qq3Pv54zdemw67o82dF87gbcspnO4+7oOXGick8Lrx1Yv4fr+Zi/n97uuz120An//ekdfE6F8/Bvscsv/87vI55272eZ99y93oOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEror6yoLg/ftuvYJ8783e/92cTrN//eP2y75Ve/8M2fjV7z2999cPAbbxzadM7mH/3Oadc8+rlLD97910+8tvjhX75YGHi4+rNyfro6EELychLCwHeO/sUXDz1zxlRZEkIoJ8P7QliWLH9iWZKJMPaLEMKmejub73zo9Qs3Ty1vub2/qXxpJkh2v8JQObansZ0h3DDz7gwU7jAnooF0nO09dv17w49/a8OtP1j5rb/rO/DSvukqyUDDeAphyVWNj+8LISxM/0+Jo21FfHC6XB9CGGx43AcK2vWeDtu/Jmf9rHS5IF0OFcSJ96/KrJcy9bLrUV9m2bCvCws23ZW8dnRbr8iizHr2ZDRXee2M5cvS5bfT5fmzjF+O/5NQSkKl3vytSXWMvPN/pOvxuCUhqR7Lgfp6qX5sQ7r/mfUks17KrJf7MvtVHZvpQCsnSXN5rJcpj6fjSlp+TsG591M55e9KlwPpE/WNuB6yN2qGWm7U96sqtuvoDG1J/Yf2xZXiR3ag1HAOaldeP/DpwRhKy4aS5S2PmWwj3ndowx2ryxufPDyc047kwSSNn7SLXymKv/f7yxZ99oH9e1bkxb+qlMYvddX+n1x25JUr9n/9a7nx74zxy13Fv+CxwZcve+q2Vbn9czT2T6Wr+OMvPv3lladffSC3/ffE+ANdxV938Ej/4mOPPZ7b/rHYPwu7iv/Chz/60/ufe+Sl3Pghxh/sKv7Ggzu+0j9y7Lzc+I/H/hnqbvy8euCS50dGfj6aF//ZGH9xV/Hv23f3h+5devulucd3feyf4a7if/zcR29ddOyRs/POnck9vXrlBHh7Oi29xvpSuj5jntmXn2fOVUO+8Fejldo136L0/+JebihjajtL5jE+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnpn+66aLPXP6RT26oJCEkOXUm24j3lResWzfaxXbHX3z6yytPv/pAY9mKLuIAAAAAxWIeXqqXDIQV4fpkYTirbf04R3BWXEuay7NzCDFOdo6g2zilNnFKXcQp96g9lR7F6etRnAU9itPfozgDBXEGQmdxFs4QpzI1Ajpsz+CM7ek8zlCP4izqUZzFmRDdxlnSo/Ys7VGc4RnjdD4Ol/UozvIexTmtR3FO71Gcd/Qozjt7FOeMHsXJzinPdhwuTmuemReneqNcGKeSlOt3tJtPPyPdztlz3M5QwXYWF70ed7idhR1u5z2Zx5VmuZ2BDrfzK3PcTtLhdn5tjtspFWwnjtsbsu2L24lrHY7/G3sUZ2+P4nyhR3Fu6lGcP+lRnD/tUZybQ/PF6WzjAHQq5v/T+d5w6K/8RhhMzzjZWYCY766s/mx9vcs7IcV4786ULyiKl03UM/FWzrZ92QmETLxVmfK+pniVej4yQ7yBxnirM3fOtL8fXte+bY3xzs+U988Qr2kHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA4+KebLvrM5R/55IaQhKl/VeVMnck24n3lBevWjXax3UMb7lhd3vjk4cay/kpXuwAAAAAUiHl4X71kIPRX1ob+ZEFTvYF0HmAgXS8P15YjS8L6qWUyWqquDybLZnxcJX3cmt3bdqzZdePe923ZNn7txLUT2z+49qK1l4xdfMnFazZv2ToxVvsZQn9BvBBCdfph1417Pz++devEzl21wmz7V6SPW5GuJ+njRt4fxqaWt6TtX16wvVLL9ubvRvHRAwAAAAAAAAAAAAAAAAAAAP4/u3YbKllZBwD8f2bmzoxXN2/4Ni7uOqyrWFnpdg0t8R4IEnxZvAgx17rJkitJV3fRXTGbdCE1pQiUhWXDD22YpElffEmJfGHBMEvobhIq5Yf6UGgZKn4IZeLOnTNvd2bnNom72u/3YZ4z/+f/PP/zHJaF/5kLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy/FuvT87WZ2bnJJCIZktMYIJvLF9O0Okbdrzy+/Qel9W+f3h0rFcbYCAAAABgp68Mn2pFylAr5yMeJzW8bomsiOn0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2exPj1fm5mdOzKJSIbkNAbI5vLFNK2OUfeVNx/87Ivr1/+tO1YZYx8AAABgtKwPz7Uj5ajEKTGRnLjU+bej2buBtX3rl/M6sn3WrTKv/93BsLxTVpl32irzPjYib3NrvDEAAADggy/r/wvtyFSUCmtW9MNZ/z+qr8/yTu7Ly7fGanfSQRVXkwQAAAAcXCm6+v9SO1yJUqHS7tdX2+9v6ISaP51n60f9bp+tP7UvL1s/6vf8S1qj3+kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4INjsT49X5uZncsnEcmQnMYA2Vy+mKbVMepuemLyHxftv21Dd6xUGGMjAAAAYKSsD++03uUoFSZjIo5s9v3rL7jn4S89/Oh0RCy3+cVi3Lhlx47rNi19xqYs76zn9k98/5nXvr0i76zlz0N2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D2zWJ+er83Mzh2RRCRDchoDZHP5YppWx6j78ue/+Jf7X3js1e5YZYx9AAAAgNGyPrzT+5ejEsUoxvHNb929/pJc3/ph7wwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAD4/rv3nTN7YsLGy9zsWhuWjkIw6D2/gfL7J/TofL/XzwL8qH+jYO7f9LAADAe+/kSKLxXzrh0kN91wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOFgsT49X5uZnSsnEcmQnMYA2Vy+mKbVMeqmjz9fWvP2E091xypj7AMAAACMlvXhnd6/HJWYiIk4rvlt0DuBZv8/9T7eJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBYWaxPz9dmZufWJBHJkJzGANlcvpim1THq3rdr7+fuPfp7F3bHSoUxNgIAAABGyvrwYjtSjlLh41GKk1rfF3oXJPnWOPi9QGfd9p5lk6teV+9Zlz/YuqQQ0V53R9/JCq3TLK8rZ/tNLY/tetXOulxrXbVrXSXa5avtdc2Htbun2poR51v55AEAAOD9k/X/pXZkKkqFUlf//9PWeERr1OcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMt1qfnazOzc0kSkQzJaQyQzeWLaVodo+5Nv/3oUV/92Z07u2OVMfYBAAAARsv68E7vX45KrIuPxLpm3x9TvflZ3j9r79x797/+enrEmccfWF/o3/ZH2cWvXz7/yf6PiFxvdi7i6Fa9ZEi93/z+7hs2Nt65P+LM4/InragXB6/Xu2XaeKS29ZIdzxzYPuLhAAAAwIdE1v9PtCNTUSpcO7T/zzrvEf1/W7MBP/qGXb84tvXZ6sj7VuSmWvVyQ+p9YeODfz71nL+/ttT/r6z3yfbVp/dec++xPQWXI32StDFzzc7NB87el8tOvVw/31c/ey5f/tar/77qxrveWa5fjnIrvrbvVparrfzsKx9pYyG3Z+7id/fUe+sXhpz/tt899cKv1t751lL9N0+ebNc/LQbVXz55YWj9OCJtTF52++5z9+7f3Fs/IqqD6r/+1oVxwh+vvrX//JN9G3c/+e7P/geQNp7b8Ma+c+6pnNdbP+mrnz3/n79w3+6f3PXdR7P62d+KnH7Kauvn+uo/e8cxu56+5dK1vfVzQ87/5OUvrt9W/c4f+s9/Zc+uhaF30VLs1H/gjIeueGlLenP/owEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhwWaxPz9dmZudySUQyJKcxQDaXL6ZpdYy6r1z0/OuX3/njH3bHKmPsAwAAAIyW9eGd3r8clShGMSabff8jta2X7HjmwPaYWp5NWmNhYdv1Oz5x1bad1155iO4cAAAAWK1XLkqa/X+hHZmKUmFjTLT6/5lrdm4+cPa+XNb/55bGJCKuunph65nRznv2jmN2PX3LpWvb7wkimn8WUF7K+0wn74Lzn596409fP3Vg3qZO3nMb3th3zj2V87K86M47K9rvJx4446ErXtqS3ty+v+68T31t20Lr9US27+Rlt+8+d+/+zbnsPUZrnGztm+Ut5PbMXfzunnpuKkpL8/lWXrl1bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgpcX69HxtZnYu8hHJkJxGt1Ygm8sX07Q6Rt2LN/7y1qPefmxdd6xUGGMjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYX9+gmNo4rjAP7ebmI22aRNWsGomKZVUeqhRUFELyoq0ooUPFWKVFt7EAVBRKkHU2nFUhUvgtVLERXUKIUKNhZLq6Tiv+LFgwoK1YNQigHNUjyoZPNms5nuuO2mCtrPB5aX92bmO7+Zefs2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9KT9dwvT2y45HanRfd+tlT908/efsHD2274om3fhrddPOne/tePzm5efmWb29ZuunAA2smdr9y+LeB9/441jb48dlmZepWQognYgiVD6defHry8wtmxmIIoRwHx0IYiksOD8VcwurfQwibG3XO37hv+potM+22XT3zxhfnQvLXFarlrJ5Zg/Pr5f+lkubZ1tpjV4Xvb1q//ctl777TPX58bG6XOLNPOc2nEBZtbD6+O4TQmz4zstk2nB2c2nUhhL6m465rU9elp1n/qhBquX7dxak9L7XVNjnZ9hW5fim3X76f6c61fW3Ot1BFdXS6Xzv9uX5+MVqoRp2rWo8Ppfb91K48w/xy9omhFENXo/wH49wcCU3PLYZYf5aVRr/UeLYhXX+uH3P9Uq5f7s5dV/28aaKVY5w/nu2XG8+W4640vrx5rW7hroLxC1NbSV/Uk1k/5P+YVT3lj8Z11WV1Tf1NLf+GUtMa1Gq88eDTw6imsWpccsoxf7aQbZtc/+zl5Q0fHRksqCPujSk/dpS/9Yuh/nve3vnocFH+xlLKL3WU/8Pao7/cvfPVlwvzX8jyyx3lX32w78Taj3esKLw/U3MryOnkx9TPtt177JPnlp1/33irZ13P3JPd/0pH9d84cbRnoHbwUGH9q7P709tR/nc33Pbjm1/vP16YH7L8vo7yN0w8/HzPSO3KwvxDs1+Fan2GdjB/fh2/9puRkZ9Hi/K/yu7/QIv82Db/jbHd17+2eNeawvm5Lrs/gym/94zqv+OyA9v7a/svKVo7456z9csJcG5amv7Heib1271n7psutXzPXKim94WXRrtmf4H602fgbJ4oZ+Y8i/7BfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IsdOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD//yURHCc=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) 8m30.662151066s ago: executing program 4 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) setrlimit(0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0xf) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r8, 0x180000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x87c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x5, 0x8e8, 0x3, 0x7, {0x3, 0x2, 0x5, 0x1, 0xd, 0x1}, {0xe, 0x2, 0x101, 0x800, 0x9, 0x9e}, 0x5, 0x3f1f, 0x57fd}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x2, 0x7fffffff, 0xfffffffb, 0x3, 0x2, 0x5, 0x66, 0xf7, 0x0, 0x337, 0x7f, 0x83, 0x2, 0x0, 0x1, 0x8, 0x101, 0x800, 0x40, 0x3, 0x3, 0x401, 0x5, 0x4, 0x80, 0x4, 0x5, 0x7, 0x834, 0x5, 0x0, 0xff, 0xf8000000, 0x0, 0x7, 0x20000000, 0x9, 0x0, 0x5, 0x5, 0x4, 0x10, 0x8000, 0x9, 0x2, 0xa284, 0xfffffffb, 0x6, 0x4, 0x3, 0x4, 0x1, 0x9, 0x8, 0x85d1, 0x8, 0xd04f, 0x247, 0x81, 0xa, 0x4, 0x2, 0x3, 0x80, 0x38, 0x5, 0x7, 0xaa2, 0x10001, 0x61f1, 0x43b, 0x8, 0x7, 0x8001, 0x1, 0x81, 0x862b, 0xe, 0x8, 0xc73, 0x4, 0xd, 0x4, 0x9, 0x4, 0x4, 0xc86, 0x7, 0x0, 0xfffffeff, 0xfff, 0x8003, 0x4, 0x5, 0xa, 0x5, 0x1, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x6, 0x8, 0xa, 0xfff, 0x2, 0x0, 0x1ff, 0x8, 0x5, 0x8, 0x5, 0x7c3e6cf1, 0xff, 0xffff538e, 0xe4, 0x1ab4ddc6, 0x9, 0x6, 0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0x2, 0x827, 0x55a, 0x1000, 0x0, 0x81, 0x5, 0xfffffff8, 0x8, 0x5, 0xfffffff8, 0xfffffffe, 0x9c5a, 0x9, 0x40, 0x1ff, 0x8, 0xee9, 0x370, 0xfff, 0x2af, 0x2, 0x9, 0x5, 0x80, 0x8, 0x7, 0x7a6, 0x3ff, 0x0, 0x7e, 0x4, 0x7f, 0x59, 0x81, 0xd99, 0xdb, 0x7fffffff, 0x6, 0x1, 0xfffffffd, 0x1, 0x5, 0x5, 0x1b93e61b, 0x51, 0xb84, 0x3, 0x7fffffff, 0xfffffffa, 0x26a, 0x0, 0x4, 0x2, 0xfffffffc, 0x200, 0x0, 0x89d7, 0x2, 0x7fffffff, 0x7, 0x1000, 0x6, 0x0, 0x2, 0x2, 0x80e7, 0x7, 0x80000001, 0x7fffffff, 0x1, 0x7f, 0xfffff000, 0x4fd, 0x80000001, 0x5, 0x800000, 0x8, 0x2dca, 0x4, 0xad, 0x4, 0x101, 0x8, 0xe, 0x7, 0x7, 0x1e, 0x9, 0x6, 0xfffff403, 0x4, 0x2, 0x800, 0x5, 0x0, 0x4, 0x9, 0x5, 0xd, 0x3, 0x1, 0x0, 0x17, 0x4, 0xfffffff7, 0x10000, 0xfffffffd, 0x3, 0x40, 0x651, 0x1, 0x2, 0x1, 0x0, 0x6, 0x5, 0x10000, 0x6, 0x255, 0x7, 0x1b89, 0x2, 0x1d9, 0x7, 0x899f, 0x3, 0x9, 0x0, 0xfffffff8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x787, 0x80, 0x3, 0x9, 0x3, 0x2, 0x3, 0xd, 0x8, 0x5, 0x4, 0x6000, 0x8, 0x5, 0xc, 0xfffffff9, 0x6, 0x5ed, 0x3, 0x0, 0x9, 0x7fff, 0x7, 0x9, 0x4, 0x2, 0x401, 0x3, 0x4, 0x54, 0xaca, 0x4, 0x3efe, 0x5, 0x7fff, 0x3, 0x33, 0x3, 0x5, 0x9363, 0x7, 0x1, 0x2, 0x6, 0x7f, 0xff, 0xfffffffc, 0xe, 0x5, 0x7, 0x9, 0x6, 0x0, 0x63, 0x2, 0x400, 0x8, 0x5, 0x3, 0xb945, 0xffffffff, 0x4fd3ba48, 0x2, 0x8, 0x6, 0x2, 0xa, 0x2, 0x7, 0x1, 0x4, 0x7, 0x5, 0x0, 0x5, 0xa86, 0x0, 0x4, 0x39, 0x8000, 0x0, 0x171, 0x7fff, 0x7, 0x4, 0x5, 0x2, 0x1ff, 0x7fff, 0xa, 0x9, 0xe9, 0x0, 0x400, 0x6, 0x8, 0x3, 0x299, 0x7, 0x2, 0x8, 0x7fffffff, 0xfff, 0x1, 0x0, 0x4, 0x2a82, 0x8, 0xfffffff8, 0x1000, 0x1, 0x7, 0x7, 0x2, 0xfff, 0x9, 0x0, 0x4, 0x7, 0x8, 0x1, 0xfffffff9, 0x3e48, 0x66565886, 0x2, 0x9, 0x1ff, 0x6, 0x4, 0xfff, 0x7fffffff, 0xa, 0x80000000, 0x45a, 0xffffffff, 0xb7, 0x7, 0xdf, 0xa4f, 0x40000000, 0x1, 0x5, 0x1000, 0x5aa, 0x7f, 0x401, 0x1, 0xfffffad2, 0x2, 0x800, 0xffffffff, 0x4, 0xc0, 0xc8c5, 0x6, 0x2, 0x401, 0x5, 0x9, 0x4, 0x2, 0x1, 0x7, 0x1000, 0x5, 0x3, 0xffffff25, 0x7, 0xfffffffd, 0xa64, 0x9, 0x7ffd, 0x8a, 0x80000001, 0x1, 0x2, 0x3ff, 0x0, 0xe, 0x4, 0x16, 0xffff, 0xe, 0x9, 0x1200, 0x3, 0xa, 0x5, 0xfffffff4, 0xda4c, 0x7f, 0xfffffffb, 0xb9e, 0x101, 0x2, 0x4, 0x8, 0x401, 0x8b, 0xfffff09c, 0x7f, 0x0, 0x200, 0x0, 0xaa, 0x3, 0x7, 0xe, 0x7, 0x8001, 0x2, 0x5, 0x4, 0x6, 0x2, 0xe21f2640, 0xd, 0xa, 0x6, 0x3, 0x1, 0x8, 0xffff, 0x1, 0x2, 0x5, 0xf0000000, 0x5, 0x9c, 0x7, 0xffffffff, 0x9c10, 0x0, 0xf5, 0x80, 0x4, 0x8, 0xc2c, 0xe92, 0x6d0, 0x71, 0x10, 0x5, 0xda, 0x8, 0x7, 0x4, 0x7, 0x3, 0x7f, 0x0, 0x2, 0x8, 0xbc]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 8m13.278787685s ago: executing program 33 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) setrlimit(0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0xf) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r8, 0x180000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x87c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x5, 0x8e8, 0x3, 0x7, {0x3, 0x2, 0x5, 0x1, 0xd, 0x1}, {0xe, 0x2, 0x101, 0x800, 0x9, 0x9e}, 0x5, 0x3f1f, 0x57fd}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x2, 0x7fffffff, 0xfffffffb, 0x3, 0x2, 0x5, 0x66, 0xf7, 0x0, 0x337, 0x7f, 0x83, 0x2, 0x0, 0x1, 0x8, 0x101, 0x800, 0x40, 0x3, 0x3, 0x401, 0x5, 0x4, 0x80, 0x4, 0x5, 0x7, 0x834, 0x5, 0x0, 0xff, 0xf8000000, 0x0, 0x7, 0x20000000, 0x9, 0x0, 0x5, 0x5, 0x4, 0x10, 0x8000, 0x9, 0x2, 0xa284, 0xfffffffb, 0x6, 0x4, 0x3, 0x4, 0x1, 0x9, 0x8, 0x85d1, 0x8, 0xd04f, 0x247, 0x81, 0xa, 0x4, 0x2, 0x3, 0x80, 0x38, 0x5, 0x7, 0xaa2, 0x10001, 0x61f1, 0x43b, 0x8, 0x7, 0x8001, 0x1, 0x81, 0x862b, 0xe, 0x8, 0xc73, 0x4, 0xd, 0x4, 0x9, 0x4, 0x4, 0xc86, 0x7, 0x0, 0xfffffeff, 0xfff, 0x8003, 0x4, 0x5, 0xa, 0x5, 0x1, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x6, 0x8, 0xa, 0xfff, 0x2, 0x0, 0x1ff, 0x8, 0x5, 0x8, 0x5, 0x7c3e6cf1, 0xff, 0xffff538e, 0xe4, 0x1ab4ddc6, 0x9, 0x6, 0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0x2, 0x827, 0x55a, 0x1000, 0x0, 0x81, 0x5, 0xfffffff8, 0x8, 0x5, 0xfffffff8, 0xfffffffe, 0x9c5a, 0x9, 0x40, 0x1ff, 0x8, 0xee9, 0x370, 0xfff, 0x2af, 0x2, 0x9, 0x5, 0x80, 0x8, 0x7, 0x7a6, 0x3ff, 0x0, 0x7e, 0x4, 0x7f, 0x59, 0x81, 0xd99, 0xdb, 0x7fffffff, 0x6, 0x1, 0xfffffffd, 0x1, 0x5, 0x5, 0x1b93e61b, 0x51, 0xb84, 0x3, 0x7fffffff, 0xfffffffa, 0x26a, 0x0, 0x4, 0x2, 0xfffffffc, 0x200, 0x0, 0x89d7, 0x2, 0x7fffffff, 0x7, 0x1000, 0x6, 0x0, 0x2, 0x2, 0x80e7, 0x7, 0x80000001, 0x7fffffff, 0x1, 0x7f, 0xfffff000, 0x4fd, 0x80000001, 0x5, 0x800000, 0x8, 0x2dca, 0x4, 0xad, 0x4, 0x101, 0x8, 0xe, 0x7, 0x7, 0x1e, 0x9, 0x6, 0xfffff403, 0x4, 0x2, 0x800, 0x5, 0x0, 0x4, 0x9, 0x5, 0xd, 0x3, 0x1, 0x0, 0x17, 0x4, 0xfffffff7, 0x10000, 0xfffffffd, 0x3, 0x40, 0x651, 0x1, 0x2, 0x1, 0x0, 0x6, 0x5, 0x10000, 0x6, 0x255, 0x7, 0x1b89, 0x2, 0x1d9, 0x7, 0x899f, 0x3, 0x9, 0x0, 0xfffffff8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x787, 0x80, 0x3, 0x9, 0x3, 0x2, 0x3, 0xd, 0x8, 0x5, 0x4, 0x6000, 0x8, 0x5, 0xc, 0xfffffff9, 0x6, 0x5ed, 0x3, 0x0, 0x9, 0x7fff, 0x7, 0x9, 0x4, 0x2, 0x401, 0x3, 0x4, 0x54, 0xaca, 0x4, 0x3efe, 0x5, 0x7fff, 0x3, 0x33, 0x3, 0x5, 0x9363, 0x7, 0x1, 0x2, 0x6, 0x7f, 0xff, 0xfffffffc, 0xe, 0x5, 0x7, 0x9, 0x6, 0x0, 0x63, 0x2, 0x400, 0x8, 0x5, 0x3, 0xb945, 0xffffffff, 0x4fd3ba48, 0x2, 0x8, 0x6, 0x2, 0xa, 0x2, 0x7, 0x1, 0x4, 0x7, 0x5, 0x0, 0x5, 0xa86, 0x0, 0x4, 0x39, 0x8000, 0x0, 0x171, 0x7fff, 0x7, 0x4, 0x5, 0x2, 0x1ff, 0x7fff, 0xa, 0x9, 0xe9, 0x0, 0x400, 0x6, 0x8, 0x3, 0x299, 0x7, 0x2, 0x8, 0x7fffffff, 0xfff, 0x1, 0x0, 0x4, 0x2a82, 0x8, 0xfffffff8, 0x1000, 0x1, 0x7, 0x7, 0x2, 0xfff, 0x9, 0x0, 0x4, 0x7, 0x8, 0x1, 0xfffffff9, 0x3e48, 0x66565886, 0x2, 0x9, 0x1ff, 0x6, 0x4, 0xfff, 0x7fffffff, 0xa, 0x80000000, 0x45a, 0xffffffff, 0xb7, 0x7, 0xdf, 0xa4f, 0x40000000, 0x1, 0x5, 0x1000, 0x5aa, 0x7f, 0x401, 0x1, 0xfffffad2, 0x2, 0x800, 0xffffffff, 0x4, 0xc0, 0xc8c5, 0x6, 0x2, 0x401, 0x5, 0x9, 0x4, 0x2, 0x1, 0x7, 0x1000, 0x5, 0x3, 0xffffff25, 0x7, 0xfffffffd, 0xa64, 0x9, 0x7ffd, 0x8a, 0x80000001, 0x1, 0x2, 0x3ff, 0x0, 0xe, 0x4, 0x16, 0xffff, 0xe, 0x9, 0x1200, 0x3, 0xa, 0x5, 0xfffffff4, 0xda4c, 0x7f, 0xfffffffb, 0xb9e, 0x101, 0x2, 0x4, 0x8, 0x401, 0x8b, 0xfffff09c, 0x7f, 0x0, 0x200, 0x0, 0xaa, 0x3, 0x7, 0xe, 0x7, 0x8001, 0x2, 0x5, 0x4, 0x6, 0x2, 0xe21f2640, 0xd, 0xa, 0x6, 0x3, 0x1, 0x8, 0xffff, 0x1, 0x2, 0x5, 0xf0000000, 0x5, 0x9c, 0x7, 0xffffffff, 0x9c10, 0x0, 0xf5, 0x80, 0x4, 0x8, 0xc2c, 0xe92, 0x6d0, 0x71, 0x10, 0x5, 0xda, 0x8, 0x7, 0x4, 0x7, 0x3, 0x7f, 0x0, 0x2, 0x8, 0xbc]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 6m50.687920153s ago: executing program 5 (id=438): mkdir(0x0, 0xc0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tcx}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x3, 0x0, [{0x8008000, 0x1000, &(0x7f0000001600)=""/4096}, {0xffff1000, 0x43, &(0x7f00000010c0)=""/67}, {0x2, 0x21, &(0x7f0000001140)=""/33}]}) getxattr(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974792e2f0034f3bb8af920310de62c675f594ed01c807f24dfdd087c4a50c388b9467b019b6dac8864968cbb86430ea2e3471e210b6e86fb440193583d078f76e4db3c56926cb78e317cf2d0d7d96ab3d0c1da99f05d044951acc08457df1e9002b2d92f11bb2b5603ab630d9800cb9d1fc2eee6811ec1d287ee4d995def367f3e61d30e32a274ed328ed07c16625728fa4c29e01690b149fab1f1e6be691df199b4c689b92c2b7f0000000043af8bd1d9fcaaa1a89a81f98f2e00bceca3518801ef52"], &(0x7f0000000680)=""/79, 0x4f) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000001c0)={0xd, 0x0, 0x1}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0xe, 0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x20044000) 6m47.707805056s ago: executing program 5 (id=448): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x23, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40600, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/236, 0xec}], 0x1}, 0x23) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 6m45.793850504s ago: executing program 5 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 6m45.192459246s ago: executing program 5 (id=453): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000780)={[{@verity_require}, {@metacopy_on}, {@uuid_on}, {@index_off}, {@verity_off}, {@verity_off}, {@metacopy_off}]}) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 6m41.792247643s ago: executing program 5 (id=462): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000002c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x40400a4) creat(0x0, 0x48) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000050) r3 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x10a) mkdir(0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x40ec, r1}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000008dc62288890e152a486d90f000100000001000000002000000000000000000000100000000000000000000c6bef8db3ba51b38b56d6e5635500e7403e1bfdf3c7de5bc58f048104b2015d5c059d05e1da48c48b955ee738eecbd2efe"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x6c, 0x7ffffff, &(0x7f0000000200)={0x1, 0xa, 0xa, 0x200}, 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59cf0000000000000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 6m40.356203117s ago: executing program 5 (id=466): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x8, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0xf723, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0xf, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x4}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35cc, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0xf, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x7fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x30, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x9}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x13, 0x6, "c4f9f409df0f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m38.985317755s ago: executing program 34 (id=466): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x8, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0xf723, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0xf, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x4}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35cc, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0xf, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x7fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x30, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x9}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x13, 0x6, "c4f9f409df0f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m39.4466066s ago: executing program 8 (id=609): mkdir(0x0, 0xc0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x3, 0x0, [{0x8008000, 0x1000, &(0x7f0000001600)=""/4096}, {0xffff1000, 0x43, &(0x7f00000010c0)=""/67}, {0x2, 0x21, &(0x7f0000001140)=""/33}]}) getxattr(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974792e2f0034f3bb8af920310de62c675f594ed01c807f24dfdd087c4a50c388b9467b019b6dac8864968cbb86430ea2e3471e210b6e86fb440193583d078f76e4db3c56926cb78e317cf2d0d7d96ab3d0c1da99f05d044951acc08457df1e9002b2d92f11bb2b5603ab630d9800cb9d1fc2eee6811ec1d287ee4d995def367f3e61d30e32a274ed328ed07c16625728fa4c29e01690b149fab1f1e6be691df199b4c689b92c2b7f0000000043af8bd1d9fcaaa1a89a81f98f2e00bceca3518801ef52"], &(0x7f0000000680)=""/79, 0x4f) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000001c0)={0xd, 0x0, 0x1}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0xe, 0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x20044000) 5m34.043636182s ago: executing program 8 (id=625): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2e}, {0x2, 0x15000000000000, 0x0, 0x1, 0x10000000008001, 0x7, 0x0, 0xd3d}, {0x0, 0x200, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in6=@empty, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1}}, 0xe8) socket$inet(0x2, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002026007a10000000000000007b1af8ff00000000bfa100000000000007012000f8ffffffb702000008000000b7030000000000008500000f00000000000000133e04d77ee4cd2143441348ac8bee394aa58d0ad76f3f8f5889c717"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m30.52789392s ago: executing program 8 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="234d81343079e9b9499b6c6bb3fc0000000000000000300012800e00010069703665727370616e0000001c3e028006000200300000000800b524a0b2cd57e68b725a230405a73456b4c5071c3ac5095f8c84ae83831c35129427fcdcdce013a107d53e1047d018a1dd2b939e37facb66a35c17a3fc88ca359fca19"], 0x50}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000006c0)="560a4ce0b75aae475c717fdc6d1f124ba01389c6d3aed3996d2fc250f097cca776", 0x21) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000100)={0xc, 0x0, 0xfdfd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) r5 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000001c0)={{r7, r6, 0x1, [0x0, 0xf7df]}, {r7, r8, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000003c0)={r7}) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xff, &(0x7f00000000c0)=[{0xb, 0x1}, {0x4f42b13e, 0x9, 0x100000000}], 0x2, 0x8, 0x0, 0xceb23fa5a9425074, 0xeb9a1b89ba3ea30a, 0xa}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14], 0x40}}, 0x44) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000100088fb"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r15, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r15, 0x0) ioctl$VIDIOC_G_OUTPUT(r15, 0x8004562e, &(0x7f0000000300)) 5m29.243874425s ago: executing program 6 (id=634): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000140)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x5}}, {@barrier}, {@uid}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'maciceland'}}]}, 0x3, 0x632, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 5m26.014441743s ago: executing program 8 (id=643): r0 = syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x4, 0xad7, &(0x7f0000001900)="$eJzs3U2MW0cBAOB53vUmm6bEKSld0tAmFNry002zWcJPBEmVCImoqRCXShWXKE1LRAgSRQKqSiQ5caNVFSRO/IhTL1VBSPSCop64VKKRKqSeCgcOREFU4gChiVHsGa89sfvsza5/1t8njcfz5j3PvOfn5/c7E4CpVWm8Li8vFCFcfP3lo/948O/zN4ccao1Ra7zOtqWqIYQipmezz3t3phlff++Fk93iIiw1XlM6PHG1Ne0dIYRzYXe4FGph58XLL7259Pjx88cu7HnrlYNX1mfuAQBgunz90sHlu//653u3X3v1vsNhU2t42j+vxfTWuN9/OO74p/3/SuhMF22h3Vw23mwMlfnO8Wa6jNcoZ7b7eLM9yp/Lyq/2GG9T+ODyZ9qGdZtvmGRpPa6ForLYka5UFhebx+ShcVw/VyyePX3mmedGVFFgzf37/hDC7rZw5EJnej1D2tgMMs2h9ahL0fxfX+f5rQ9ruW60cHh4ZV2rN418nocU6ttGu/0BSPLrhbc4l59ZuD2tT5vtr/yrj1W6Tw9rYNjr/0Dlz424/KD835y3xWHtbNS1Kc1X+h1tjen0753uYcrvX+r9+8uvdHQOza9HVPusZ6/rCJNyfaFXPWeGXI/V6lX/fL3YqL4c47QcvpLlt/9+8u90Ur5joLv/5Of/BaEj7B6DOggdIXSkq7fzWfURb3+A8ZXfN1dP10ej/L6+PH9TSf7mkvz5kvwtJfl3lOTDNPvd938aXixWjvPzY/pBz4en82x3xvhDA9YnPx85aPn5fb+Dut3y8/uJYZz94cSTp77w9FOXm/f/F631/0Zc39PhRi3+ti7FEdL5wvy8euve/1pnOZUe492V1efOLuM33u/oHK/YsfI5oW07c0s9Fjqn29ZrvF2d49Wy8eZj2JzVN98/2ZJNl/Y/0nY1La/ZbH6r2XzMZfVI25XtMc7rAauR1sde9/+n9XMhVItnTp859WhMp/X0TzPVTTeH7xtyvYHb1+/zPwuh8/mfra3h1Ur7dmHbyvCiuV14LX5e5/ClVjmdw/fHdPqf+9bMfGP44snvnnl67WcfptpzP3r+2yfOnDn1PW9W/ear41GNQd6kw5Zxqc8kvKmEsajGsN6MeMMErLu9P27uBDxy+jsnnj317Kmz+w8c2L+0dOCL+5f3Nvbr97bv3bc7N4LaAmtp5U9/1DUBAAAAAAAAAAAA+vWDY0cvv/3G599pPv+/8vxfev4/3fmbnv//Sfb8f/6cfHoOPj0HuL1LfmOcrIHVuWy8agwfzuq7Iyvn7my6j8S41Y9ffP4/FZe365rqc082vNojmTUncEt7KXNZGyR5f4Efj/GFGP86wAgV890Hx7isfeu0rqf2KdrapajPTEsjyhtA+t7S2tBsx2SlJ9eu7Tq1fdnbh1RP1tb6PDw458kCmAD/HGX731uGXea/VmZ8LT+3GIM2oTdUmB1ueT9fh3ViQkK93qsXj357sAFYG6Pu/zOd90zx2T9+bfPNkEa7+ljn9jJvvxQG8Ze3O9Pj3v/kepef99s37PJHPf/D7v+z1f9d39u/rMe82urK/e8vrrzTVmzY2W/5+fyndqB3DFb+tVh+mpuHQn/l13+VlZ9fEOrT/7Lyt/RZ/i3zv2t15b8fy0+L7eEHSspPJ4bPN2tcVDrrMZ/NR7r+l583Tq5n85/a9vyA+f/G893mf5XXGG7E8mGaTUo/s4PK9iNaO+3t9xeEgfr/jc6tbf+/rcpmm7X8PozPNZPvp66L0n0OeX8ng9Y/3V+R/gfS/RTp84uS/zf9/062L8W47PeQ+v9N62Mt/uW3pRvLMqWrXZbtRt3WwKR6V/+/4xY2j0EdhP5DfWYV07X6iRtx/ev1+vqe0Cox0sIZ+fIf9XHCqMsf9fIvk/f/m+/D5/3/5vl5/795ft7/b54/H7+hXvl5/7/58sz7/83z78k+N+8feKEk/6Ml+Tu757cO2+8tmX5XSf7HSvL3tPIPdYyR8u8rmf7+kvy7SvIfKMn/REn+J0vyHyzJf7gtv70P6JT/qZLpN7r0PMq0zj9Ms/z5PL9/mB7p+k+v3/+Oknxgcv3s1X1HnvrtN2vN5//nWudD0nW8wzFdjcdPP4zp/Lp3aEvfzHsjpv+W5Y/7+Q6YJnn7Gfn/+0Ml+cDkSvd5+X3DFCo2dx8c47J2q3rt5zNZPh3jz8T4szF+JMaLMd4b430xXhpS/VgfR177/cEXi5Xj/W1Zfr/3k+fPA3W0ExVC2N9nffLzA4Pez5634zeo2y1/lY+DAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjEyl8bq8vFCEcPH1l48+efz03ptDDrXGqDVeZ9tS1dZ0ITwa45kY/zK+uf7eCyfb4xsxLsJSKELRGh6euNoq6Y4QwrmwO1wKtbDz4uWX3lx6/Pj5Yxf2vPXKwSvrtwQAAABg4/t/AAAA//8EEw8R") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x320c401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x450001, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = inotify_init() mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) flock(r4, 0x9) sendmsg$netlink(r2, &(0x7f0000000040), 0x140000d4) 5m24.053861612s ago: executing program 6 (id=648): r0 = syz_open_pts(0xffffffffffffffff, 0x2800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000019180)={[&(0x7f0000000200)='\x00', &(0x7f0000019080)='\x00\x00 \x00\x00\x00\x00\x00\x00\x00']}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readahead(r0, 0xfffffffffffffe01, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 5m22.436111789s ago: executing program 6 (id=650): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) creat(0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0xb, 0x141341) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5m22.140268609s ago: executing program 8 (id=652): close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x88, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f00000006c0)={[{@data_writeback}, {@data_writeback}, {@coherency_full}, {@localflocks}, {@intr}, {@heartbeat_none}, {@localalloc}, {@intr}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x1608}}, {@data_writeback}, {@nouser_xattr}]}, 0x8, 0x4472, &(0x7f0000008980)="$eJzs27tvW28dB+DvOQk0KW3JrfdWsmAgAhQ5nQod6CWAKiFKwkWIoZFzaRtw4ihxUAckitgrITEgZpZW7Kid+i8w0JWxQ+nAgmAhyPZx6nMcU6uKk1+j55Hak/Oe816Uj338vnqdNFN/tLZdWtsuVTZKteUH29dKv6xVd9ZXIz0kR90//RlETrI/OvfufOeHP7kW8fhvE1/Y3d3djYax2Ndsx8//+uevljuPbWmhTqPd/Vs7KD+LiKmIGInieIYi4qd/iUgiYjwrm8iOoxFxKlrXfvvnZwsjBzSaoTfP55/Nzz198Xb99eid+6WeNyYRf6xe/PrD9X98eejG3796QN0DAMD/9d2Fez/+QXk2XiVx5uVw93z9fHbsNT/epS/fGnyUAAAA0NP79f9Ykibd6/+p7NhjSzAsbD9td79/b+7b5dls/zfpun69WTQc724NNfdQi/u+xf3f8UL9/fd/u/v5WNeTfL9jkaQzufM0nZmJmL3dOr+QnEyrte361x7UdjZWDmwYn6x8/q3d+1w62YZ+v/lPFNof/P7/ZNerqXFeOriX2LGWz3+o531/+k3SV/6ThXqHkT8fL5//cLPsS503lFoPgEb+vxv+cP5ThfYHlf+ZxrM9aYx1JPcEaMxhGuW95ivk5fP/XLMs9+jMfpG93v//KeR/ttD+UT3/p28PttfjIp//55tl+S+tpXtf6RtPP/z+P1do/yjyb4x/2ud/X/L5n2gV5h+ezd9kv8//84X2B5T/k2xbNeJMEpMd3zp9Odz6cGjvVzeXNI3LmwMYxTGQz797l7+9vnp3K+1r/nehUP+w1n/tftvrv/Y6ZDpprf/YXz7/0Z739fv+v1ioN/DnfzKSrQB2fz3Qfo6pfP4nW4X7TAD7zf9Sof1B5d984o+0838/4P+eaJWXzf/6ks8/iyr3MfCk+X9z/p905/7vQv6XC+135F/805AD0j3/a4x/ekC9HTf5/E/1vK+R/1/7+Py/Uqg3+Pl/RNlc/6Pl8z/d877m+3/kw/lfLdQbdP5fiRODbB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NibyI5jkaQzufM0nZmJmMzOL8TJZKmysrhUrS3/YjtiKisvxUTysFpbqlQX1zZqK6uLlWq1thxxNrs+FSPJdrVWX1yvbJ7ba2s0ebRa2aovrVbqEXE+K78Sp9ttLa3V1yubzXvb176Y1rY2H1U2FlfWtr5ZLpfLcXFvDOPJ6uP66ka91XvrasSlvbpjScfgmpcv743lVPLz2s7WRqXaLL/SUadaW65UO+pcza79PsaT+tbOxnKlvrpYrT1s93eUbmbHubsLP1r43mzX9VLSOk4c7rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ix5deMbf4iI4dZZGhE32z8k2b+coTfP55/Nzz198Xb99eid+6X97gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdilY5WGoSgMwOdeBQUXdfQJnEKyuSqKuBgRfAJfokNfs4/RoWOXUmhvICQNdGnp8H3LIfm59xy4BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDL8fnb/v3UTUSK281NxGzxeNfPn0qt3w6fvzrDjJzO13f7/lE35d3TKH8pv5aveZeuV/P/KPW6991pBnsy3Ke9cZ+hqX2bmq/rex8pVxHxUPLnlHNVHXcXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW3bn3gRAMAYC6BfBykKwcQ2dwlIR3MPS8VzCebQSLMSf/r0qEJI7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KYb+2lo2rRGyvaItGxVcd3X5zDf38fz+/IlPv9RFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKoAAAD//78yy/c=") 5m16.75313265s ago: executing program 6 (id=660): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1, 0x1000000}, 0x20) 5m16.752458906s ago: executing program 8 (id=661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r1, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0) close(0x3) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x328}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m14.843551553s ago: executing program 35 (id=661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r1, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0) close(0x3) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x328}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m14.830626804s ago: executing program 6 (id=665): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x1, 0x152) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x8820) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="080026006c0900000800a00033f4ffff0800270000000000050019010900000008002600800900"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r3, 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00f4966620e39b0835ffb29be31cb4c8b4816a5d79a45ad809a414e6b918"], 0xc) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xac6, &(0x7f0000001400)="$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") mknod$loop(&(0x7f0000005f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0) rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') 5m11.128319757s ago: executing program 6 (id=670): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0xa, 0x3, 0x87) syz_clone(0x41082000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_getevents(0x0, 0x9, 0x0, 0x0, &(0x7f0000001300)) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) 4m55.275118997s ago: executing program 36 (id=670): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0xa, 0x3, 0x87) syz_clone(0x41082000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_getevents(0x0, 0x9, 0x0, 0x0, &(0x7f0000001300)) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) 2m10.19571219s ago: executing program 0 (id=992): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1, 0x0, 0x0, r2}) (fail_nth: 1) 2m8.470704693s ago: executing program 0 (id=995): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x15, &(0x7f0000000140)={[{@norecovery}]}, 0xfe, 0x479, &(0x7f0000000940)="$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") openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x80281, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x81, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc, 0xc, "ff9f020bbe829ad2f1bc369d03740250ceaac594b1b3d7413363000000000000000000000000000000000000000000001a004000", "a9103939c787a16c1ca43f000000000000000439f3d32897372429a75df8919ea917deb7ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e20000000000006a7300", [0xfffffffffffffffe, 0x87b]}}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x9}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m6.954710705s ago: executing program 0 (id=996): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m2.766825586s ago: executing program 0 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() futex_waitv(&(0x7f0000001480)=[{0x4b, &(0x7f0000000000), 0x2}, {0x0, &(0x7f00000000c0)=0x7, 0x82}, {0x4000000, &(0x7f00000001c0)=0x800, 0x82}, {0x8, &(0x7f0000000240)=0x4d46, 0x82}, {0x334c, &(0x7f0000000280)=0x3, 0x2}, {0x80000000, &(0x7f0000000300)=0x5, 0x82}, {0x1, &(0x7f0000000340)=0x9, 0x82}, {0x1, &(0x7f0000000380)=0x5, 0x2}, {0xf969, &(0x7f00000003c0)=0x9, 0x2}, {0x5, &(0x7f0000000400)=0x200}, {0xbcc0, &(0x7f0000000440)=0x8000, 0x82}, {0x9, &(0x7f0000000480)=0x4, 0x2}, {0x81, &(0x7f00000004c0)=0xeff5, 0x2}, {0x1, &(0x7f0000000500)=0x7, 0x2}, {0xcf5, &(0x7f0000000540)=0x7fffffffffffffff, 0x82}, {0x81, &(0x7f0000000580)=0xfffffffffffffff7, 0x2}, {0xb, &(0x7f00000005c0)=0xfffffffffffffff1, 0x2}, {0x45e, &(0x7f0000000600)=0x4a, 0x2}, {0x8, &(0x7f0000000640)=0x3, 0x2}, {0xff80, &(0x7f0000000680)=0x9, 0x82}, {0x1ff, &(0x7f00000006c0)=0x2, 0x2}, {0x3b, &(0x7f0000000700)=0x2, 0x82}, {0x7b, &(0x7f0000000740)=0x9, 0x82}, {0x60, &(0x7f0000000780)=0x1a0, 0x82}, {0x2, &(0x7f00000007c0), 0x82}, {0x2, &(0x7f0000000800)=0x7, 0x82}, {0x100, &(0x7f0000000840)=0x3, 0x2}, {0x10001, &(0x7f0000000880)=0x101, 0x2}, {0x81, &(0x7f00000008c0)=0x3}, {0x2, &(0x7f0000000900), 0x82}, {0x3, &(0x7f0000000940)=0x3, 0x2}, {0x6000, &(0x7f0000000980)=0x5, 0x2}, {0xfffffffffffff800, &(0x7f00000009c0)=0x74, 0x2}, {0xd0, &(0x7f0000000a00)=0x6, 0x82}, {0x8, &(0x7f0000000a40)=0xe, 0x82}, {0x246, &(0x7f0000000a80)=0x5, 0x82}, {0x1, &(0x7f0000000ac0)=0x2, 0x2}, {0x7, &(0x7f0000000b00)=0x101, 0x2}, {0x9, &(0x7f0000000b40)=0x5, 0x2}, {0x4, &(0x7f0000000b80)=0xbe, 0x2}, {0x4, &(0x7f0000000bc0)=0x2f, 0x2}, {0x1, &(0x7f0000000c00)=0x1, 0x82}, {0xffffffffffffffff, &(0x7f0000000c40)=0x101, 0x2}, {0x9, &(0x7f0000000c80)=0x1, 0x82}, {0x4, &(0x7f0000000cc0)=0xb, 0x2}, {0x3, &(0x7f0000000d00)=0x4, 0x2}, {0x6, &(0x7f0000000d40)=0x8, 0x82}, {0x9, &(0x7f0000000d80)=0x61c, 0x82}, {0xdc12, &(0x7f0000000dc0), 0x2}, {0x6, &(0x7f0000000e00)=0x2, 0x82}, {0x3, &(0x7f0000000e40)=0x101, 0x82}, {0x3, &(0x7f0000000e80)=0x4, 0x82}, {0x6, &(0x7f0000000ec0)=0x4, 0x82}, {0xbc, &(0x7f0000000f00)=0x1, 0x82}, {0x0, &(0x7f0000000f40)=0xe1c, 0x82}, {0x3, &(0x7f0000000f80)=0x6, 0x82}, {0x9, &(0x7f0000000fc0)=0x5, 0x82}, {0x2, &(0x7f0000001000)=0x2, 0x82}, {0x8, &(0x7f0000001040)=0x1, 0x2}, {0x6, &(0x7f0000001080)=0x2, 0x82}, {0x4, &(0x7f00000010c0)=0x3, 0x82}, {0x4, &(0x7f0000001100)=0x80000000, 0x2}, {0xfff, &(0x7f0000001140)=0x38, 0x82}, {0x80000001, &(0x7f0000001180)=0x8, 0x2}, {0x7, &(0x7f00000011c0), 0x2}, {0xfffffffffffffffa, &(0x7f0000001200)=0x7fffffff, 0x2}, {0x354000000000000, &(0x7f0000001240)=0xafd, 0x2}, {0x9, &(0x7f0000001280)=0x1000, 0x2}, {0x7, &(0x7f00000012c0)=0x350, 0x82}, {0x0, &(0x7f0000001300)=0x9, 0x82}, {0x9, &(0x7f0000001340)=0x6, 0x82}, {0x8000000000000001, &(0x7f0000001380)=0x3, 0x82}, {0xffffffffffffffff, &(0x7f00000013c0)=0xb048, 0x80}, {0xfffffffffffffff8, &(0x7f0000001400)=0x3, 0x6}, {0x401, &(0x7f0000001440)=0x8000000000000001, 0x2}], 0x4b, 0x0, &(0x7f0000001bc0)={0x0, 0x3938700}, 0x1) syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00') sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x13e, &(0x7f0000000680)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x309061, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) getsockopt(r5, 0x0, 0x5, &(0x7f0000000080)=""/3, &(0x7f0000000140)=0x3) getrlimit(0x1, &(0x7f0000001c00)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) 1m56.932919128s ago: executing program 0 (id=1017): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000ea", 0x27}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x28600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0xec, 0x5a84, &(0x7f0000011bc0)="$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") sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) 1m52.012160463s ago: executing program 0 (id=1023): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xb7}]}}}], 0x30}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000480)={0x20, 0x16, 0x1e, "90566d8f811cdb531db1c9ac94a03c71e42448fa3c6607d23c045562820b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e"], 0x20}], 0x1}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) 1m36.346762401s ago: executing program 37 (id=1023): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xb7}]}}}], 0x30}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000480)={0x20, 0x16, 0x1e, "90566d8f811cdb531db1c9ac94a03c71e42448fa3c6607d23c045562820b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e"], 0x20}], 0x1}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) 20.25912511s ago: executing program 7 (id=1166): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000002c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x40400a4) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000050) dup(0xffffffffffffffff) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000008dc62288890e152a486d90f000100000001000000002000000000000000000000100000000000000000000c6bef8db3ba51b38b56d6e5635500e7403e1bfdf3c7de5bc58f048104b2015d5c059d05e1da48c48b955ee738eecbd2efe"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x9, 0x0, 0x6c, 0x7ffffff, &(0x7f0000000200)={0x1, 0xa, 0xa, 0x200}, 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x115) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf0000000000000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 17.002270441s ago: executing program 1 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x201, &(0x7f0000000a00)={&(0x7f0000000900)="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", 0xfd}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x29, 0x0, @void}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_dev$MSR(&(0x7f0000000a40), 0x9, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x20) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rpcb_getport\x00', 0xffffffffffffffff, 0x0, 0x24}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) 16.959863625s ago: executing program 7 (id=1173): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x100010, 0xffffffffffffffff, 0x595de000) socket$netlink(0x10, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000800000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3, 0x0, 0x0, r2}) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x689, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r6, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="9f69", 0x2}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) 15.462434177s ago: executing program 7 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @void}}}, 0x14}}, 0x40000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x13) clock_gettime(0x0, &(0x7f00000002c0)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 14.318736516s ago: executing program 3 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x201, &(0x7f0000000a00)={&(0x7f0000000900)="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", 0xfd}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x29, 0x0, @void}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x20) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 11.806086295s ago: executing program 3 (id=1180): openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xa0100, 0x0) 11.537412336s ago: executing program 3 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001300010026bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000540000008"], 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x240480c0) 10.687297727s ago: executing program 7 (id=1183): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@flag='dirsync'}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) close(0x3) sched_setscheduler(r0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m', 0x1}], 0x1}, 0x4000005) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/179, 0xb3}], 0x1}, 0x40010001) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x8}], 0x1, 0x2, 0x0) r4 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 10.432643749s ago: executing program 3 (id=1185): socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x24020400) r0 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r0, 0x0, &(0x7f0000002000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x35b043, 0x13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1}], 0x1, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) r6 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x4a76, 0x8000, 0x1, 0x62}, &(0x7f0000000080), &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x200, 0x2, 0x0, r1, 0xdc39, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x5}, 0x50) r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex=r5, 0x12, 0x1, 0x84, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0xffffffc0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback, r7, 0x22, 0x38, r6, @void, @void, @void, @value=r9, r8}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000004000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="064881f348d843a4fba6ec00de8b256efc4c4af128e3a9ecac9c68062def01f129c111d9fa757505865e82e333add3f728886dc51018695d0679703de95a061ac3e0ff6b70ad0c9eefedc7a573317e4e33d1fa21a295b519b4ea4c3e68fc3b406177a60d4cdfe883c5d7c7f6c3b0f303c1bf035dd9fe454cc43582009f6c", @ANYRES64=r8], 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd3010203010902"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 8.78523746s ago: executing program 2 (id=1186): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@flag='dirsync'}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) close(0x3) sched_setscheduler(r0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m', 0x1}], 0x1}, 0x4000005) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/179, 0xb3}], 0x1}, 0x40010001) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x8}], 0x1, 0x2, 0x0) r4 = socket(0x11, 0xa, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, 0x0, 0x0, 0xd, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 8.784905368s ago: executing program 7 (id=1187): socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) memfd_create(0x0, 0x0) mount$nfs(0x0, 0x0, 0x0, 0x100000, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x10}, 0x2}, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @loopback}}) 7.104410565s ago: executing program 1 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 7.067473731s ago: executing program 3 (id=1189): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 6.900818524s ago: executing program 2 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x201, &(0x7f0000000a00)={&(0x7f0000000900)="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", 0xfd}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x29, 0x0, @void}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x20) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 5.18756511s ago: executing program 1 (id=1191): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22", 0x1a}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='.\x02\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x1ff, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x28600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0xec, 0x5a84, &(0x7f0000011bc0)="$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") sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) 4.753819304s ago: executing program 2 (id=1192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3.546767675s ago: executing program 7 (id=1193): mkdir(0x0, 0xc0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tcx}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) getxattr(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974792e2f0034f3bb8af920310de62c675f594ed01c807f24dfdd087c4a50c388b9467b019b6dac8864968cbb86430ea2e3471e210b6e86fb440193583d078f76e4db3c56926cb78e317cf2d0d7d96ab3d0c1da99f05d044951acc08457df1e9002b2d92f11bb2b5603ab630d9800cb9d1fc2eee6811ec1d287ee4d995def367f3e61d30e32a274ed328ed07c16625728fa4c29e01690b149fab1f1e6be691df199b4c689b92c2b7f0000000043af8bd1d9fcaaa1a89a81f98f2e00bceca3518801ef52"], &(0x7f0000000680)=""/79, 0x4f) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000001c0)={0xd, 0x0, 0x1}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0xe, 0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x20044000) 3.355897317s ago: executing program 1 (id=1194): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000140)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x5}}, {@barrier}, {@uid}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'maciceland'}}]}, 0x3, 0x632, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 2.785337128s ago: executing program 2 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001300010026bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000005400000080013"], 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x240480c0) 1.860273001s ago: executing program 3 (id=1196): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x38, 0x0, &(0x7f0000000180)=[@increfs, @exit_looper, @increfs_done={0x40106308, 0x3}, @clear_death={0x400c630f, 0x2}, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x8000000000000, 0xca}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$alg(0x26, 0x5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000d, 0x13, r6, 0xc6f33000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite6\x00') 1.607005765s ago: executing program 1 (id=1197): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c7379735f696d6d757461626c652c646973636172642c73686f72746e616d653d77696e6e742c6572726f72733d636f6e74696e75652c636865636b3d6e6f726d616c2c00686f72746e616d653d6c6f7765722c757466383d312c00d8a854a49f1564b0567b61d830bae5d60504da3850ef9c5fd1"], 0xfd, 0x2c7, &(0x7f0000000480)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000100)={0x3, r3, 0xfff7ffff, 0x200000, 0xa, 0x1ff, 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x2, r3, 0xfff, 0x80, 0x4, 0x6, 0x1, 0x7, 0x6}) 1.550233997s ago: executing program 2 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000e80), 0x0}, 0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000140)={[], [{@flag='mand'}]}, 0x0, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x13, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @remote, @rand_addr=' \x01\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @local}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000001440)=ANY=[@ANYBLOB="0403"], 0xe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') msgget(0x1, 0x200) 427.647549ms ago: executing program 2 (id=1199): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000002c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x40400a4) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000050) dup(0xffffffffffffffff) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000008dc62288890e152a486d90f000100000001000000002000000000000000000000100000000000000000000c6bef8db3ba51b38b56d6e5635500e7403e1bfdf3c7de5bc58f048104b2015d5c059d05e1da48c48b955ee738eecbd2efe"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x9, 0x0, 0x6c, 0x7ffffff, &(0x7f0000000200)={0x1, 0xa, 0xa, 0x200}, 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x115) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf0000000000000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 0s ago: executing program 1 (id=1200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000600)=0x1d, 0x4) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) (async) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21e80e7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610916dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84b99b2ed90f71810cd92eeca69f5275cb7b7027d4babf643bd69b0a68134c022fe5dcd03834f547325ac2d1a5d16f074d898946ff71afa90180b317e645dd58a922e5d907462cd50dc23801c48c0d49ab012961d84d2eb85a3730a3f3177da048c3bc991216b11dca020afefc24ae7583b59534a0ab1fca82bf473216141db8e9864f7861d0500a920e1a8d3352d0662f586e743386e87b6c0c5ed6e4d192ef2990b44cedbb708e7a18b20dcd5573b603c4d659992647ffa8210abf4e9d232b52a8ea1dd1c045afd8e472cd1fbb775e89cca49d136a6", @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES64, @ANYRES64=r4, @ANYRESOCT=r2, @ANYBLOB="835c26f3552cc919d438a7e1ce35a7f89490a089161a96ec1f55270bc18e84fb66c909937b3d92aef5d28dfb830f8bc5a9a2da62025525cea5ee4ee9a478b67c4c35a503f7e3fd68483930978c105911755870f4e150382c8bd2abaa43932785091f0fdbd856331a06bf510ea043875bedf6aac2a06189c7ca89d77cf808b738b7c63d2139fcd86a7bda0487fb351c63a06bcb5d51fadb0df102653770457d7d791e9b03a5c802508a"], 0x1, 0x445b, &(0x7f0000008900)="$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") (async) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) (async, rerun: 32) getsockname$ax25(r4, &(0x7f0000000180)={{}, [@default, @default, @null, @null, @default, @netrom, @remote, @bcast]}, &(0x7f0000000200)=0x48) (rerun: 32) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000007c0)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) (async, rerun: 64) write(r8, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf2501000000040001801c0002800c000180080001000b0000000c0001800800010004"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) (async) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x3ff) (async, rerun: 32) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 32) kernel console output (not intermixed with test programs): or's value: 0 [ 553.397215][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.439739][ T973] usb 8-1: config 250 has no interface number 0 [ 553.450962][ T6246] bridge_slave_0: left allmulticast mode [ 553.466504][ T6246] bridge_slave_0: left promiscuous mode [ 553.469001][ T973] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 553.494921][T10481] loop0: detected capacity change from 0 to 1024 [ 553.515902][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.561120][ T973] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 553.570451][T10481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.599596][ T973] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 553.610180][ T973] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 553.621417][ T973] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 553.636121][ T973] usb 8-1: config 250 interface 228 has no altsetting 0 [ 553.671849][ T973] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 553.683273][ T973] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 553.695500][ T973] usb 8-1: Product: syz [ 553.700359][ T973] usb 8-1: SerialNumber: syz [ 554.109774][ T51] Bluetooth: hci5: command tx timeout [ 554.453791][ T973] hub 8-1:250.228: bad descriptor, ignoring hub [ 554.471618][ T973] hub 8-1:250.228: probe with driver hub failed with error -5 [ 554.526438][T10490] netlink: 277 bytes leftover after parsing attributes in process `syz.3.899'. [ 555.168903][ T6246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.183431][T10471] loop7: detected capacity change from 0 to 2048 [ 555.237480][ T6246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.278351][T10471] hpfs: Bad magic ... probably not HPFS [ 555.304660][ T6246] bond0 (unregistering): Released all slaves [ 555.314858][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.893'. [ 555.360523][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.389052][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.423841][T10486] IPv6: sit1: Disabled Multicast RS [ 555.442838][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.632175][T10412] chnl_net:caif_netlink_parms(): no params data found [ 555.696646][ T973] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 555.710524][T10502] loop1: detected capacity change from 0 to 1024 [ 555.721250][T10502] EXT4-fs: Ignoring removed nobh option [ 555.762644][T10502] EXT4-fs: Ignoring removed bh option [ 555.814584][ T9943] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.826129][ T973] usb 8-1: USB disconnect, device number 6 [ 555.859481][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.866812][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.898463][ T973] usblp0: removed [ 555.919752][T10502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.000411][T10505] loop0: detected capacity change from 0 to 128 [ 556.088869][T10511] loop7: detected capacity change from 0 to 1024 [ 556.155828][T10509] loop3: detected capacity change from 0 to 32768 [ 556.196542][ T51] Bluetooth: hci5: command tx timeout [ 556.724747][ T6246] hsr_slave_0: left promiscuous mode [ 556.802822][ T6246] hsr_slave_1: left promiscuous mode [ 556.808904][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.875546][T10511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.896251][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.924560][T10509] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 556.924593][T10509] allowing incompatible features above 0.0: (unknown version) [ 556.924609][T10509] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 556.969329][T10509] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 556.978219][T10509] bcachefs (loop3): initializing new filesystem [ 556.992618][T10509] bcachefs (loop3): going read-write [ 557.525705][T10509] bcachefs (loop3): marking superblocks [ 557.540321][T10509] bcachefs (loop3): initializing freespace [ 557.549228][T10509] bcachefs (loop3): done initializing freespace [ 557.557492][T10509] bcachefs (loop3): reading snapshots table [ 557.563405][T10509] bcachefs (loop3): reading snapshots done [ 557.642094][T10509] bcachefs (loop3): done starting filesystem [ 557.695305][ T973] hid_parser_main: 59 callbacks suppressed [ 557.695332][ T973] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 557.753296][ T973] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 557.936470][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.768255][ T5865] bcachefs (loop3): shutting down [ 558.793693][ T5865] bcachefs (loop3): going read-only [ 558.826614][ T5865] bcachefs (loop3): finished waiting for writes to stop [ 558.855708][ T5865] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 558.884982][ T5865] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 558.898872][ T7091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.908274][ T5940] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 558.945852][ T5865] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 558.983936][ T5865] bcachefs (loop3): marking filesystem clean [ 559.055805][ T6246] team0 (unregistering): Port device team_slave_1 removed [ 559.087042][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 559.116737][ T5940] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 559.129100][ T5865] bcachefs (loop3): shutdown complete [ 559.161196][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 559.184543][ T5940] usb 2-1: Product: syz [ 559.189033][ T5940] usb 2-1: Manufacturer: syz [ 559.193628][ T5940] usb 2-1: SerialNumber: syz [ 559.238054][T10537] loop7: detected capacity change from 0 to 1024 [ 559.245633][ T6246] team0 (unregistering): Port device team_slave_0 removed [ 559.249684][ T5940] usb 2-1: config 0 descriptor?? [ 559.629445][T10538] syz.7.908: attempt to access beyond end of device [ 559.629445][T10538] loop7: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 559.648681][T10538] Buffer I/O error on dev loop7, logical block 100663296, async page read [ 559.668255][T10538] hfsplus: unable to mark blocks free: error -5 [ 559.674728][T10538] hfsplus: can't free extent [ 560.518026][T10542] loop7: detected capacity change from 0 to 512 [ 560.540637][T10542] EXT4-fs: Invalid want_extra_isize 147 [ 560.816641][T10540] netlink: 'syz.7.909': attribute type 2 has an invalid length. [ 562.366116][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.372578][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.729602][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.736845][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.789243][T10562] netlink: 256 bytes leftover after parsing attributes in process `syz.7.913'. [ 563.240676][T10564] loop0: detected capacity change from 0 to 4096 [ 563.248468][ T973] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 563.406511][ T973] usb 8-1: Invalid ep0 maxpacket: 32 [ 563.522010][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.533427][T10567] loop0: detected capacity change from 0 to 128 [ 563.549946][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.557389][ T973] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 563.579611][T10412] bridge_slave_0: entered allmulticast mode [ 563.615643][T10412] bridge_slave_0: entered promiscuous mode [ 563.665674][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.680611][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.689152][T10412] bridge_slave_1: entered allmulticast mode [ 563.759969][T10412] bridge_slave_1: entered promiscuous mode [ 563.776610][ T973] usb 8-1: Invalid ep0 maxpacket: 32 [ 563.787468][ T973] usb usb8-port1: attempt power cycle [ 563.913877][ T5178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.959607][ T5178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.971428][ T5178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 564.006000][ T5178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 564.018206][ T5178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 564.126472][ T973] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 564.157234][ T973] usb 8-1: Invalid ep0 maxpacket: 32 [ 564.327879][ T973] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 564.369540][ T973] usb 8-1: Invalid ep0 maxpacket: 32 [ 564.382643][ T973] usb usb8-port1: unable to enumerate USB device [ 564.394422][ T24] usb 2-1: USB disconnect, device number 19 [ 565.109753][T10583] loop1: detected capacity change from 0 to 1024 [ 565.152197][T10578] IPv6: sit1: Disabled Multicast RS [ 565.301219][T10583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.302541][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.426834][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 565.816687][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 565.829675][T10588] loop0: detected capacity change from 0 to 128 [ 565.858016][T10588] FAT-fs (loop0): Directory bread(block 414) failed [ 565.864762][T10588] FAT-fs (loop0): Directory bread(block 415) failed [ 565.871580][T10588] FAT-fs (loop0): Directory bread(block 416) failed [ 565.878282][T10588] FAT-fs (loop0): Directory bread(block 417) failed [ 565.884904][T10588] FAT-fs (loop0): Directory bread(block 418) failed [ 565.891580][T10588] FAT-fs (loop0): Directory bread(block 419) failed [ 565.898309][T10588] FAT-fs (loop0): Directory bread(block 420) failed [ 565.904938][T10588] FAT-fs (loop0): Directory bread(block 421) failed [ 565.961231][ T43] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 566.060331][ T43] usb 4-1: config 0 has no interface number 0 [ 566.141431][ T5178] Bluetooth: hci2: command tx timeout [ 566.297888][ T43] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 566.307813][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.424323][ T43] usb 4-1: Product: syz [ 566.545148][ T43] usb 4-1: Manufacturer: syz [ 566.551904][ T43] usb 4-1: SerialNumber: syz [ 566.559685][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.593706][ T43] usb 4-1: config 0 descriptor?? [ 566.605631][T10594] loop7: detected capacity change from 0 to 128 [ 566.621718][ T43] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 566.717615][T10594] ufs: Bad value for 'onerror' [ 566.833223][T10596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.892550][T10596] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 566.901963][T10581] loop3: detected capacity change from 0 to 256 [ 566.941665][T10581] vfat: Unknown parameter '' [ 566.972269][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.995500][T10412] team0: Port device team_slave_0 added [ 567.081576][T10412] team0: Port device team_slave_1 added [ 567.325056][T10602] loop7: detected capacity change from 0 to 256 [ 567.339790][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.359442][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.406934][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.460377][T10602] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 567.792382][ T30] audit: type=1804 audit(1756413957.779:72): pid=10610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.924" name="/newroot/175/file0" dev="tmpfs" ino=1002 res=1 errno=0 [ 568.596875][ T5178] Bluetooth: hci2: command tx timeout [ 568.660135][T10608] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 568.802866][ T43] usb 4-1: qt2_attach - failed to power on unit: -71 [ 568.842828][ T43] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 568.885277][T10614] loop1: detected capacity change from 0 to 128 [ 568.889853][ T43] usb 4-1: USB disconnect, device number 20 [ 568.925699][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.017492][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.043451][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.576548][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.875791][T10623] loop1: detected capacity change from 0 to 2048 [ 570.227542][T10629] loop7: detected capacity change from 0 to 32768 [ 570.454660][T10623] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 570.666572][ T5178] Bluetooth: hci2: command tx timeout [ 570.672837][T10623] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 570.702250][T10623] UDF-fs: Scanning with blocksize 512 failed [ 570.721601][T10629] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 570.721634][T10629] allowing incompatible features above 0.0: (unknown version) [ 570.721649][T10629] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 570.766861][T10629] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 570.775062][T10629] bcachefs (loop7): initializing new filesystem [ 570.789716][T10629] bcachefs (loop7): going read-write [ 570.851333][T10623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 570.896782][T10629] bcachefs (loop7): marking superblocks [ 570.910860][T10629] bcachefs (loop7): initializing freespace [ 570.921048][T10629] bcachefs (loop7): done initializing freespace [ 570.930244][T10629] bcachefs (loop7): reading snapshots table [ 570.936211][T10629] bcachefs (loop7): reading snapshots done [ 570.993699][T10629] bcachefs (loop7): done starting filesystem [ 571.168283][T10647] netlink: 'syz.3.931': attribute type 8 has an invalid length. [ 571.468514][T10654] 9pnet_fd: p9_fd_create_unix (10654): problem connecting socket: éq‰Y’3aK: -111 [ 572.218162][ T7091] bcachefs (loop7): shutting down [ 572.282297][ T7091] bcachefs (loop7): going read-only [ 572.326777][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 572.400048][ T7091] bcachefs (loop7): finished waiting for writes to stop [ 572.477769][ T7091] bcachefs (loop7): flushing journal and stopping allocators, journal seq 4 [ 572.539409][ T43] usb 2-1: device descriptor read/64, error -71 [ 572.645894][ T7091] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 4 [ 572.726956][ T7091] bcachefs (loop7): clean shutdown complete, journal seq 5 [ 572.736823][ T7091] bcachefs (loop7): marking filesystem clean [ 572.746678][ T5178] Bluetooth: hci2: command tx timeout [ 572.786519][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 572.871581][ T7091] bcachefs (loop7): shutdown complete [ 572.947094][ T43] usb 2-1: device descriptor read/64, error -71 [ 572.951726][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 572.951994][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 572.969077][T10412] hsr_slave_0: entered promiscuous mode [ 572.986124][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 572.994464][T10412] hsr_slave_1: entered promiscuous mode [ 573.009530][T10412] debugfs: 'hsr0' already exists in 'hsr' [ 573.015404][T10412] Cannot create hsr debugfs directory [ 573.028904][T10568] chnl_net:caif_netlink_parms(): no params data found [ 573.045956][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 573.068629][ T43] usb usb2-port1: attempt power cycle [ 573.264264][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 573.336823][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 573.384466][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 573.393501][ T1089] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.454118][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 573.613932][ T1089] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.646683][ T1089] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.833109][T10688] loop1: detected capacity change from 0 to 1024 [ 573.893261][ T1089] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.904315][T10688] EXT4-fs: Ignoring removed nobh option [ 573.911115][T10688] EXT4-fs: Ignoring removed bh option [ 574.003515][T10688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.196662][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.279502][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.378942][T10568] bridge_slave_0: entered allmulticast mode [ 574.540946][T10568] bridge_slave_0: entered promiscuous mode [ 574.671185][T10697] loop0: detected capacity change from 0 to 128 [ 574.690773][T10697] FAT-fs (loop0): Directory bread(block 414) failed [ 574.697566][T10697] FAT-fs (loop0): Directory bread(block 415) failed [ 574.704184][T10697] FAT-fs (loop0): Directory bread(block 416) failed [ 574.710859][T10697] FAT-fs (loop0): Directory bread(block 417) failed [ 574.717540][T10697] FAT-fs (loop0): Directory bread(block 418) failed [ 574.724154][T10697] FAT-fs (loop0): Directory bread(block 419) failed [ 574.730803][T10697] FAT-fs (loop0): Directory bread(block 420) failed [ 574.737504][T10697] FAT-fs (loop0): Directory bread(block 421) failed [ 574.798206][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.805586][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.813294][T10568] bridge_slave_1: entered allmulticast mode [ 574.827035][T10568] bridge_slave_1: entered promiscuous mode [ 575.460744][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.682264][T10568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.743701][T10568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.800821][T10700] loop1: detected capacity change from 0 to 256 [ 575.801817][ T6246] bridge_slave_1: left allmulticast mode [ 575.813813][ T6246] bridge_slave_1: left promiscuous mode [ 575.834669][T10700] exfat: Unknown parameter '00000001000000000000100@' [ 575.840029][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.863959][ T6246] bridge_slave_0: left allmulticast mode [ 575.892033][ T6246] bridge_slave_0: left promiscuous mode [ 575.898229][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.937177][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'. [ 576.336570][ T6026] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 577.356626][ T6026] usb 2-1: Using ep0 maxpacket: 32 [ 577.407675][T10713] loop3: detected capacity change from 0 to 2048 [ 577.421027][T10713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.069035][T10720] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.944'. [ 579.221574][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.229041][T10728] loop0: detected capacity change from 0 to 512 [ 579.293466][T10728] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 579.340563][T10728] EXT4-fs (loop0): invalid journal inode [ 579.390241][T10728] EXT4-fs (loop0): can't get journal size [ 579.447477][T10728] EXT4-fs (loop0): orphan cleanup on readonly fs [ 579.497292][T10728] EXT4-fs (loop0): 1 truncate cleaned up [ 579.515966][T10728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 579.558269][T10726] loop7: detected capacity change from 0 to 32768 [ 579.690474][T10726] find_entry called with index = 0 [ 579.699403][T10726] read_mapping_page failed! [ 579.704525][T10726] ERROR: (device loop7): txCommit: [ 579.704525][T10726] [ 579.751147][T10726] ERROR: (device loop7): remounting filesystem as read-only [ 580.348747][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.421253][ T6246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.450615][ T6246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.474527][ T6246] bond0 (unregistering): Released all slaves [ 580.574637][T10568] team0: Port device team_slave_0 added [ 580.603416][T10700] IPVS: Error connecting to the multicast addr [ 580.725795][T10568] team0: Port device team_slave_1 added [ 580.805688][ T6026] usb 2-1: unable to get BOS descriptor or descriptor too short [ 580.822259][ T6026] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 580.851378][ T6026] usb 2-1: can't read configurations, error -71 [ 581.681739][ T6026] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 581.730058][T10745] loop0: detected capacity change from 0 to 2048 [ 581.737036][ T6246] hsr_slave_0: left promiscuous mode [ 581.745890][T10740] delete_channel: no stack [ 581.763104][ T6246] hsr_slave_1: left promiscuous mode [ 581.771491][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.838048][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.847282][T10745] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 581.851020][ T6026] usb 2-1: Using ep0 maxpacket: 8 [ 581.854946][T10745] UDF-fs: Scanning with blocksize 512 failed [ 581.905817][ T6026] usb 2-1: config 93 has an invalid interface number: 31 but max is 0 [ 581.944554][T10745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 581.963783][ T6026] usb 2-1: config 93 has no interface number 0 [ 582.006832][ T6026] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 582.033558][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.073401][ T6026] usb 2-1: Product: syz [ 582.092005][ T6026] usb 2-1: Manufacturer: syz [ 582.123422][ T6026] usb 2-1: SerialNumber: syz [ 582.160602][ T6026] usb 2-1: Found UVC 0.00 device syz (046d:08c3) [ 582.174207][ T6026] usb 2-1: No valid video chain found. [ 582.261881][T10752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.363648][ T43] usb 2-1: USB disconnect, device number 24 [ 583.151254][ T9081] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 583.324185][ T9081] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 583.350011][ T9081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.362922][ T9081] usb 4-1: Product: syz [ 583.370504][ T9081] usb 4-1: Manufacturer: syz [ 583.375152][ T9081] usb 4-1: SerialNumber: syz [ 583.399442][ T9081] usb 4-1: config 0 descriptor?? [ 583.410739][ T6246] team0 (unregistering): Port device team_slave_1 removed [ 583.413972][ T9081] gspca_main: sq930x-2.14.0 probing 2770:930c [ 583.466640][ T6246] team0 (unregistering): Port device team_slave_0 removed [ 583.467592][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 583.637109][ T43] usb 1-1: device descriptor read/64, error -71 [ 583.902982][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 583.988859][T10764] loop7: detected capacity change from 0 to 1024 [ 584.010851][T10764] hfsplus: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 584.077207][ T43] usb 1-1: device descriptor read/64, error -71 [ 584.090230][ T30] audit: type=1326 audit(1756413974.089:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.7.957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf7958ebe9 code=0x0 [ 584.174256][T10760] loop1: detected capacity change from 0 to 32768 [ 584.187081][ T43] usb usb1-port1: attempt power cycle [ 584.225316][T10760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.955 (10760) [ 584.316719][T10750] loop3: detected capacity change from 0 to 2048 [ 584.362449][T10760] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 584.387762][T10750] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 584.401758][T10760] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 584.438508][T10750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 584.557313][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 584.586775][ T9081] gspca_sq930x: ucbus_write failed -110 [ 584.592500][ T9081] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 584.627492][ T9081] usb 4-1: USB disconnect, device number 21 [ 584.637727][ T43] usb 1-1: device descriptor read/8, error -71 [ 584.739174][T10760] BTRFS info (device loop1): enabling ssd optimizations [ 584.763912][T10760] BTRFS info (device loop1): enabling free space tree [ 584.916449][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 584.947964][ T43] usb 1-1: device descriptor read/8, error -71 [ 585.067054][ T43] usb usb1-port1: unable to enumerate USB device [ 585.153304][ T5867] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 585.371031][T10787] vivid-003: disconnect [ 585.587970][T10568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.594984][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.791579][T10568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.039454][ T43] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 586.245964][T10786] vivid-003: reconnect [ 586.293976][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.305847][ T43] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 586.371803][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.438271][ T43] usb 8-1: config 0 descriptor?? [ 586.449799][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 586.533765][T10568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.547397][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.591460][T10568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.069715][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 587.101987][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 587.155437][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 587.294737][T10804] netlink: 44 bytes leftover after parsing attributes in process `syz.7.960'. [ 587.305430][T10804] netlink: 51 bytes leftover after parsing attributes in process `syz.7.960'. [ 587.315725][T10804] netlink: 51 bytes leftover after parsing attributes in process `syz.7.960'. [ 587.876191][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 587.936923][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 587.984552][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 588.000978][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 588.014970][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 588.076662][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 588.092565][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 588.110040][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 588.165430][T10809] loop0: detected capacity change from 0 to 128 [ 588.171991][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 588.181406][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 588.197856][T10809] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 588.207433][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 588.224615][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.272895][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.317558][T10568] hsr_slave_0: entered promiscuous mode [ 588.337688][T10568] hsr_slave_1: entered promiscuous mode [ 588.340541][ T43] pwc: Registered as video103. [ 588.350219][T10568] debugfs: 'hsr0' already exists in 'hsr' [ 588.378411][T10568] Cannot create hsr debugfs directory [ 588.420940][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input24 [ 588.429389][T10809] FAT-fs (loop0): FAT read failed (blocknr 128) [ 588.506607][ T30] audit: type=1804 audit(1756413978.499:74): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.964" name="/newroot/185/file0" dev="tmpfs" ino=1059 res=1 errno=0 [ 589.147703][T10814] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 589.170914][ T43] usb 8-1: USB disconnect, device number 11 [ 589.333131][T10822] loop7: detected capacity change from 0 to 128 [ 589.345968][T10822] FAT-fs (loop7): Directory bread(block 414) failed [ 589.352767][T10822] FAT-fs (loop7): Directory bread(block 415) failed [ 589.359527][T10822] FAT-fs (loop7): Directory bread(block 416) failed [ 589.366152][T10822] FAT-fs (loop7): Directory bread(block 417) failed [ 589.373014][T10822] FAT-fs (loop7): Directory bread(block 418) failed [ 589.379681][T10822] FAT-fs (loop7): Directory bread(block 419) failed [ 589.386600][T10822] FAT-fs (loop7): Directory bread(block 420) failed [ 589.393219][T10822] FAT-fs (loop7): Directory bread(block 421) failed [ 590.480169][ T5947] IPVS: starting estimator thread 0... [ 590.586969][T10830] IPVS: using max 26 ests per chain, 62400 per kthread [ 591.417057][ T49] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 591.594647][T10840] loop0: detected capacity change from 0 to 8 [ 591.613333][T10840] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 591.651012][ T6575] udevd[6575]: incorrect cramfs checksum on /dev/loop0 [ 591.666718][T10840] cramfs: bad root offset 12364 [ 592.004761][T10845] netlink: 40 bytes leftover after parsing attributes in process `syz.7.970'. [ 592.199544][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.207081][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.889131][T10835] loop3: detected capacity change from 0 to 32768 [ 592.896820][T10835] XFS: attr2 mount option is deprecated. [ 592.949425][T10835] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 592.956419][T10863] sctp: [Deprecated]: syz.0.973 (pid 10863) Use of int in max_burst socket option deprecated. [ 592.956419][T10863] Use struct sctp_assoc_value instead [ 593.167726][T10835] XFS (loop3): Ending clean mount [ 593.494069][T10835] XFS (loop3): Quotacheck needed: Please wait. [ 593.622133][T10835] XFS (loop3): Quotacheck: Done. [ 593.738184][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.766049][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.942947][ T5865] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 593.984022][T10869] loop0: detected capacity change from 0 to 256 [ 594.165719][T10869] FAT-fs (loop0): Directory bread(block 64) failed [ 594.178838][T10869] FAT-fs (loop0): Directory bread(block 65) failed [ 594.216975][T10869] FAT-fs (loop0): Directory bread(block 66) failed [ 594.248644][T10869] FAT-fs (loop0): Directory bread(block 67) failed [ 594.258119][T10869] FAT-fs (loop0): Directory bread(block 68) failed [ 594.264716][T10869] FAT-fs (loop0): Directory bread(block 69) failed [ 594.273293][T10869] FAT-fs (loop0): Directory bread(block 70) failed [ 594.280225][T10869] FAT-fs (loop0): Directory bread(block 71) failed [ 594.308241][T10869] FAT-fs (loop0): Directory bread(block 72) failed [ 594.354618][T10869] FAT-fs (loop0): Directory bread(block 73) failed [ 594.371840][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.725116][ T1089] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.749689][ T1089] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.791691][T10872] binder: 10871:10872 unknown command 0 [ 594.833997][T10872] binder: 10871:10872 ioctl c0306201 200000000080 returned -22 [ 594.893066][ T30] audit: type=1326 audit(1756413984.889:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.7.977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf7958ebe9 code=0x0 [ 594.956130][T10412] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 595.019844][ T1089] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.125386][T10412] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 595.252055][T10412] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 596.794429][T10899] loop7: detected capacity change from 0 to 128 [ 598.962407][T10412] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 599.871490][T10412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.706792][T10568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 600.754329][T10568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 600.986847][T10922] loop7: detected capacity change from 0 to 32768 [ 601.201269][T10568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 601.282443][T10922] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 601.282469][T10922] allowing incompatible features above 0.0: (unknown version) [ 601.282481][T10922] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 601.327497][T10922] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 601.335668][T10922] bcachefs (loop7): initializing new filesystem [ 601.348401][T10922] bcachefs (loop7): going read-write [ 601.377064][T10922] bcachefs (loop7): marking superblocks [ 601.392614][T10922] bcachefs (loop7): initializing freespace [ 601.403997][T10922] bcachefs (loop7): done initializing freespace [ 601.412495][T10922] bcachefs (loop7): reading snapshots table [ 601.418558][T10922] bcachefs (loop7): reading snapshots done [ 601.502958][T10412] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.511762][T10922] bcachefs (loop7): done starting filesystem [ 601.732329][T10568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 602.360077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.367277][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.515734][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.522940][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.755203][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 602.823155][T10957] loop1: detected capacity change from 0 to 128 [ 602.841564][T10957] FAT-fs (loop1): Directory bread(block 414) failed [ 602.848949][T10957] FAT-fs (loop1): Directory bread(block 415) failed [ 602.855558][T10957] FAT-fs (loop1): Directory bread(block 416) failed [ 602.862336][T10957] FAT-fs (loop1): Directory bread(block 417) failed [ 602.869094][T10957] FAT-fs (loop1): Directory bread(block 418) failed [ 602.875683][T10957] FAT-fs (loop1): Directory bread(block 419) failed [ 602.882356][T10957] FAT-fs (loop1): Directory bread(block 420) failed [ 602.888972][T10957] FAT-fs (loop1): Directory bread(block 421) failed [ 602.962897][ T7091] bcachefs (loop7): shutting down [ 602.972240][ T7091] bcachefs (loop7): going read-only [ 602.983273][ T7091] bcachefs (loop7): finished waiting for writes to stop [ 603.172906][ T7091] bcachefs (loop7): flushing journal and stopping allocators, journal seq 5 [ 603.552351][T10568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.592982][T10568] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.635837][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.643108][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.715648][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.722880][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.134580][ T7091] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 9 [ 604.228759][ T7091] bcachefs (loop7): clean shutdown complete, journal seq 10 [ 604.283427][ T7091] bcachefs (loop7): marking filesystem clean [ 604.437465][ T7091] bcachefs (loop7): shutdown complete [ 604.480194][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.629883][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.938525][T10994] loop1: detected capacity change from 0 to 128 [ 605.985144][T10568] veth0_vlan: entered promiscuous mode [ 606.000224][T10995] netlink: 160 bytes leftover after parsing attributes in process `syz.3.991'. [ 606.052656][T10568] veth1_vlan: entered promiscuous mode [ 606.137053][T10995] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 606.623055][T10995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'. [ 606.787224][T10568] veth0_macvtap: entered promiscuous mode [ 606.798496][T10568] veth1_macvtap: entered promiscuous mode [ 606.842212][T10568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.909797][T10568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.277390][T11003] FAULT_INJECTION: forcing a failure. [ 607.277390][T11003] name failslab, interval 1, probability 0, space 0, times 0 [ 607.290355][T11003] CPU: 0 UID: 0 PID: 11003 Comm: syz.0.992 Not tainted syzkaller #0 PREEMPT(full) [ 607.290386][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.290402][T11003] Call Trace: [ 607.290410][T11003] [ 607.290421][T11003] dump_stack_lvl+0x189/0x250 [ 607.290465][T11003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.290494][T11003] ? __pfx__printk+0x10/0x10 [ 607.290536][T11003] ? should_fail_ex+0x3c1/0x560 [ 607.290574][T11003] should_fail_ex+0x414/0x560 [ 607.290609][T11003] should_failslab+0xa8/0x100 [ 607.290646][T11003] __kmalloc_noprof+0xcb/0x4f0 [ 607.290678][T11003] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 607.290710][T11003] tomoyo_realpath_from_path+0xe3/0x5d0 [ 607.290747][T11003] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 607.290782][T11003] tomoyo_path_number_perm+0x1e8/0x5a0 [ 607.290820][T11003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 607.290857][T11003] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 607.290892][T11003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.290921][T11003] ? rcu_is_watching+0x15/0xb0 [ 607.290944][T11003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.291011][T11003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.291038][T11003] ? __rcu_read_unlock+0x84/0xe0 [ 607.291070][T11003] ? __fget_files+0x2a/0x420 [ 607.291106][T11003] ? __fget_files+0x3a0/0x420 [ 607.291140][T11003] ? __fget_files+0x2a/0x420 [ 607.291181][T11003] security_file_ioctl+0xcb/0x2d0 [ 607.291216][T11003] __se_sys_ioctl+0x47/0x170 [ 607.291249][T11003] do_syscall_64+0xfa/0x3b0 [ 607.291289][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.291312][T11003] ? asm_sysvec_call_function_single+0x1a/0x20 [ 607.291343][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.291366][T11003] RIP: 0033:0x7f97cc58ebe9 [ 607.291389][T11003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.291407][T11003] RSP: 002b:00007f97cd378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.291431][T11003] RAX: ffffffffffffffda RBX: 00007f97cc7b6090 RCX: 00007f97cc58ebe9 [ 607.291457][T11003] RDX: 0000200000000a00 RSI: 00000000c05064a7 RDI: 000000000000000a [ 607.291472][T11003] RBP: 00007f97cd378090 R08: 0000000000000000 R09: 0000000000000000 [ 607.291486][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.291501][T11003] R13: 00007f97cc7b6128 R14: 00007f97cc7b6090 R15: 00007fff804d1148 [ 607.291537][T11003] [ 607.291782][T11003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.913496][ T1100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.951393][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.017633][ T1100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.101708][ T1100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.339941][T11011] loop0: detected capacity change from 0 to 512 [ 608.369623][T11011] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 608.448468][T11011] EXT4-fs (loop0): invalid journal inode [ 608.527459][T11011] EXT4-fs (loop0): can't get journal size [ 608.588078][T11011] EXT4-fs (loop0): orphan cleanup on readonly fs [ 608.622669][T11011] EXT4-fs (loop0): 1 truncate cleaned up [ 608.704251][T11011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 608.721069][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.729562][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.754593][T10953] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 608.766278][T10953] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 608.795242][T10953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 608.816274][T10953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 608.831099][T10953] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 609.680558][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.726480][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.739539][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.089457][T11031] loop0: detected capacity change from 0 to 512 [ 610.133339][T11031] EXT4-fs: Ignoring removed nobh option [ 610.235836][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.996: corrupted inode contents [ 610.303568][T11031] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.996: mark_inode_dirty error [ 610.346224][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.996: corrupted inode contents [ 610.393025][T11031] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.996: mark_inode_dirty error [ 610.485322][T11031] Quota error (device loop0): write_blk: dquota write failed [ 610.548571][T11031] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 610.597061][T11031] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.996: Failed to acquire dquot type 0 [ 610.623023][T11039] loop2: detected capacity change from 0 to 32768 [ 610.707971][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.996: corrupted inode contents [ 610.744619][T11039] (syz.2.690,11039,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 610.752614][T11039] (syz.2.690,11039,1):ocfs2_map_slot_buffers:388 ERROR: status = -12 [ 610.760837][T11039] (syz.2.690,11039,1):ocfs2_init_slot_info:426 ERROR: status = -12 [ 610.768893][T11039] (syz.2.690,11039,1):ocfs2_initialize_super:2222 ERROR: status = -12 [ 610.779863][T11039] (syz.2.690,11039,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 610.797288][T11031] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.996: mark_inode_dirty error [ 610.849925][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.996: corrupted inode contents [ 610.873054][T11041] loop3: detected capacity change from 0 to 32768 [ 610.905196][T11031] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.996: mark_inode_dirty error [ 610.906731][ T51] Bluetooth: hci6: command tx timeout [ 610.967774][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.996: corrupted inode contents [ 610.996648][T11031] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 611.078060][T11041] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 611.092297][T11041] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 611.102632][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.996: corrupted inode contents [ 611.189251][T11031] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.996: mark_inode_dirty error [ 611.300475][T11031] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 611.310841][T11041] XFS (loop3): Ending clean mount [ 611.322890][T11041] XFS (loop3): Quotacheck needed: Please wait. [ 611.400187][T11041] XFS (loop3): Quotacheck: Done. [ 611.401328][T11031] EXT4-fs (loop0): 1 truncate cleaned up [ 612.648594][T11041] syz.3.1000 (11041): drop_caches: 2 [ 612.663882][T11031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.736950][T11031] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.997254][ T51] Bluetooth: hci6: command tx timeout [ 613.521732][ T5865] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 613.831985][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.198694][T11073] loop1: detected capacity change from 0 to 1024 [ 614.393884][ T30] audit: type=1804 audit(1756414004.389:76): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1005" name="/newroot/195/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 614.429436][ T973] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 614.507429][T11078] loop7: detected capacity change from 0 to 64 [ 614.630084][ T973] usb 3-1: config 0 interface 0 has no altsetting 0 [ 614.703254][ T973] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 614.732921][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.749439][ T973] usb 3-1: config 0 descriptor?? [ 614.926744][T11082] loop3: detected capacity change from 0 to 2048 [ 614.948789][T11082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.067330][ T51] Bluetooth: hci6: command tx timeout [ 615.901560][ T973] video4linux radio48: keene_cmd_set failed (-71) [ 615.922618][ T973] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 615.986004][ T973] usb 3-1: USB disconnect, device number 2 [ 616.170404][T11020] chnl_net:caif_netlink_parms(): no params data found [ 616.406495][T11091] loop7: detected capacity change from 0 to 40427 [ 616.529726][T11091] F2FS-fs (loop7): invalid crc value [ 616.685365][T11071] loop0: detected capacity change from 0 to 512 [ 616.782091][T11071] EXT4-fs (loop0): orphan cleanup on readonly fs [ 616.826657][T11071] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 616.852429][T11071] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 616.876241][T11098] loop1: detected capacity change from 0 to 32768 [ 616.879507][T11071] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1004: attempt to clear invalid blocks 2 len 1 [ 616.887953][T11098] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1010 (11098) [ 616.916102][T11071] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1004: invalid indirect mapped block 1819239214 (level 0) [ 616.934713][T11098] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 616.945778][T11098] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 616.953523][T11071] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1004: invalid indirect mapped block 1819239214 (level 1) [ 616.971694][T11091] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 616.985678][T11091] F2FS-fs (loop7): Start checkpoint disabled! [ 617.146696][ T51] Bluetooth: hci6: command tx timeout [ 617.276822][T11106] loop3: detected capacity change from 0 to 32768 [ 617.284253][T11091] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 617.284949][T11071] EXT4-fs (loop0): 1 truncate cleaned up [ 617.308775][T11071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 617.329525][T11106] (syz.3.1012,11106,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 617.337413][T11106] (syz.3.1012,11106,1):ocfs2_map_slot_buffers:388 ERROR: status = -12 [ 617.345589][T11106] (syz.3.1012,11106,1):ocfs2_init_slot_info:426 ERROR: status = -12 [ 617.353754][T11106] (syz.3.1012,11106,1):ocfs2_initialize_super:2222 ERROR: status = -12 [ 617.362596][T11106] (syz.3.1012,11106,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 617.365156][T11098] BTRFS info (device loop1): enabling ssd optimizations [ 617.377746][T11098] BTRFS info (device loop1): enabling free space tree [ 617.788125][T11071] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 618.206404][ T30] audit: type=1800 audit(1756414008.199:77): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1010" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 619.216895][T11091] syz.7.1008: attempt to access beyond end of device [ 619.216895][T11091] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 619.285574][ T1100] bridge_slave_1: left allmulticast mode [ 619.322752][ T1100] bridge_slave_1: left promiscuous mode [ 619.358940][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.372038][T11071] EXT4-fs: error -4 creating inode table initialization thread [ 619.394663][T11071] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.1004: Abort forced by user [ 619.405977][T11071] EXT4-fs (loop0): Remounting filesystem read-only [ 619.416654][T11071] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 619.523212][ T1100] bridge_slave_0: left allmulticast mode [ 619.563807][ T1100] bridge_slave_0: left promiscuous mode [ 619.592818][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.597849][ T5867] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 619.643094][ T13] kworker/u8:1: attempt to access beyond end of device [ 619.643094][ T13] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 619.679943][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 619.679976][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.679993][ T13] Workqueue: writeback wb_workfn (flush-7:7) [ 619.680029][ T13] Call Trace: [ 619.680039][ T13] [ 619.680049][ T13] dump_stack_lvl+0x189/0x250 [ 619.680079][ T13] ? preempt_schedule_thunk+0x16/0x30 [ 619.680121][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.680151][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 619.680184][ T13] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 619.680218][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 619.680269][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 619.680316][ T13] f2fs_write_end_io+0x886/0xb60 [ 619.680368][ T13] __submit_merged_bio+0x27a/0x6a0 [ 619.680413][ T13] __submit_merged_write_cond+0x255/0x530 [ 619.680460][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 619.680548][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 619.680584][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.680683][ T13] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 619.680715][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.680775][ T13] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 619.680801][ T13] ? rcu_is_watching+0x15/0xb0 [ 619.680826][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.680862][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.680890][ T13] ? cpufreq_update_util+0x8e/0x290 [ 619.680944][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.680978][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 619.681019][ T13] do_writepages+0x32e/0x550 [ 619.681060][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.681087][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 619.681112][ T13] ? writeback_sb_inodes+0x384/0x1010 [ 619.681157][ T13] __writeback_single_inode+0x145/0xff0 [ 619.681197][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.681224][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 619.681263][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 619.681298][ T13] ? __lock_acquire+0xab9/0xd20 [ 619.681368][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 619.681460][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.681488][ T13] ? rcu_is_watching+0x15/0xb0 [ 619.681512][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.681553][ T13] wb_writeback+0x43b/0xaf0 [ 619.681598][ T13] ? queue_io+0x3b1/0x590 [ 619.681635][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 619.681680][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.681721][ T13] wb_workfn+0x409/0xef0 [ 619.681771][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 619.681804][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.681832][ T13] ? __lock_acquire+0xab9/0xd20 [ 619.681885][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.681917][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.681950][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.681980][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 619.682004][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 619.682032][ T13] process_scheduled_works+0xae1/0x17b0 [ 619.682100][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 619.682136][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.682184][ T13] worker_thread+0x8a0/0xda0 [ 619.682251][ T13] kthread+0x711/0x8a0 [ 619.682288][ T13] ? __pfx_worker_thread+0x10/0x10 [ 619.682313][ T13] ? __pfx_kthread+0x10/0x10 [ 619.682339][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.682373][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.682404][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.682431][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.682464][ T13] ? __pfx_kthread+0x10/0x10 [ 619.682497][ T13] ret_from_fork+0x3fc/0x770 [ 619.682528][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 619.682563][ T13] ? __switch_to_asm+0x39/0x70 [ 619.682596][ T13] ? __switch_to_asm+0x33/0x70 [ 619.682626][ T13] ? __pfx_kthread+0x10/0x10 [ 619.682659][ T13] ret_from_fork_asm+0x1a/0x30 [ 619.682717][ T13] [ 619.682727][ T13] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 620.107089][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.963624][T11141] loop0: detected capacity change from 0 to 32768 [ 621.772387][T11141] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 621.772413][T11141] allowing incompatible features above 0.0: (unknown version) [ 621.772425][T11141] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 621.795054][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.823932][T11141] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 621.832181][T11141] bcachefs (loop0): initializing new filesystem [ 621.844831][T11141] bcachefs (loop0): going read-write [ 622.456544][T11141] bcachefs (loop0): marking superblocks [ 622.472997][T11141] bcachefs (loop0): initializing freespace [ 622.484539][T11141] bcachefs (loop0): done initializing freespace [ 622.495686][T11141] bcachefs (loop0): reading snapshots table [ 622.501660][T11141] bcachefs (loop0): reading snapshots done [ 622.654972][T11141] bcachefs (loop0): done starting filesystem [ 623.702221][T11168] loop3: detected capacity change from 0 to 256 [ 623.716614][T11168] exfat: Unknown parameter 'discard9Âiä' [ 624.091728][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.190342][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.303879][ T5866] bcachefs (loop0): shutting down [ 625.366544][ T5866] bcachefs (loop0): going read-only [ 625.416794][ T5866] bcachefs (loop0): finished waiting for writes to stop [ 625.471236][ T5866] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 625.594738][ T5866] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 625.626010][ T5866] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 625.634578][ T5866] bcachefs (loop0): marking filesystem clean [ 625.898908][T11184] loop3: detected capacity change from 0 to 128 [ 626.779903][ T5866] bcachefs (loop0): shutdown complete [ 626.796600][T11191] loop7: detected capacity change from 0 to 256 [ 626.804033][T11191] exfat: Unknown parameter 'discard9Âiä' [ 628.397856][T11200] loop7: detected capacity change from 0 to 2048 [ 628.409603][T11200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.683186][T11206] loop3: detected capacity change from 0 to 1024 [ 629.793484][T11206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.886977][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.357406][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.411038][ T1100] bond0 (unregistering): Released all slaves [ 630.482003][T11213] loop7: detected capacity change from 0 to 1024 [ 630.496762][T11131] IPv6: sit1: Disabled Multicast RS [ 630.618017][T11213] EXT4-fs: Ignoring removed nobh option [ 630.623793][T11213] EXT4-fs: Ignoring removed bh option [ 630.903565][T11216] loop2: detected capacity change from 0 to 32768 [ 630.996057][T11213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.428025][ T1100] hsr_slave_0: left promiscuous mode [ 631.555712][ T1100] hsr_slave_1: left promiscuous mode [ 631.562839][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.572733][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.637068][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.662002][T11216] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 631.662028][T11216] allowing incompatible features above 0.0: (unknown version) [ 631.662040][T11216] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 631.706862][T11216] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 631.715025][T11216] bcachefs (loop2): initializing new filesystem [ 631.728944][T11216] bcachefs (loop2): going read-write [ 631.790899][T11216] bcachefs (loop2): marking superblocks [ 631.804747][T11216] bcachefs (loop2): initializing freespace [ 631.814545][T11216] bcachefs (loop2): done initializing freespace [ 631.823412][T11216] bcachefs (loop2): reading snapshots table [ 631.830168][T11216] bcachefs (loop2): reading snapshots done [ 631.909863][T11216] bcachefs (loop2): done starting filesystem [ 632.627816][T11226] loop1: detected capacity change from 0 to 4096 [ 632.648060][T11226] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 632.721173][ T7091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.833606][T11226] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 632.854375][T10568] bcachefs (loop2): shutting down [ 632.866703][T10568] bcachefs (loop2): going read-only [ 632.887036][T10568] bcachefs (loop2): finished waiting for writes to stop [ 632.950748][T11237] loop7: detected capacity change from 0 to 2048 [ 632.971857][T11237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.008239][T10568] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 633.225304][T11241] loop3: detected capacity change from 0 to 512 [ 633.793557][T11241] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 634.247656][T11241] EXT4-fs (loop3): invalid journal inode [ 634.253395][T11241] EXT4-fs (loop3): can't get journal size [ 634.260984][T10568] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 634.290614][T11241] EXT4-fs (loop3): orphan cleanup on readonly fs [ 634.340168][T11241] EXT4-fs (loop3): 1 truncate cleaned up [ 634.352995][T10568] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 634.391709][T10568] bcachefs (loop2): marking filesystem clean [ 634.481559][T11241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 634.848200][ T6026] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 635.117022][T10568] bcachefs (loop2): shutdown complete [ 635.207193][ T6026] usb 1-1: Using ep0 maxpacket: 16 [ 635.215057][ T6026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 635.264564][ T6026] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.279772][ T6026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.296555][ T6026] usb 1-1: Product: syz [ 635.302585][ T6026] usb 1-1: Manufacturer: syz [ 635.310416][ T6026] usb 1-1: SerialNumber: syz [ 635.318701][ T6026] usb 1-1: config 0 descriptor?? [ 635.351712][ T6026] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 635.524612][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.580625][ T6026] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 635.863343][T11247] loop0: detected capacity change from 0 to 512 [ 635.941498][T11247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.964663][T11247] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.244390][ T6026] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 636.246686][T11263] loop7: detected capacity change from 0 to 8 [ 636.260934][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 636.470972][T11265] loop7: detected capacity change from 0 to 2048 [ 636.489137][T11265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.671021][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 636.725111][ T6026] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 636.906639][ T6026] em28xx 1-1:0.0: board has no eeprom [ 637.356013][T11269] loop1: detected capacity change from 0 to 1024 [ 637.385719][T11269] EXT4-fs: Ignoring removed nobh option [ 637.401669][T11269] EXT4-fs: Ignoring removed bh option [ 637.411876][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1046'. [ 637.526030][T11275] loop7: detected capacity change from 0 to 512 [ 637.534258][T11269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.560862][T11275] EXT4-fs: Ignoring removed mblk_io_submit option [ 637.567547][T11275] EXT4-fs: inline encryption not supported [ 637.573663][T11275] EXT4-fs: Ignoring removed mblk_io_submit option [ 637.585190][T11275] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 637.711816][T11275] EXT4-fs (loop7): 1 truncate cleaned up [ 637.786803][T11275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.947512][T11267] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 638.037845][ T6026] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 638.084912][ T6026] em28xx 1-1:0.0: dvb set to bulk mode. [ 638.139084][ T973] em28xx 1-1:0.0: Binding DVB extension [ 638.369597][ T973] em28xx 1-1:0.0: Registering input extension [ 638.390590][T11279] EXT4-fs (loop7): shut down requested (1) [ 638.465363][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.703794][T11281] loop1: detected capacity change from 0 to 512 [ 638.734388][T11281] EXT4-fs: Ignoring removed bh option [ 638.767548][T11281] EXT4-fs: Mount option(s) incompatible with ext2 [ 639.071360][T11288] loop2: detected capacity change from 0 to 128 [ 639.082276][T11288] FAT-fs (loop2): Directory bread(block 414) failed [ 639.089100][T11288] FAT-fs (loop2): Directory bread(block 415) failed [ 639.095906][T11288] FAT-fs (loop2): Directory bread(block 416) failed [ 639.103382][T11288] FAT-fs (loop2): Directory bread(block 417) failed [ 639.110621][T11288] FAT-fs (loop2): Directory bread(block 418) failed [ 639.117526][T11288] FAT-fs (loop2): Directory bread(block 419) failed [ 639.124150][T11288] FAT-fs (loop2): Directory bread(block 420) failed [ 639.130807][T11288] FAT-fs (loop2): Directory bread(block 421) failed [ 640.171906][T11020] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.198950][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.206522][T11020] bridge_slave_0: entered allmulticast mode [ 640.217793][T11020] bridge_slave_0: entered promiscuous mode [ 640.240726][T11020] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.256169][ T6026] usb 1-1: USB disconnect, device number 14 [ 640.259390][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.275408][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.281065][ T7091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.293688][T11020] bridge_slave_1: entered allmulticast mode [ 640.297910][ T6026] em28xx 1-1:0.0: Disconnecting em28xx [ 640.316514][T11020] bridge_slave_1: entered promiscuous mode [ 640.325666][ T6026] em28xx 1-1:0.0: Closing input extension [ 640.410026][ T6026] em28xx 1-1:0.0: Freeing device [ 640.595707][T11296] loop7: detected capacity change from 0 to 2048 [ 640.629492][T11296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.557541][T11020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.731035][T11020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.834435][T11320] loop3: detected capacity change from 0 to 2048 [ 644.844090][T11324] loop1: detected capacity change from 0 to 128 [ 644.847364][T11320] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.126594][ T30] audit: type=1804 audit(1756414035.009:78): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1059" name="/newroot/10/file0" dev="tmpfs" ino=72 res=1 errno=0 [ 645.560516][T11323] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 646.125363][T11020] team0: Port device team_slave_0 added [ 646.181615][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 646.207710][ T5178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 646.218626][ T5178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 646.233482][ T5178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 646.241544][ T5178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 646.252396][T11020] team0: Port device team_slave_1 added [ 646.587025][ T43] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 646.697728][T11346] loop1: detected capacity change from 0 to 128 [ 646.748796][T11346] FAT-fs (loop1): Directory bread(block 414) failed [ 646.755567][T11346] FAT-fs (loop1): Directory bread(block 415) failed [ 646.766361][T11346] FAT-fs (loop1): Directory bread(block 416) failed [ 646.773016][T11346] FAT-fs (loop1): Directory bread(block 417) failed [ 646.782669][T11346] FAT-fs (loop1): Directory bread(block 418) failed [ 646.789842][T11346] FAT-fs (loop1): Directory bread(block 419) failed [ 646.796580][T11346] FAT-fs (loop1): Directory bread(block 420) failed [ 646.803206][T11346] FAT-fs (loop1): Directory bread(block 421) failed [ 646.858323][T11344] loop2: detected capacity change from 0 to 32768 [ 646.880547][T11020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.901809][T11344] (syz.2.1063,11344,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 646.909824][T11344] (syz.2.1063,11344,1):ocfs2_map_slot_buffers:388 ERROR: status = -12 [ 646.918131][T11344] (syz.2.1063,11344,1):ocfs2_init_slot_info:426 ERROR: status = -12 [ 646.926169][T11344] (syz.2.1063,11344,1):ocfs2_initialize_super:2222 ERROR: status = -12 [ 646.935636][T11344] (syz.2.1063,11344,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 646.950762][T11020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.990495][T11020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.229684][ T43] usb 8-1: unable to get BOS descriptor or descriptor too short [ 647.464747][ T43] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 647.516521][ T43] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 647.547544][T11020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.554522][T11020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.580609][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.596865][ T43] usb 8-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 647.628131][ T43] usb 8-1: config 1 interface 0 has no altsetting 0 [ 647.638490][T11349] loop2: detected capacity change from 0 to 128 [ 647.647453][T11020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.667517][T11349] FAT-fs (loop2): Directory bread(block 414) failed [ 647.674216][T11349] FAT-fs (loop2): Directory bread(block 415) failed [ 647.678885][T11337] loop3: detected capacity change from 0 to 32768 [ 647.680947][T11349] FAT-fs (loop2): Directory bread(block 416) failed [ 647.693937][T11349] FAT-fs (loop2): Directory bread(block 417) failed [ 647.700937][T11349] FAT-fs (loop2): Directory bread(block 418) failed [ 647.707784][T11349] FAT-fs (loop2): Directory bread(block 419) failed [ 647.714458][T11349] FAT-fs (loop2): Directory bread(block 420) failed [ 647.721192][T11349] FAT-fs (loop2): Directory bread(block 421) failed [ 647.727484][T11337] XFS: attr2 mount option is deprecated. [ 647.736450][ T43] usb 8-1: string descriptor 0 read error: -22 [ 647.742819][ T43] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.763479][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.346654][T10953] Bluetooth: hci3: command tx timeout [ 648.401732][T11337] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 648.467741][ T43] usb 8-1: can't set config #1, error -71 [ 648.573621][ T43] usb 8-1: USB disconnect, device number 12 [ 648.616925][T11360] loop7: detected capacity change from 0 to 2048 [ 648.664860][T11360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.017746][T11337] XFS (loop3): Ending clean mount [ 649.104344][T11364] loop1: detected capacity change from 0 to 8 [ 649.317655][T11020] hsr_slave_0: entered promiscuous mode [ 649.325202][T11020] hsr_slave_1: entered promiscuous mode [ 649.331859][T11020] debugfs: 'hsr0' already exists in 'hsr' [ 649.338430][T11020] Cannot create hsr debugfs directory [ 649.347333][T11337] XFS (loop3): Quotacheck needed: Please wait. [ 650.111255][T11337] XFS (loop3): Quotacheck: Done. [ 650.628991][T10953] Bluetooth: hci3: command tx timeout [ 651.802658][ T5865] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 652.841019][T10953] Bluetooth: hci3: command tx timeout [ 653.327034][T11386] loop2: detected capacity change from 0 to 2048 [ 653.341798][T11386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.646887][T11397] loop1: detected capacity change from 0 to 32768 [ 654.870681][T11397] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 654.881918][T11397] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 654.921527][T10953] Bluetooth: hci3: command tx timeout [ 655.062075][T11333] chnl_net:caif_netlink_parms(): no params data found [ 655.262530][T11397] XFS (loop1): Ending clean mount [ 655.276649][T11397] XFS (loop1): Quotacheck needed: Please wait. [ 655.311521][T11397] XFS (loop1): Quotacheck: Done. [ 655.433735][T11397] syz.1.1074 (11397): drop_caches: 2 [ 655.459158][T11413] loop3: detected capacity change from 0 to 1024 [ 655.695361][T11413] EXT4-fs: Ignoring removed nobh option [ 655.724861][T11413] EXT4-fs: Ignoring removed bh option [ 655.745494][T11412] loop7: detected capacity change from 0 to 32768 [ 656.612034][T11413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.718964][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1076'. [ 656.745956][ T5867] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 656.756120][T11412] (syz.7.1075,11412,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 656.763972][T11412] (syz.7.1075,11412,1):ocfs2_map_slot_buffers:388 ERROR: status = -12 [ 656.772563][T11412] (syz.7.1075,11412,1):ocfs2_init_slot_info:426 ERROR: status = -12 [ 656.782957][T11412] (syz.7.1075,11412,1):ocfs2_initialize_super:2222 ERROR: status = -12 [ 656.791823][T11412] (syz.7.1075,11412,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 657.426273][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1078'. [ 657.503983][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1078'. [ 657.654448][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.869261][T11436] loop2: detected capacity change from 0 to 512 [ 658.259484][T11440] loop1: detected capacity change from 0 to 128 [ 658.297203][T11440] FAT-fs (loop1): Directory bread(block 414) failed [ 658.304318][T11440] FAT-fs (loop1): Directory bread(block 415) failed [ 658.311188][T11440] FAT-fs (loop1): Directory bread(block 416) failed [ 658.318280][T11440] FAT-fs (loop1): Directory bread(block 417) failed [ 658.339678][T11440] FAT-fs (loop1): Directory bread(block 418) failed [ 658.346607][T11440] FAT-fs (loop1): Directory bread(block 419) failed [ 658.353662][T11440] FAT-fs (loop1): Directory bread(block 420) failed [ 658.360519][T11440] FAT-fs (loop1): Directory bread(block 421) failed [ 659.288055][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.336493][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.353275][T11445] loop3: detected capacity change from 0 to 512 [ 659.380310][T11445] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 659.380621][T11333] bridge_slave_0: entered allmulticast mode [ 659.423531][T11445] EXT4-fs (loop3): invalid journal inode [ 659.424190][T11333] bridge_slave_0: entered promiscuous mode [ 659.445306][T11445] EXT4-fs (loop3): can't get journal size [ 659.459589][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.483208][T11445] EXT4-fs (loop3): orphan cleanup on readonly fs [ 659.495737][T11447] loop2: detected capacity change from 0 to 512 [ 659.496562][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.515228][T11333] bridge_slave_1: entered allmulticast mode [ 659.523701][T11333] bridge_slave_1: entered promiscuous mode [ 659.566602][T11445] EXT4-fs (loop3): 1 truncate cleaned up [ 659.573742][T11445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 659.672965][T11447] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 659.771516][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.787295][T11447] EXT4-fs (loop2): invalid journal inode [ 659.813716][T11447] EXT4-fs (loop2): can't get journal size [ 659.853779][T11447] EXT4-fs (loop2): orphan cleanup on readonly fs [ 659.882690][T11447] EXT4-fs (loop2): 1 truncate cleaned up [ 659.932513][T11447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 659.947870][T11451] loop1: detected capacity change from 0 to 512 [ 659.989529][T11451] ext2: Unknown parameter 'nouser_xattr' [ 659.998935][T11333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.049588][T11333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.334142][T11456] lo speed is unknown, defaulting to 1000 [ 662.341432][T11456] lo speed is unknown, defaulting to 1000 [ 662.351241][T11456] lo speed is unknown, defaulting to 1000 [ 662.366724][T11456] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 662.384234][T11456] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 662.491033][T11333] team0: Port device team_slave_0 added [ 662.528773][T11456] lo speed is unknown, defaulting to 1000 [ 662.579899][T11333] team0: Port device team_slave_1 added [ 662.680495][T10568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.738922][T11456] lo speed is unknown, defaulting to 1000 [ 662.747219][T11456] lo speed is unknown, defaulting to 1000 [ 662.756196][T11456] lo speed is unknown, defaulting to 1000 [ 662.764065][T11456] lo speed is unknown, defaulting to 1000 [ 662.771845][T11456] lo speed is unknown, defaulting to 1000 [ 662.779620][T11456] lo speed is unknown, defaulting to 1000 [ 662.924839][T11463] loop3: detected capacity change from 0 to 32768 [ 662.980037][T11333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.025786][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.052352][T11463] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 663.065539][T11463] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 663.075636][T11333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.129936][T11333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.137114][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.164160][T11333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.273375][T11478] loop1: detected capacity change from 0 to 1024 [ 663.331613][T11478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.362257][T11477] loop2: detected capacity change from 0 to 1024 [ 663.478912][T11468] loop7: detected capacity change from 0 to 40427 [ 663.513003][T11468] F2FS-fs (loop7): invalid crc value [ 663.591253][T11468] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 663.603876][T11468] F2FS-fs (loop7): Start checkpoint disabled! [ 663.604584][T11463] XFS (loop3): Ending clean mount [ 663.641266][T11463] XFS (loop3): Quotacheck needed: Please wait. [ 663.806640][T11468] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 664.227244][ T30] audit: type=1800 audit(1756414054.219:79): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1086" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 664.235988][T11020] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 664.448900][T11468] syz.7.1086: attempt to access beyond end of device [ 664.448900][T11468] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 664.464569][T11468] syz.7.1086: attempt to access beyond end of device [ 664.464569][T11468] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 664.480599][T11468] syz.7.1086: attempt to access beyond end of device [ 664.480599][T11468] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 664.495638][T11468] syz.7.1086: attempt to access beyond end of device [ 664.495638][T11468] loop7: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 664.510060][T11468] syz.7.1086: attempt to access beyond end of device [ 664.510060][T11468] loop7: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 664.525555][T11468] syz.7.1086: attempt to access beyond end of device [ 664.525555][T11468] loop7: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 664.542131][T11468] syz.7.1086: attempt to access beyond end of device [ 664.542131][T11468] loop7: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 664.556764][T11468] syz.7.1086: attempt to access beyond end of device [ 664.556764][T11468] loop7: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 664.570996][T11468] syz.7.1086: attempt to access beyond end of device [ 664.570996][T11468] loop7: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 664.586084][T11468] syz.7.1086: attempt to access beyond end of device [ 664.586084][T11468] loop7: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 664.750451][T11463] XFS (loop3): Quotacheck: Done. [ 664.794264][T11463] syz.3.1085 (11463): drop_caches: 2 [ 665.090438][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.347683][T11487] hfsplus: xattr search failed [ 666.365591][ T5865] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 666.378229][T11487] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 666.415323][T11487] hfsplus: unable to mark blocks free: error -5 [ 666.471112][T11333] hsr_slave_0: entered promiscuous mode [ 666.484725][T11494] loop1: detected capacity change from 0 to 1024 [ 666.553907][T11487] hfsplus: can't free extent [ 666.561781][ T1153] CPU: 0 UID: 0 PID: 1153 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 666.561815][ T1153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.561832][ T1153] Workqueue: writeback wb_workfn (flush-7:7) [ 666.561868][ T1153] Call Trace: [ 666.561878][ T1153] [ 666.561888][ T1153] dump_stack_lvl+0x189/0x250 [ 666.561925][ T1153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.561955][ T1153] ? __pfx_queue_work_on+0x10/0x10 [ 666.561981][ T1153] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 666.562015][ T1153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 666.562062][ T1153] f2fs_handle_critical_error+0x37c/0x540 [ 666.562107][ T1153] f2fs_write_end_io+0x886/0xb60 [ 666.562169][ T1153] __submit_merged_bio+0x27a/0x6a0 [ 666.562212][ T1153] __submit_merged_write_cond+0x255/0x530 [ 666.562254][ T1153] f2fs_write_data_pages+0x261d/0x3000 [ 666.562333][ T1153] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 666.562387][ T1153] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 666.562455][ T1153] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 666.562504][ T1153] ? trace_f2fs_writepages+0x7f/0x200 [ 666.562541][ T1153] ? f2fs_write_node_pages+0x478/0x6e0 [ 666.562580][ T1153] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 666.562621][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.562657][ T1153] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 666.562696][ T1153] do_writepages+0x32e/0x550 [ 666.562735][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.562762][ T1153] ? reacquire_held_locks+0x127/0x1d0 [ 666.562787][ T1153] ? writeback_sb_inodes+0x384/0x1010 [ 666.562829][ T1153] __writeback_single_inode+0x145/0xff0 [ 666.562861][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.562888][ T1153] ? do_raw_spin_unlock+0x122/0x240 [ 666.562924][ T1153] writeback_sb_inodes+0x6c7/0x1010 [ 666.562964][ T1153] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 666.563016][ T1153] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 666.563097][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.563124][ T1153] ? rcu_is_watching+0x15/0xb0 [ 666.563166][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.563204][ T1153] wb_writeback+0x43b/0xaf0 [ 666.563246][ T1153] ? queue_io+0x3b1/0x590 [ 666.563280][ T1153] ? __pfx_wb_writeback+0x10/0x10 [ 666.563322][ T1153] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.563360][ T1153] wb_workfn+0x409/0xef0 [ 666.563405][ T1153] ? __pfx_wb_workfn+0x10/0x10 [ 666.563436][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.563463][ T1153] ? __lock_acquire+0xab9/0xd20 [ 666.563512][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.563543][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.563574][ T1153] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.563605][ T1153] ? process_scheduled_works+0x9ef/0x17b0 [ 666.563628][ T1153] ? process_scheduled_works+0x9ef/0x17b0 [ 666.563655][ T1153] process_scheduled_works+0xae1/0x17b0 [ 666.563715][ T1153] ? __pfx_process_scheduled_works+0x10/0x10 [ 666.563749][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.563786][ T1153] worker_thread+0x8a0/0xda0 [ 666.563812][ T1153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 666.563855][ T1153] ? __kthread_parkme+0x7b/0x200 [ 666.563894][ T1153] kthread+0x711/0x8a0 [ 666.563927][ T1153] ? __pfx_worker_thread+0x10/0x10 [ 666.563950][ T1153] ? __pfx_kthread+0x10/0x10 [ 666.563976][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.564007][ T1153] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.564036][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.564063][ T1153] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.564094][ T1153] ? __pfx_kthread+0x10/0x10 [ 666.564142][ T1153] ret_from_fork+0x3fc/0x770 [ 666.564171][ T1153] ? __pfx_ret_from_fork+0x10/0x10 [ 666.564204][ T1153] ? __switch_to_asm+0x39/0x70 [ 666.564233][ T1153] ? __switch_to_asm+0x33/0x70 [ 666.564263][ T1153] ? __pfx_kthread+0x10/0x10 [ 666.564296][ T1153] ret_from_fork_asm+0x1a/0x30 [ 666.564348][ T1153] [ 666.564358][ T1153] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 666.648121][T11333] hsr_slave_1: entered promiscuous mode [ 666.955392][T11494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.755983][T11333] debugfs: 'hsr0' already exists in 'hsr' [ 667.825757][T11333] Cannot create hsr debugfs directory [ 667.887788][T11020] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 667.995179][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.192079][ T5178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 668.225040][ T5178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 668.254771][ T5178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 668.286056][ T5178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 668.307011][ T5178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.348917][T11511] loop3: detected capacity change from 0 to 1024 [ 668.381551][T11511] EXT4-fs: Ignoring removed nobh option [ 668.387359][T11511] EXT4-fs: Ignoring removed bh option [ 668.406771][T11512] loop1: detected capacity change from 0 to 512 [ 668.426102][T11512] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 668.528731][T11512] EXT4-fs (loop1): invalid journal inode [ 668.537957][T11511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.560731][T11512] EXT4-fs (loop1): can't get journal size [ 668.622919][T11512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 668.644213][T11512] EXT4-fs (loop1): 1 truncate cleaned up [ 668.647613][T11507] lo speed is unknown, defaulting to 1000 [ 669.259428][T11512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 669.301601][T11519] loop7: detected capacity change from 0 to 512 [ 669.410646][T11519] EXT4-fs (loop7): first meta block group too large: 524287 (group descriptor block count 1) [ 669.546086][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.078185][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.349725][ T5178] Bluetooth: hci5: command tx timeout [ 670.649605][T11523] loop3: detected capacity change from 0 to 128 [ 670.663167][T11523] FAT-fs (loop3): Directory bread(block 414) failed [ 670.669943][T11523] FAT-fs (loop3): Directory bread(block 415) failed [ 670.676656][T11523] FAT-fs (loop3): Directory bread(block 416) failed [ 670.683281][T11523] FAT-fs (loop3): Directory bread(block 417) failed [ 670.690003][T11523] FAT-fs (loop3): Directory bread(block 418) failed [ 670.696695][T11523] FAT-fs (loop3): Directory bread(block 419) failed [ 670.703307][T11523] FAT-fs (loop3): Directory bread(block 420) failed [ 670.710392][T11523] FAT-fs (loop3): Directory bread(block 421) failed [ 672.274740][T11543] loop7: detected capacity change from 0 to 1024 [ 672.309044][T11543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.435845][ T5178] Bluetooth: hci5: command tx timeout [ 673.247833][ T7091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.249756][T11553] loop2: detected capacity change from 0 to 1024 [ 673.355281][T11555] loop1: detected capacity change from 0 to 512 [ 673.742388][T11557] bio_check_eod: 23 callbacks suppressed [ 673.742444][T11557] syz.2.1102: attempt to access beyond end of device [ 673.742444][T11557] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 673.763089][T11557] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 673.776454][T11557] hfsplus: unable to mark blocks free: error -5 [ 673.782792][T11557] hfsplus: can't free extent [ 673.994970][T11555] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1101: casefold flag without casefold feature [ 674.237202][T11555] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1101: couldn't read orphan inode 15 (err -117) [ 674.506510][ T5178] Bluetooth: hci5: command tx timeout [ 675.035931][T11555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.777913][ T5178] Bluetooth: hci5: command tx timeout [ 676.801159][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.971519][T11577] loop1: detected capacity change from 0 to 8 [ 680.304203][T11586] loop2: detected capacity change from 0 to 32768 [ 680.379127][T11591] loop7: detected capacity change from 0 to 16 [ 680.491569][T11591] erofs (device loop7): mounted with root inode @ nid 36. [ 680.626626][T11586] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 680.694519][T11586] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 680.962482][T11596] loop1: detected capacity change from 0 to 128 [ 680.975484][T11596] FAT-fs (loop1): Directory bread(block 414) failed [ 680.982658][T11596] FAT-fs (loop1): Directory bread(block 415) failed [ 680.989997][T11596] FAT-fs (loop1): Directory bread(block 416) failed [ 680.996802][T11596] FAT-fs (loop1): Directory bread(block 417) failed [ 681.003443][T11596] FAT-fs (loop1): Directory bread(block 418) failed [ 681.010126][T11596] FAT-fs (loop1): Directory bread(block 419) failed [ 681.016848][T11596] FAT-fs (loop1): Directory bread(block 420) failed [ 681.023371][T11586] XFS (loop2): Ending clean mount [ 681.023460][T11596] FAT-fs (loop1): Directory bread(block 421) failed [ 681.031383][T11586] XFS (loop2): Quotacheck needed: Please wait. [ 681.458166][T11586] XFS (loop2): Quotacheck: Done. [ 681.494322][T11586] syz.2.1108 (11586): drop_caches: 2 [ 682.509478][T10568] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 683.412833][T11612] loop7: detected capacity change from 0 to 128 [ 683.422369][T11612] FAT-fs (loop7): Directory bread(block 414) failed [ 683.429390][T11612] FAT-fs (loop7): Directory bread(block 415) failed [ 683.436096][T11612] FAT-fs (loop7): Directory bread(block 416) failed [ 683.443138][T11612] FAT-fs (loop7): Directory bread(block 417) failed [ 683.449843][T11612] FAT-fs (loop7): Directory bread(block 418) failed [ 683.456569][T11612] FAT-fs (loop7): Directory bread(block 419) failed [ 683.463208][T11612] FAT-fs (loop7): Directory bread(block 420) failed [ 683.470300][T11612] FAT-fs (loop7): Directory bread(block 421) failed [ 683.524320][T11610] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1113'. [ 684.678404][T11622] loop1: detected capacity change from 0 to 1024 [ 684.788109][T11625] loop3: detected capacity change from 0 to 256 [ 684.803026][T11625] exfat: Unknown parameter 'discard9Âiä' [ 685.370567][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.506758][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.865820][T11507] chnl_net:caif_netlink_parms(): no params data found [ 686.890295][T11633] syz.1.1115: attempt to access beyond end of device [ 686.890295][T11633] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 686.906609][T11633] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 686.917302][T11633] hfsplus: unable to mark blocks free: error -5 [ 686.960266][T11633] hfsplus: can't free extent [ 687.241259][T11638] binder: 11637:11638 unknown command 0 [ 687.247922][T11638] binder: 11637:11638 ioctl c0306201 200000000080 returned -22 [ 687.307372][T11638] binder: BINDER_SET_CONTEXT_MGR already set [ 687.313885][T11638] binder: 11637:11638 ioctl 4018620d 200000000040 returned -16 [ 687.330164][ T6270] bridge_slave_1: left allmulticast mode [ 687.344164][ T6270] bridge_slave_1: left promiscuous mode [ 687.362888][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.408187][ T30] audit: type=1326 audit(1756414077.409:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.3.1121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f704ad8ebe9 code=0x0 [ 687.641338][T11641] loop2: detected capacity change from 0 to 32768 [ 687.660329][T10953] Bluetooth: hci2: command 0x0406 tx timeout [ 687.679734][T11641] (syz.2.1119,11641,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 687.687793][T11641] (syz.2.1119,11641,1):ocfs2_map_slot_buffers:388 ERROR: status = -12 [ 687.696026][T11641] (syz.2.1119,11641,1):ocfs2_init_slot_info:426 ERROR: status = -12 [ 687.704282][T11641] (syz.2.1119,11641,1):ocfs2_initialize_super:2222 ERROR: status = -12 [ 687.713335][T11641] (syz.2.1119,11641,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 688.476005][ T6270] bridge_slave_0: left allmulticast mode [ 688.502484][ T6270] bridge_slave_0: left promiscuous mode [ 688.534431][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.921750][T11654] loop3: detected capacity change from 0 to 32768 [ 689.985393][T11654] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 689.994623][T11654] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 690.021642][T11659] loop1: detected capacity change from 0 to 1024 [ 690.064261][T11659] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 690.096254][T11654] XFS (loop3): Ending clean mount [ 690.109559][T11654] XFS (loop3): Quotacheck needed: Please wait. [ 690.110314][ T6270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.182975][ T6270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.200328][T11654] XFS (loop3): Quotacheck: Done. [ 690.209278][T11659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.243228][T11654] syz.3.1124 (11654): drop_caches: 2 [ 690.290877][ T6270] bond0 (unregistering): Released all slaves [ 690.369026][T11659] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1125: missing EA_INODE flag [ 690.398357][T11659] EXT4-fs (loop1): Remounting filesystem read-only [ 691.311634][ T5865] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 691.456067][ T6270] hsr_slave_0: left promiscuous mode [ 691.555035][ T6270] hsr_slave_1: left promiscuous mode [ 691.743226][T11679] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 691.759582][T11679] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 691.794432][T11679] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 691.867795][T11679] netlink: 5852 bytes leftover after parsing attributes in process `syz.2.1126'. [ 691.877305][T11679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.034378][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.308038][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.435033][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.556722][T11681] loop2: detected capacity change from 0 to 1024 [ 692.887457][T11685] loop1: detected capacity change from 0 to 32768 [ 692.923976][T11681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.076799][T11685] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 693.076837][T11685] allowing incompatible features above 0.0: (unknown version) [ 693.076853][T11685] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 693.121791][T11685] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 693.130025][T11685] bcachefs (loop1): initializing new filesystem [ 693.146754][T11685] bcachefs (loop1): going read-write [ 693.681274][T11685] bcachefs (loop1): marking superblocks [ 693.696269][T11685] bcachefs (loop1): initializing freespace [ 693.706941][T11685] bcachefs (loop1): done initializing freespace [ 693.715980][T11685] bcachefs (loop1): reading snapshots table [ 693.721997][T11685] bcachefs (loop1): reading snapshots done [ 694.251909][T11685] bcachefs (loop1): done starting filesystem [ 694.668469][T11706] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1131'. [ 695.769910][T10568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.931251][ T5867] bcachefs (loop1): shutting down [ 695.955004][ T5867] bcachefs (loop1): going read-only [ 695.987821][ T5867] bcachefs (loop1): finished waiting for writes to stop [ 696.283442][T11713] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1133'. [ 696.792388][ T5867] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 697.212667][ T6270] team0 (unregistering): Port device team_slave_1 removed [ 697.738285][ T6270] team0 (unregistering): Port device team_slave_0 removed [ 697.945345][ T5867] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5 [ 697.957489][ T5867] bcachefs (loop1): clean shutdown complete, journal seq 6 [ 697.965398][ T5867] bcachefs (loop1): marking filesystem clean [ 698.915551][T11720] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1135'. [ 698.925184][T11720] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1135'. [ 698.950509][T11720] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1135'. [ 699.058841][ T5867] bcachefs (loop1): shutdown complete [ 699.123357][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.125051][T11727] loop3: detected capacity change from 0 to 2048 [ 699.146788][T11724] loop7: detected capacity change from 0 to 2048 [ 699.167723][T11724] udf: Unknown parameter '18446744073709551615' [ 699.222527][T11727] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 699.866094][T11730] loop7: detected capacity change from 0 to 512 [ 699.889698][T11730] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 699.915716][T11730] EXT4-fs (loop7): invalid journal inode [ 699.966895][T11730] EXT4-fs (loop7): can't get journal size [ 700.007427][T11730] EXT4-fs (loop7): orphan cleanup on readonly fs [ 700.026550][T11730] EXT4-fs (loop7): 1 truncate cleaned up [ 700.053192][T11730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 700.070607][T11732] loop3: detected capacity change from 0 to 4096 [ 700.085520][T11732] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 700.381385][ T7091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.474053][T11507] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.522084][T11507] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.551500][T11507] bridge_slave_0: entered allmulticast mode [ 700.588351][T11507] bridge_slave_0: entered promiscuous mode [ 700.605186][T11742] loop7: detected capacity change from 0 to 8 [ 700.988629][T11744] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1141'. [ 701.130491][T11507] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.197775][T11507] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.213190][T11507] bridge_slave_1: entered allmulticast mode [ 701.390563][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.413188][T11507] bridge_slave_1: entered promiscuous mode [ 701.740051][T11747] loop2: detected capacity change from 0 to 32768 [ 702.103083][T11507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.284098][T11507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.398634][T11747] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 702.398670][T11747] allowing incompatible features above 0.0: (unknown version) [ 702.398685][T11747] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 702.444415][T11747] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 702.452649][T11747] bcachefs (loop2): initializing new filesystem [ 702.467547][T11747] bcachefs (loop2): going read-write [ 702.495863][T11747] bcachefs (loop2): marking superblocks [ 702.510091][T11747] bcachefs (loop2): initializing freespace [ 702.520000][T11747] bcachefs (loop2): done initializing freespace [ 702.528866][T11747] bcachefs (loop2): reading snapshots table [ 702.534813][T11747] bcachefs (loop2): reading snapshots done [ 702.571387][T11756] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1143'. [ 702.590744][T11747] bcachefs (loop2): done starting filesystem [ 702.635579][T11756] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1143'. [ 702.645510][ T5178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 702.664056][ T5178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 702.678682][ T5178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 702.711554][T11756] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 702.727678][ T5178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 702.739613][ T5178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 703.463884][T11507] team0: Port device team_slave_0 added [ 703.484928][T11507] team0: Port device team_slave_1 added [ 703.602064][T10568] bcachefs (loop2): shutting down [ 703.607750][T10568] bcachefs (loop2): going read-only [ 703.614026][T10568] bcachefs (loop2): finished waiting for writes to stop [ 703.691513][T11768] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1144'. [ 704.194098][T10568] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 704.452411][T10568] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 704.470085][T11757] bch-reclaim/loo (11757) used greatest stack depth: 16096 bytes left [ 704.499741][T10568] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 704.547373][T10568] bcachefs (loop2): marking filesystem clean [ 704.829336][ T5178] Bluetooth: hci6: command tx timeout [ 705.454654][T11507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.501260][T11507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.625810][T10568] bcachefs (loop2): shutdown complete [ 705.664675][T11507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.969996][T11785] loop1: detected capacity change from 0 to 32768 [ 705.991256][T11507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.006446][T11507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.043286][T11507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.067079][T11760] lo speed is unknown, defaulting to 1000 [ 706.936143][ T5178] Bluetooth: hci6: command tx timeout [ 707.455908][T11814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.571967][T11507] hsr_slave_0: entered promiscuous mode [ 707.797348][T11507] hsr_slave_1: entered promiscuous mode [ 708.986425][ T5178] Bluetooth: hci6: command tx timeout [ 709.318512][T11785] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 709.318545][T11785] allowing incompatible features above 0.0: (unknown version) [ 709.318560][T11785] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 709.396352][T11785] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 709.414552][T11785] bcachefs (loop1): initializing new filesystem [ 710.492228][T11785] bcachefs (loop1): going read-write [ 710.656536][T11785] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 710.667867][T11785] bcachefs (loop1): flushing journal and stopping allocators, journal seq 0 [ 710.677649][T11785] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 0 [ 710.694709][T11507] debugfs: 'hsr0' already exists in 'hsr' [ 710.701592][T11815] 9pnet_fd: Insufficient options for proto=fd [ 710.725233][T11507] Cannot create hsr debugfs directory [ 710.783976][T11785] bcachefs (loop1): unclean shutdown complete, journal seq 1 [ 710.792289][T11785] bcachefs (loop1): bch2_fs_initialize(): error EINTR [ 710.799183][T11785] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 710.807456][T11785] bcachefs (loop1): shutting down [ 710.837898][T11785] bcachefs (loop1): shutdown complete [ 710.913031][T11823] binder: 11822:11823 unknown command 0 [ 710.918973][T11823] binder: 11822:11823 ioctl c0306201 200000000080 returned -22 [ 711.036391][ T30] audit: type=1326 audit(1756414101.029:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz.3.1154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f704ad8ebe9 code=0x0 [ 711.161579][T10953] Bluetooth: hci6: command tx timeout [ 712.195724][T11836] loop3: detected capacity change from 0 to 1024 [ 712.220669][T11838] loop2: detected capacity change from 0 to 128 [ 712.265653][T11836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.016105][T11848] loop7: detected capacity change from 0 to 8 [ 713.307153][T11852] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1158'. [ 713.992237][T11856] loop2: detected capacity change from 0 to 256 [ 714.000539][T11856] exfat: Unknown parameter 'discard9Âiä' [ 714.380530][T11785] bcachefs: bch2_fs_get_tree() error: EINTR [ 714.444388][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.285022][ T30] audit: type=1326 audit(1756414105.279:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f704ad8ebe9 code=0x0 [ 716.221330][T11877] loop2: detected capacity change from 0 to 8 [ 716.287458][T11877] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 716.404005][ T6575] udevd[6575]: incorrect cramfs checksum on /dev/loop2 [ 716.663484][T11879] loop1: detected capacity change from 0 to 32768 [ 716.959367][T11886] cramfs: Error -3 while decompressing! [ 716.986407][T11886] cramfs: ffffffff99bf0668(26)->ffff888035f5b000(4096) [ 717.006339][T11886] cramfs: Error -3 while decompressing! [ 717.039257][T11886] cramfs: ffffffff99bf0682(26)->ffff888035f5c000(4096) [ 717.047282][T11886] cramfs: Error -3 while decompressing! [ 717.053698][T11886] cramfs: ffffffff99bf069c(16)->ffff888035f5d000(4096) [ 717.061956][T11886] cramfs: Error -3 while decompressing! [ 717.067667][T11886] cramfs: ffffffff99bf0668(26)->ffff888035f5b000(4096) [ 717.871714][T11879] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 717.871746][T11879] allowing incompatible features above 0.0: (unknown version) [ 717.871759][T11879] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 717.916774][T11879] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 717.924970][T11879] bcachefs (loop1): initializing new filesystem [ 717.939485][T11879] bcachefs (loop1): going read-write [ 717.973409][T11882] loop7: detected capacity change from 0 to 2048 [ 718.007701][ T6575] udevd[6575]: incorrect cramfs checksum on /dev/loop2 [ 718.027676][T11882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 718.066611][T11879] bcachefs (loop1): marking superblocks [ 718.085943][T11879] bcachefs (loop1): initializing freespace [ 718.094981][T11879] bcachefs (loop1): done initializing freespace [ 718.103241][T11879] bcachefs (loop1): reading snapshots table [ 718.109277][T11879] bcachefs (loop1): reading snapshots done [ 718.198114][T11879] bcachefs (loop1): done starting filesystem [ 718.205191][T11907] loop3: detected capacity change from 0 to 128 [ 718.222077][T11907] FAT-fs (loop3): Directory bread(block 414) failed [ 718.228849][T11907] FAT-fs (loop3): Directory bread(block 415) failed [ 718.236158][T11907] FAT-fs (loop3): Directory bread(block 416) failed [ 718.243061][T11907] FAT-fs (loop3): Directory bread(block 417) failed [ 718.249767][T11907] FAT-fs (loop3): Directory bread(block 418) failed [ 718.257025][T11907] FAT-fs (loop3): Directory bread(block 419) failed [ 718.263655][T11907] FAT-fs (loop3): Directory bread(block 420) failed [ 718.270284][T11907] FAT-fs (loop3): Directory bread(block 421) failed [ 718.284892][T11909] loop2: detected capacity change from 0 to 128 [ 719.565267][T11760] chnl_net:caif_netlink_parms(): no params data found [ 719.771882][ T5867] bcachefs (loop1): shutting down [ 719.832660][ T5867] bcachefs (loop1): going read-only [ 719.844724][T11916] loop2: detected capacity change from 0 to 512 [ 719.877785][ T5867] bcachefs (loop1): finished waiting for writes to stop [ 719.954627][ T5867] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 719.961876][T11923] loop3: detected capacity change from 0 to 512 [ 720.039783][T11923] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 720.091057][T11923] EXT4-fs (loop3): invalid journal inode [ 720.112257][ T5867] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 720.123872][ T5867] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 720.135952][ T5867] bcachefs (loop1): marking filesystem clean [ 720.147499][T11923] EXT4-fs (loop3): can't get journal size [ 720.200022][T11923] EXT4-fs (loop3): orphan cleanup on readonly fs [ 720.210055][T11923] EXT4-fs (loop3): 1 truncate cleaned up [ 720.237713][T11923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 720.948592][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.008711][ T5867] bcachefs (loop1): shutdown complete [ 721.064840][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.518624][ T6268] bridge_slave_1: left allmulticast mode [ 722.875143][T11946] loop3: detected capacity change from 0 to 1024 [ 722.899497][ T6268] bridge_slave_1: left promiscuous mode [ 722.910219][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.940027][T11946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.959518][ T6268] bridge_slave_0: left allmulticast mode [ 722.990928][ T6268] bridge_slave_0: left promiscuous mode [ 723.027888][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.720436][T11955] loop2: detected capacity change from 0 to 128 [ 724.828337][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.940218][ T6268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.954320][T11962] loop2: detected capacity change from 0 to 8 [ 725.087687][ T6268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.325134][T11966] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1181'. [ 725.369145][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'. [ 725.378541][ T6268] bond0 (unregistering): Released all slaves [ 726.018693][T11971] loop7: detected capacity change from 0 to 1024 [ 726.086961][T11971] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 726.141957][ T6268] hsr_slave_0: left promiscuous mode [ 726.177294][ T6268] hsr_slave_1: left promiscuous mode [ 726.185262][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.200036][T11971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.251277][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.273731][T11976] loop2: detected capacity change from 0 to 128 [ 726.304676][T11976] FAT-fs (loop2): Directory bread(block 414) failed [ 726.311589][T11976] FAT-fs (loop2): Directory bread(block 415) failed [ 726.318374][T11976] FAT-fs (loop2): Directory bread(block 416) failed [ 726.325007][T11976] FAT-fs (loop2): Directory bread(block 417) failed [ 726.331694][T11976] FAT-fs (loop2): Directory bread(block 418) failed [ 726.338666][T11976] FAT-fs (loop2): Directory bread(block 419) failed [ 726.346007][T11976] FAT-fs (loop2): Directory bread(block 420) failed [ 726.352952][T11976] FAT-fs (loop2): Directory bread(block 421) failed [ 726.355683][T11971] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.1183: missing EA_INODE flag [ 726.389029][T11971] EXT4-fs (loop7): Remounting filesystem read-only [ 727.305579][ T7091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.486442][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 727.691607][ T43] usb 4-1: device descriptor read/64, error -71 [ 727.734522][ T6268] team0 (unregistering): Port device team_slave_1 removed [ 727.777069][ T6268] team0 (unregistering): Port device team_slave_0 removed [ 727.843578][T11993] loop1: detected capacity change from 0 to 1024 [ 727.894000][T11993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.936868][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 728.200815][ T43] usb 4-1: device descriptor read/64, error -71 [ 728.390450][ T43] usb usb4-port1: attempt power cycle [ 728.580518][T12000] loop2: detected capacity change from 0 to 1024 [ 728.609379][T12000] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 728.670617][T12000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.786406][ T8684] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 728.816718][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 728.847196][ T43] usb 4-1: device descriptor read/8, error -71 [ 728.866095][T12000] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1186: missing EA_INODE flag [ 728.897966][T12000] EXT4-fs (loop2): Remounting filesystem read-only [ 728.956979][ T8684] usb 8-1: Using ep0 maxpacket: 32 [ 729.005668][ T8684] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 729.216928][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 729.455620][ T8684] usb 8-1: config 0 has no interface number 0 [ 729.463367][ T8684] usb 8-1: config 0 interface 12 has no altsetting 0 [ 729.483020][ T8684] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 729.496806][ T43] usb 4-1: device descriptor read/8, error -71 [ 729.513434][ T8684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.519194][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.554265][ T8684] usb 8-1: Product: syz [ 729.599014][ T8684] usb 8-1: Manufacturer: syz [ 729.603667][ T8684] usb 8-1: SerialNumber: syz [ 729.636676][ T43] usb usb4-port1: unable to enumerate USB device [ 729.672980][ T8684] usb 8-1: config 0 descriptor?? [ 729.739066][T10568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.929576][T12012] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1188'. [ 730.552110][T10953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 730.565558][T10953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 730.574917][T10953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 730.596239][T12016] loop2: detected capacity change from 0 to 1024 [ 730.610936][T10953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 730.620290][T10953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 730.670650][T12016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.844373][T12025] loop1: detected capacity change from 0 to 128 [ 731.890907][ T8684] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 731.936587][ T8684] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 731.945739][T10568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.995582][ T8684] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 732.033370][T11760] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.062693][ T8684] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 732.368822][T11760] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.397363][T11760] bridge_slave_0: entered allmulticast mode [ 732.588660][ T8684] usb 8-1: USB disconnect, device number 13 [ 732.638190][T11760] bridge_slave_0: entered promiscuous mode [ 732.679761][T10953] Bluetooth: hci3: command tx timeout [ 733.079228][T11760] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.088445][T12031] loop2: detected capacity change from 0 to 1024 [ 733.108810][T11760] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.116184][T11760] bridge_slave_1: entered allmulticast mode [ 733.138011][T12031] EXT4-fs: Ignoring removed nobh option [ 733.163842][T12031] EXT4-fs: Ignoring removed bh option [ 733.215635][T11760] bridge_slave_1: entered promiscuous mode [ 733.238316][T12031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.454720][T12013] lo speed is unknown, defaulting to 1000 [ 733.770027][T12046] loop1: detected capacity change from 0 to 1024 [ 733.792845][T11760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.850807][T11760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.922194][T10568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.316451][T12050] syz.1.1194: attempt to access beyond end of device [ 734.316451][T12050] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 734.334859][T12050] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 734.358548][T12050] hfsplus: unable to mark blocks free: error -5 [ 734.366232][T12050] hfsplus: can't free extent [ 734.756603][T10953] Bluetooth: hci3: command tx timeout [ 734.816510][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 735.088556][T12058] binder: 12055:12058 unknown command 0 [ 735.094173][T12058] binder: 12055:12058 ioctl c0306201 200000000080 returned -22 [ 735.209949][T12061] loop1: detected capacity change from 0 to 128 [ 735.221415][T12061] FAT-fs (loop1): Directory bread(block 414) failed [ 735.223853][T12063] loop2: detected capacity change from 0 to 8 [ 735.228253][T12061] FAT-fs (loop1): Directory bread(block 415) failed [ 735.228290][T12061] FAT-fs (loop1): Directory bread(block 416) failed [ 735.247788][T12061] FAT-fs (loop1): Directory bread(block 417) failed [ 735.255669][T12061] FAT-fs (loop1): Directory bread(block 418) failed [ 735.262591][T12061] FAT-fs (loop1): Directory bread(block 419) failed [ 735.269467][T12061] FAT-fs (loop1): Directory bread(block 420) failed [ 735.276111][T12061] FAT-fs (loop1): Directory bread(block 421) failed [ 735.943293][T12065] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1198'. [ 735.983807][T11760] team0: Port device team_slave_0 added [ 736.023834][T11760] team0: Port device team_slave_1 added [ 736.444359][T11760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.476442][T11760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.524783][T12073] loop2: detected capacity change from 0 to 2048 [ 736.556561][T11760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.582968][T11760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.612155][T12073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 736.621226][T11760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.647594][T11760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.826694][T10953] Bluetooth: hci3: command tx timeout [ 737.498192][T11760] hsr_slave_0: entered promiscuous mode [ 737.557884][T11760] hsr_slave_1: entered promiscuous mode [ 737.586945][T12058] ------------[ cut here ]------------ [ 737.592611][T12058] kernel BUG at ./include/linux/pagemap.h:1398! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 737.614162][T11760] debugfs: 'hsr0' already exists in 'hsr' [ 737.666551][T11760] Cannot create hsr debugfs directory [ 737.717282][T12058] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 737.723760][T12058] CPU: 1 UID: 0 PID: 12058 Comm: syz.3.1196 Not tainted syzkaller #0 PREEMPT(full) [ 737.733226][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.743649][T12058] RIP: 0010:mpage_readahead+0x637/0x650 [ 737.749213][T12058] Code: c6 20 f6 99 8b e8 09 45 e1 fe 90 0f 0b e8 81 f4 78 ff 4c 89 ef 48 c7 c6 80 f6 99 8b e8 f2 44 e1 fe 90 0f 0b e8 6a f4 78 ff 90 <0f> 0b e8 62 f4 78 ff 90 0f 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 [ 737.768830][T12058] RSP: 0018:ffffc90003a07560 EFLAGS: 00010287 [ 737.774926][T12058] RAX: ffffffff8246b726 RBX: 0000000000000001 RCX: 0000000000080000 [ 737.782894][T12058] RDX: ffffc9000d186000 RSI: 000000000000035f RDI: 0000000000000360 [ 737.790862][T12058] RBP: ffffc90003a07750 R08: ffffea00019f3d07 R09: 1ffffd400033e7a0 [ 737.798830][T12058] R10: dffffc0000000000 R11: fffff9400033e7a1 R12: dffffc0000000000 [ 737.806795][T12058] R13: ffffc90003a079c8 R14: 0000000000000004 R15: ffffc90003a079e0 [ 737.814768][T12058] FS: 00007f704bc106c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 737.823802][T12058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.830380][T12058] CR2: 0000200000011000 CR3: 00000000442b8000 CR4: 0000000000350ef0 [ 737.838347][T12058] Call Trace: [ 737.841634][T12058] [ 737.844556][T12058] ? __pfx_mpage_readahead+0x10/0x10 [ 737.850107][T12058] ? lru_add+0xa2f/0xd80 [ 737.854379][T12058] ? __pfx_blkdev_get_block+0x10/0x10 [ 737.859755][T12058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.865387][T12058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.871025][T12058] ? blk_start_plug+0x6f/0x1b0 [ 737.875837][T12058] read_pages+0x17a/0x580 [ 737.880189][T12058] ? xa_load+0x60/0x210 [ 737.884343][T12058] ? __pfx_read_pages+0x10/0x10 [ 737.889199][T12058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.894887][T12058] ? xa_load+0x1ea/0x210 [ 737.899160][T12058] page_cache_ra_unbounded+0x346/0x7b0 [ 737.904669][T12058] do_sync_mmap_readahead+0x3aa/0x7a0 [ 737.910053][T12058] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 737.915958][T12058] ? count_memcg_event_mm+0x1d/0x250 [ 737.921258][T12058] ? count_memcg_event_mm+0x1d/0x250 [ 737.926561][T12058] filemap_fault+0x62c/0x1200 [ 737.931251][T12058] ? __pfx_filemap_fault+0x10/0x10 [ 737.936362][T12058] ? __pfx_filemap_map_pages+0x10/0x10 [ 737.941819][T12058] ? __handle_mm_fault+0x27b7/0x5440 [ 737.947107][T12058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.952747][T12058] __do_fault+0x138/0x390 [ 737.957090][T12058] __handle_mm_fault+0x3611/0x5440 [ 737.962204][T12058] ? __lock_acquire+0xab9/0xd20 [ 737.967076][T12058] ? __pfx___handle_mm_fault+0x10/0x10 [ 737.972715][T12058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.978539][T12058] ? __pfx_do_futex+0x10/0x10 [ 737.983228][T12058] ? lock_vma_under_rcu+0xdf/0x3d0 [ 737.988370][T12058] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 737.993920][T12058] handle_mm_fault+0x40a/0x8e0 [ 737.998688][T12058] do_user_addr_fault+0xa81/0x1390 [ 738.003811][T12058] ? rcu_is_watching+0x15/0xb0 [ 738.008571][T12058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 738.014231][T12058] ? trace_page_fault_user+0x84/0x1e0 [ 738.019624][T12058] exc_page_fault+0x76/0xf0 [ 738.024144][T12058] asm_exc_page_fault+0x26/0x30 [ 738.028988][T12058] RIP: 0033:0x7f704ad675b9 [ 738.033415][T12058] Code: 84 00 00 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 37 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 c5 f8 77 c3 0f 1f [ 738.053016][T12058] RSP: 002b:00007f704bc0f7c8 EFLAGS: 00010283 [ 738.059085][T12058] RAX: 0000000000000200 RBX: 00007f704bc0fd30 RCX: 00007f704af78120 [ 738.067048][T12058] RDX: 0000200000000200 RSI: 00007f704ae11b31 RDI: 0000200000000200 [ 738.075012][T12058] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 738.082974][T12058] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 738.090950][T12058] R13: 00007f704bc0feb0 R14: 0000200000000200 R15: 0000000000000000 [ 738.098934][T12058] [ 738.101951][T12058] Modules linked in: [ 738.106500][T12058] ---[ end trace 0000000000000000 ]--- [ 738.169628][T12058] RIP: 0010:mpage_readahead+0x637/0x650 [ 738.175259][T12058] Code: c6 20 f6 99 8b e8 09 45 e1 fe 90 0f 0b e8 81 f4 78 ff 4c 89 ef 48 c7 c6 80 f6 99 8b e8 f2 44 e1 fe 90 0f 0b e8 6a f4 78 ff 90 <0f> 0b e8 62 f4 78 ff 90 0f 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 [ 738.203951][T12058] RSP: 0018:ffffc90003a07560 EFLAGS: 00010287 [ 738.214122][T12058] RAX: ffffffff8246b726 RBX: 0000000000000001 RCX: 0000000000080000 [ 738.223011][T12058] RDX: ffffc9000d186000 RSI: 000000000000035f RDI: 0000000000000360 [ 738.308470][T12058] RBP: ffffc90003a07750 R08: ffffea00019f3d07 R09: 1ffffd400033e7a0 [ 738.323894][T12058] R10: dffffc0000000000 R11: fffff9400033e7a1 R12: dffffc0000000000 [ 738.366349][T12058] R13: ffffc90003a079c8 R14: 0000000000000004 R15: ffffc90003a079e0 [ 738.374439][T12058] FS: 00007f704bc106c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 738.404024][ T1089] bridge_slave_1: left allmulticast mode [ 738.412429][ T1089] bridge_slave_1: left promiscuous mode [ 738.498493][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.498491][T12058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.524592][ T1089] bridge_slave_0: left allmulticast mode [ 738.531033][ T1089] bridge_slave_0: left promiscuous mode [ 738.598383][T12058] CR2: 000020000018f030 CR3: 00000000442b8000 CR4: 0000000000350ef0 [ 738.598569][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.609619][T12058] Kernel panic - not syncing: Fatal exception [ 738.613734][T12058] Kernel Offset: disabled