last executing test programs: 1m34.474976706s ago: executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') read$dsp(r4, &(0x7f00000000c0)=""/4096, 0x1000) 1m25.74747454s ago: executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x4240, 0x10) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) write(r1, &(0x7f0000001080)="f6", 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7fb) open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0), 0x2, 0x2) 1m25.740925503s ago: executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x6) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x16e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x48, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) close(r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffe}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x9, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003a40)={r5, &(0x7f00000029c0)="a3588dda9540ac0bc5", &(0x7f00000039c0)=""/81}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r6, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @private}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940), &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x6, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1d, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5d2afb9e}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xe, 0x4, 0x4, 0x100, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xf52, 0xaa, &(0x7f0000000780)=""/170, 0x40f00, 0x0, '\x00', r7, 0x5, r3, 0x8, &(0x7f0000000880)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xd, 0x0, 0x1}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)=[0x1, r3, r6, r5, r2, r3, r3, r6], &(0x7f0000000c40)=[{0x4, 0x2, 0xb, 0xe}, {0x2, 0x4, 0x4, 0x8}, {0x2, 0x3, 0xc}, {0x4, 0x3, 0x8, 0xb}, {0x0, 0x4, 0xe, 0xa}, {0x4, 0x1, 0x8, 0x5}, {0x3, 0x3, 0xd, 0x7}, {0x3, 0x4, 0x8, 0x3}], 0x10, 0x4}, 0x90) 1m24.324363816s ago: executing program 2: clock_gettime(0x1, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000600)) futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e1d, 0x4e20}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e22}}]}, 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/60, 0x3c}, {&(0x7f0000000b40)=""/22, 0x16}], 0x2}, 0x8}], 0x1, 0x40000040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1c0, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) io_submit(0x0, 0x3, &(0x7f00000024c0)=[&(0x7f0000000f40)={0x0, 0x0, 0x0, 0x3, 0xfe00, r0, &(0x7f0000000340)='<', 0x1, 0x7, 0x0, 0x2}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x2, 0xfffe, r4, &(0x7f00000013c0)="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", 0x1000, 0x6}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x3, 0x8000, r1, &(0x7f0000002400)="bdecf0dd3dcc83cdf8fb6a0de7dfd8f29caac145ebcd9df2fd58ae5aab0fdac8652e9e322cb5e02c4febfccee5ca5ca302171f8072778d859b2587889b24c44e82c1e0748eece662a99616d663d593d3717f69874b35c8ccb677034e8604f4bef9392fb586ed705c6113795afd1182a41d2f2363a12ad152fb28d8", 0x7b, 0x81, 0x0, 0x1}]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000080018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffe724991d4951a9813e5e6412ce1d5addc709ab5e5d3a2500b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x2, 0x20, 0xc9b, 0x1586, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r7, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r6, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000f00)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x17, 0x15, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7ff}, @generic={0x81, 0x1, 0x5, 0x1000, 0xb1}, @call={0x85, 0x0, 0x0, 0x70}, @map_fd={0x18, 0x7, 0x1, 0x0, r8}]}, &(0x7f0000000d40)='GPL\x00', 0xffffffff, 0x1e, &(0x7f0000000d80)=""/30, 0x40f00, 0xc, '\x00', r9, 0x36, r7, 0x8, &(0x7f0000000e80)={0x10009, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r1, 0x5, 0x0, &(0x7f00000011c0)=[{0x2, 0x1, 0x2, 0x2}, {0x0, 0x5, 0x9, 0x2}, {0x5, 0x1, 0x3, 0x8}, {0x4, 0x5, 0x1, 0xa}, {0x0, 0x2, 0x0, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0x16, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @ldst={0x1, 0x3, 0x0, 0x7, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x1c, r7, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x6, 0x5}, 0x10, r11, r1, 0x3, 0x0, &(0x7f0000000580)=[{0x4, 0x3, 0x2, 0xfb68435bfb704ad2}, {0x0, 0x4, 0x3, 0xf}, {0x5, 0x1, 0xa, 0x8}], 0x10, 0x20}, 0x90) futex(&(0x7f00000005c0)=0x2, 0x100, 0x1, &(0x7f0000000780)={0x77359400}, &(0x7f00000007c0), 0x2) r12 = mq_open(&(0x7f0000000100)='\x00', 0x80, 0x100, &(0x7f0000000140)={0x7, 0x9, 0x58, 0x100}) mq_timedsend(r12, &(0x7f0000000180)="c54d1269576101b41d94493db6299686f3b62797e45e2d940fbb8540b630ef513bd6e3f5714af337876d86e141122b2de338f66a70a86875c6140c806dd62b2714099fa05750f860384422014d0982d85e00cf8b8a54ce01150bc9f6802df046", 0x60, 0x7, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) mq_timedreceive(r7, &(0x7f0000000800)=""/214, 0xd6, 0x1, &(0x7f0000000940)={r13, r14+10000000}) pselect6(0x40, &(0x7f0000000980)={0x4, 0x8000, 0x3, 0xd75, 0x101, 0x0, 0xffff, 0x1000}, &(0x7f00000009c0)={0x7, 0x2, 0x7, 0x2, 0x9514, 0x2, 0x100000001, 0x4b3}, &(0x7f0000000a00)={0x7, 0x0, 0x8000000000000000, 0x505, 0x66, 0x3, 0xffff, 0x7ff}, &(0x7f0000000a40)={0x0, 0x989680}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x2]}, 0x8}) clock_settime(0x0, &(0x7f0000000040)={0x0, 0x989680}) 1m23.648491389s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x46880) r6 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r4, r6}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f00000002c0)=0x10) 1m23.510923443s ago: executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x25, 0x1, 0x1, 0xfffffffc}, {}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="a1", 0x1, 0x4080, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x80, 0x7f, 0x49, @empty, @mcast2, 0x7881, 0x8, 0x80000001, 0x4}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 1m22.888918079s ago: executing program 2: landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2a020400) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x4bd7, &(0x7f00000000c0)={0x0, 0x5ab7, 0x0, 0x0, 0x23c, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280)) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x80045005, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m22.496183891s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@grpid}, {@usrjquota, 0x22}, {@dax}, {@errors_remount}, {@grpquota}]}, 0xfe, 0x459, &(0x7f0000000d80)="$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") io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) close(0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000080)=']\x04\x88 \xf1\xe5\xad\xa9#\xe1>a\xa2\xa2\x17\xb8\x85\xb9J%', 0x7) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.33870004s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x46880) r6 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r4, r6}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) 1m21.682810847s ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x8000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfc, 0x0, 0x2019}}}, 0x7) 1m20.533541364s ago: executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="d70900004c000900000000000f082eb4ac432ce8000000000200000008000f000000000031cf1294bf35a7f5ba77781b2cbb6826b9f9a36d5a7a4c4ee8d71dc876a8cdaf3555b3e70178505e7925598e8e58fecac50b8a408df53535dde7113120545e2bcb4a3cc904a330d1d4a66f0ae8838421d44b0efd0726dd79583af3fe6ff7550356f8b2babd50c55187d4d79e0b08f871d7bd"], 0x1c}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "28d7b07d54891881fe02c1203fe49607b9f26fdae8161583f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000140)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x9000f4) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m20.217330471s ago: executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10d442, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x10000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = syz_io_uring_setup(0x438c, &(0x7f0000000280)={0x0, 0x8da9, 0x400, 0x80003, 0xe0}, &(0x7f0000000080), &(0x7f0000000400)) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000440)=0x8) r5 = syz_io_uring_setup(0x40, &(0x7f0000000780)={0x0, 0x0, 0x2000, 0x2, 0xfffffffc, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000340), 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000003c0)=r2) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}}, 0x0) 1m6.372034968s ago: executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x9, 0xff, 0x9}, {0x83, 0x0, 0x5, 0x3}, {0x8, 0x80, 0x6, 0x3}, {0xfff9, 0x80, 0x4, 0xc573}, {0x20, 0x4, 0xcc, 0x9}, {0x1, 0x4, 0x5, 0xfffffffb}, {0xff, 0x81, 0xf9, 0x9}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8520006deb000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 1m6.13589373s ago: executing program 4: clock_gettime(0x1, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000600)) futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e1d, 0x4e20}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e22}}]}, 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/60, 0x3c}, {&(0x7f0000000b40)=""/22, 0x16}], 0x2}, 0x8}], 0x1, 0x40000040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1c0, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) io_submit(0x0, 0x3, &(0x7f00000024c0)=[&(0x7f0000000f40)={0x0, 0x0, 0x0, 0x3, 0xfe00, r0, &(0x7f0000000340)='<', 0x1, 0x7, 0x0, 0x2}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x2, 0xfffe, r4, &(0x7f00000013c0)="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", 0x1000, 0x6}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x3, 0x8000, r1, &(0x7f0000002400)="bdecf0dd3dcc83cdf8fb6a0de7dfd8f29caac145ebcd9df2fd58ae5aab0fdac8652e9e322cb5e02c4febfccee5ca5ca302171f8072778d859b2587889b24c44e82c1e0748eece662a99616d663d593d3717f69874b35c8ccb677034e8604f4bef9392fb586ed705c6113795afd1182a41d2f2363a12ad152fb28d8", 0x7b, 0x81, 0x0, 0x1}]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000080018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffe724991d4951a9813e5e6412ce1d5addc709ab5e5d3a2500b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x2, 0x20, 0xc9b, 0x1586, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r7, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r6, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000f00)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x17, 0x15, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7ff}, @generic={0x81, 0x1, 0x5, 0x1000, 0xb1}, @call={0x85, 0x0, 0x0, 0x70}, @map_fd={0x18, 0x7, 0x1, 0x0, r8}]}, &(0x7f0000000d40)='GPL\x00', 0xffffffff, 0x1e, &(0x7f0000000d80)=""/30, 0x40f00, 0xc, '\x00', r9, 0x36, r7, 0x8, &(0x7f0000000e80)={0x10009, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r1, 0x5, 0x0, &(0x7f00000011c0)=[{0x2, 0x1, 0x2, 0x2}, {0x0, 0x5, 0x9, 0x2}, {0x5, 0x1, 0x3, 0x8}, {0x4, 0x5, 0x1, 0xa}, {0x0, 0x2, 0x0, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0x16, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @ldst={0x1, 0x3, 0x0, 0x7, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x1c, r7, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x6, 0x5}, 0x10, r11, r1, 0x3, 0x0, &(0x7f0000000580)=[{0x4, 0x3, 0x2, 0xfb68435bfb704ad2}, {0x0, 0x4, 0x3, 0xf}, {0x5, 0x1, 0xa, 0x8}], 0x10, 0x20}, 0x90) futex(&(0x7f00000005c0)=0x2, 0x100, 0x1, &(0x7f0000000780)={0x77359400}, &(0x7f00000007c0), 0x2) r12 = mq_open(&(0x7f0000000100)='\x00', 0x80, 0x100, &(0x7f0000000140)={0x7, 0x9, 0x58, 0x100}) mq_timedsend(r12, &(0x7f0000000180)="c54d1269576101b41d94493db6299686f3b62797e45e2d940fbb8540b630ef513bd6e3f5714af337876d86e141122b2de338f66a70a86875c6140c806dd62b2714099fa05750f860384422014d0982d85e00cf8b8a54ce01150bc9f6802df046", 0x60, 0x7, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) mq_timedreceive(r7, &(0x7f0000000800)=""/214, 0xd6, 0x1, &(0x7f0000000940)={r13, r14+10000000}) pselect6(0x40, &(0x7f0000000980)={0x4, 0x8000, 0x3, 0xd75, 0x101, 0x0, 0xffff, 0x1000}, &(0x7f00000009c0)={0x7, 0x2, 0x7, 0x2, 0x9514, 0x2, 0x100000001, 0x4b3}, &(0x7f0000000a00)={0x7, 0x0, 0x8000000000000000, 0x505, 0x66, 0x3, 0xffff, 0x7ff}, &(0x7f0000000a40)={0x0, 0x989680}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x2]}, 0x8}) clock_settime(0x0, &(0x7f0000000040)={0x0, 0x989680}) 1m3.083005181s ago: executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x8000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfc, 0x0, 0x2019}}}, 0x7) 1m2.460277767s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @empty}, 0x1c) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_usb_connect$cdc_ecm(0x6, 0x62, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0xd2, {{0xb, 0x24, 0x6, 0x0, 0x0, "e2d91248abe2"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x0, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0xfc1c, 0x24}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1a, 0x0, 0x2d}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfd, 0x1, 0x18}}}}}]}}]}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') syz_usb_control_io(r3, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000b40)={0x0, 0x3, 0x29, @string={0x29, 0x3, "6d28bffdd3b7382fab26aaadf7d604fcb47dd143c3f931b19dc3c9f4af1805e3a74e310b03456b"}}, &(0x7f0000000c40)={0x0, 0xf, 0xa5, {0x5, 0xf, 0xa5, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xffe153132654ceac, 0x0, 0x4, 0xf801}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "af063413262353d2581d9d1615ba4047"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x6, 0x101}, @generic={0x7b, 0x10, 0xb, "c47a9edf6d91b771536d87eebdf90440d9b5a947abef9dbe6f81b1ef3c35f6c9c7a8ce8075acae2eb17d55c98cfe13d2f3a1f7312d5f41c5c4d38d62d01120eba82923421f9edf1d9c604711413415a2b0c5bf1fd1a708fee4ad62f7c79ad0a9644df04076eb2e300c0dab0862a9dae0276a2a0a870ab456"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x80, 0x40, "2118be17", "a1c45893"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x9, 0x0, 0x4, 0x4000, 0x3c3}}}, &(0x7f0000001200)={0x84, &(0x7f0000000dc0)={0x40, 0x13, 0x61, "c0287540d50e3aaf029c44021631083b183ca23695413aa95bdb777f8e0691e1a885c60ae5d7926b8734fc293fac28c7ad45d2ec69b825e8b173e1dabcfef2b2952fc7253cac31b1c220c8e758268aa1c25231c111351f34267c4c0a084ad6d1f7"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "9571"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x58}, &(0x7f0000001040)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f00000010c0)={0x40, 0x19, 0x2, "e159"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x7}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000053d000/0x1000)=nil, 0x1000, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x17) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000700)=""/247, 0x26, 0xf7, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x4) 59.458907414s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10d442, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x10000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = syz_io_uring_setup(0x438c, &(0x7f0000000280)={0x0, 0x8da9, 0x400, 0x80003, 0xe0}, &(0x7f0000000080), &(0x7f0000000400)) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000440)=0x8) r5 = syz_io_uring_setup(0x40, &(0x7f0000000780)={0x0, 0x0, 0x2000, 0x2, 0xfffffffc, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000340), 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000003c0)=r2) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}}, 0x0) 58.555416609s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$session_to_parent(0x12) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000140)=""/45, 0x0) keyctl$session_to_parent(0x12) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000003c0)={0x8, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3", 0x0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 49.605791993s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x25, 0x1, 0x1, 0xfffffffc}, {}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="a1", 0x1, 0x4080, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x80, 0x7f, 0x49, @empty, @mcast2, 0x7881, 0x8, 0x80000001, 0x4}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 48.567624266s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180049b3c072d3b2a2649a8b6cc28d0000000000fd1eaa60408daa93"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x5, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1c8}}, 0x0) 35.218919842s ago: executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@grpid}, {@usrjquota, 0x22}, {@dax}, {@errors_remount}, {@grpquota}]}, 0xfe, 0x459, &(0x7f0000000d80)="$eJzs3MtvG8UfAPDv2nH6/qW/Uh4NLQQKIuKRNOmDHrgUgcQBJCQ4FHEKSVqFuk1pgkSrCAKHcESVuCOOSPwFXCgXBJyQuMIdIUUoFwono7V3Uzex0zhx4lJ/PtImM56xZr67O/Z41usAutZA+ieJ2BsRv0ZEXy17e4WB2r+bS3Pjfy/NjSdRqbzxZ1Kt99fS3HheNX/enlqmUlmj3YW3I8bK5ckrWX549uLl4Zmr156bujh2fvL85KXR06dPHD/Se2r0ZFvi3Jf2tf/D6cOHXnnr+mvjZ6+/8+PXaX/3ZuX1cbTLQG3vNvRkuxvrsH116aSngx2hJcWISA9XqTr++6IYu5bL+uLlTzraOWBLVSqFyo7mxfMV4B6WTtSBbpS/0aeff/Ntm6Yed4XFMxGX99biv5lttZKeKGR1StlnpK0wEBFn5//5It1ii9YhAADq3TgTEc82mv8V4oG6ev/Lrg3tj4j/R8SBiLgvIg5GxP0R1boPRsRDLba/8grJ6vlPpW9Dga1TOv97Ibu2dfv8L5/9xf5ilttXjb+UnJsqTx7L9slglHak+ZE12vjupV8+a1ZWP/9Lt7T9fC6Y9eOPnhULdBNjs2Obibne4scR/T2N4k+W57xJRByKiP4NtjH19FeHm5XdOf41tGFSXvky4qna8Z+PFfHnkqbXJ0eePzV6cnhnlCePDednxWo//bzwerP2NxV/GyzeqMTuhud/Nf730lM+2Rkxc/Xaher12pnW21j47dOmn2k2ev73Jm9W073ZYx+Mzc5eGYnoTV5d/fjorefm+bx+ev4PHm08/g/ErT3xcESkJ/GRiHgkIh7N+v5YRDweEUfXiP+HF594t/X411iVb6M0/onmxz+qxz/qj3/rieKF779pPf5cevxPVFOD2SPref1bbwc3s+8AAADgv6JQ/Q58UhhaThcKQ0O17/AfjN2F8vTM7DPnpt+/NFH7rvz+KBXyla6+uvXQkWxtOM+Prsgfz9aNPy/uquaHxqfLE50OHrrcnibjP/V7sdO9A7ac+7Wge21k/Je2oB/A9vP+D93L+IfuZfxD92o0/j/qQD+A7XeH9/9d29UPYPuZ/0P3Mv6hexn/0JWa3htf2NQt/xIdSnzbu7nfalh/Igp3Scj3TKIUDYt61v1jFhtM7GhY1OlXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPb4NwAA//9c0OQF") io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) close(0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000080)=']\x04\x88 \xf1\xe5\xad\xa9#\xe1>a\xa2\xa2\x17\xb8\x85\xb9J%', 0x7) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.169827593s ago: executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) r2 = getpid() syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000100)=ANY=[@ANYBLOB='data_checksum=xxhash,spr_hash=siphash,data_checksum=xxhash,compression=zstd,\x00'], 0x1, 0x11a04, &(0x7f00000234c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000005c0)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[], 0x1, 0x553c, &(0x7f0000015680)="$eJzs3EtvG1UbB/AzTtO+vb4RYsGuI1VIiVRbdZpUsAvQiotIFXFZsALHdiy3tieKHSdkhQRLxIJvgkBixZLPwII1O8QCxA4J5DljIJRLKztx0v5+0vg/czx+5pyR1eqxIwfgibWQ/vxjEq6E8yGEuRDCpSTk+0mx5dZiPBNCuBpCKP1pS4rx3wfOhhAuhBCujIrHmknx1KfXh9dWf3jtp6++OXfm4mdffju7VQOz9mwIobsd9/e6MbNWzHvFeG3YzrO7MiwyPtG9XxxnMfeam3mFvdr4vFqeN1vx/Gx7tz/KrU6tPspWeysf3+7FC/aHrXGd/AX3ajv5caO5mWe7n+XZOojz2j+I/7Yd9AexTqOo935ePgwG44zjzf1mXM/2/TzrvUExHutmjeb+KIdFFpcL9azTyOexOcmdPtleb/d299Nhc6ffznrpaqX6XKV6q1zdyRrNQXOlXOs2bq2ki63O6LTyoFnrrrWyrNVpVupZdyldbNXr5Wo1Xbzd3GzXemm1WrlZuVFeXSr2rqcv33077TTSxVG+2O7tnm13+ulWtpPGVyyly5Wbzy+l16rpm+sb6cYbd+6sb7z17u137r6w/upLxUkPTCtdXL6xvFyu3igvV5dOwPpH/+8+5PoHk6z/o2LSj7D+ZLLbA//OGwzgkT3Q/wf9P3D0Tnv/H6bZ/49aKv3/f/e/pcn7/4n635Pa/5/i9cNE9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+s7+Y/fyXfWYjHF4vxy8XQU8VxEkIohRB+/Rtz4eyhmnNFnfl/OH/+L3P4Ogl5hdE1zhXbhRDCWrH98v+jvgsAAADw+Prig6ufxG49PizMekIcp/P5Y+nSe1Oql4QQ5he+n1K10ujh6SkVy9/fZ8L+lKrlH2D9b0rF4kduZ6ZV7aHMjePDy38M5gtKYpSOdToAAMCxmDsUx9uFAAAAcJw+nvUEmI0kjL/KDOM/4D8Xo/hq8/yh5wAAAIBTKJn1BAAAAIAjl/f/fv8PAAAAHm/x9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgN3bu5zZxIIoD8LPBwP7TotXet5W9QRkpIcccAwWkCUogLaQBaiC3lBBBhD1CcgRSJMaxgr5P8jhjR7+ZAS5vLBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSc7WeP97/e7g0Z7e/TJ7VAAAAAKdsq/W8/mPa9H+k67/SpT+pX0REGRGnavdBjFqZg5RTnfn/6t0cniLqhMMY43R8j4j/6Xj93fWnAAAAANdrs1zNmmq9aaZ9T4jP1GzalD9vMuUVEVFNXzKllYfmb6aw+vc9jLtMafUG1iRTWLPlNjx9b5RrkLZB65RWMlnUX2LdK7sZFwAA6FO7EjhThQAAAHAFbvueAP0ojs3xOeO4OaUHgt9aPQAAAOALKvqeAAAAANC5uv73/j8AAAC4bs37/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlrPN8vV7Nz9xQdzdvvL5FsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/szzsKhEAYhMHe9Z3J3P+w0qChsUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFz/7xxFFEAwN/t3V7+AMIY5MKAgkQBDbEvISElFCCLgo+AZDnnYLgQSFyQyAK5gQIh12kQlAghgVzmO6SOpTShS+HCSNSg3du9bBJDTpHZXeLfT5qdt+fVzJu9k+XnWRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEq778RLSRF3s8PMOC5fu7W3sZL1Ow/0mRtbt+ezlsWdR030zdsHn3y7vVw9OTFXOfmq/mQAAAA4HLplfR8Rd9LtpaxPZvL6Py2vyWr+H54Zx2U9/2Ddv7O3cbT40nxZ/3/7290XJhPNjOfJBl1dGw0XH06l9x8tsfWefeQVvfzO57976eZvSPL+5vO7aX4/O9/dvPluPw+P1JEtAPA4TpZ9EZQ/D2X9oMnEADg0epXCu6z/uzPN5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh93NeKqMOxEx37sXZ3b2Nlb2629s3Z4v29nr17eqY2ZDpBGxujYapjWupe2uXL32yfJoNLxcf3AiIpqbvQg+nOKaiH+/pvh4RnOr+Oeg0440Gg2S4v1pSz4HGZSfvYMfuaFvSAAAPLHSomV1/Z10eyl7rTMb8deP99f/r1XimLL+v/vR2VvVuar1/6C2FbbfwvrFzxauXL32xtrF5QvDC8NP3zw1eGtw+tyZM+cWsnu1uLAayXCx6TQBAAD4H+sXrVr/J7MP7/8fr8QxZf3/+feDL6tzddX/+7q36dd0JgAAAIdRfxI998qff3T2uaLT78cXy+vrlwfj4+T81PhYa7qP6UjRqvV/d7bprAAAAIA67G527tv/P1+JY8r9/6d/evGX6pjdiDgWcSkihidXLo3O17ecVqvjD5XzifpNrxQAAICmHCtadf8/zZ//TyaPPCQR8fqr47j8X1fT1P/d977+uTpX9fn/0/UtsZWSufH9yPu5iN5c0xkBAADwJDtatKzY/z3dXvr41+Mf9D3/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFC3vwMAAP//M7I13Q==") 35.160798061s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x9, 0x1) 33.182768464s ago: executing program 1: clock_gettime(0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2, 0x5, 0x80, 0x800, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0xb}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000b40)={@desc={0x4100, 0x0, @desc1}}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000002c0)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@utf8}, {}, {@nocompress}, {@overriderock}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@mode={'mode', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@overriderock}, {}]}, 0x1, 0x9f5, &(0x7f000001fa80)="$eJzs3c1vHOd9B/Dv8EWiaUOSbdV1BdtayZVM2ypFUrVUwYdWIlcSXb4UJAVY6MFyLaoQxNat3QK2ESAyEOQUwwES5JDcjJxyMuBLfEjgW3JLTjkECPwvGDkpJwYzuySXr0vKfLP8+RC78/ab5/nNzuw83N3ZfcI3y/zhZVPz89XtAaev/2IXMmYfuzzy5SefflTePryXA+nMK8Uvk54ktaQrydNJ9/DI1OR4m4LuJjeTfJEUSQ6mMdyUmyk+zmNL01+k+FlZ77oObLZk2pnnW22vjz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiPiuGRgYHB4kBGJ66/XmtIaqsMj0xNFpmfX71kYZ2Gz6tev4vP29abFOUtPT0LXX0/fXRp8VNJaifzTGPqmapD8vTkg0efOvLqk10dC+uvl83XcnDzxb77/gd335ybm31nRxLZ/67WJ0anJ0fHL12t10anJ2sXz58fOHvtynTtyuhYffrG9Ex9vDY8Vb80MzlV6xt+sTZ48eK5Wr3/xuT1iasj/WP1hZkX/mFoYOB87bX+f6tfmpqenDj7Wv/08LXRsbHRiatVTLm4jLlQHoj/OjpTm6lfGq/Vbt+Zmz23IqfOrDh+y6DBdltSBg21CxoaGBoaHBwaGvyw2Xv24ozzr1x85cLAQNfAClkVsUMHLfvLI+vv5u0/icMD6mi0/8lYRjOR63k9tTX/hjOSqUxmfJ3lTQvt/6mz9Q3rbW3/m618V8viY+XdyTzXnOxZp/1fJ5fd+3s37+eD3M2bmctcZvNOOffjC8209zq7nf+7mnomMprpTGY047lUzak159RyMedzPgN5I9dyPNOp5UpGM5Z6pnMj05lJvTqihjOVei5lJpOZSi19Gc6LqWUwF3Mx51JLPf25kclcz0SuZiSXqlJu5071uJ/bIMfFoMHNBA1tELSqMd9y+19f+c8J3zrbewKHr2G+2f4faB/aN7wbCQEAAADb7u9+m0NHn/jNn5Iiz1bvy18ZHasP7HVaAAAAwDaqLtd7phx0l2PPpvD6HwAAAB42RfUduyJJb443xha+CeVNAAAAAHhIVJ//P5fi+NIMr/8BAADgIdP+N/bbRhRnFn7+t3arMbzVjGhMFb1XRsfq/cOTY68O5nT1KwPVNw1WldaZFN3V1w9eyolG1InexrB3qcSyzp4yarD/1cG8lJPNDel7vhw837dG5FAj8oVG5AutkZ1ZFnmujASAh93JDdrjzbb/L+VMI+LMsarJ7zq2Rhs8oGUFgP1isY+dvzS7NFuj/W9GPLde+/+PG7z+LyOeyO3jjUsK+vNW3s5cbuVMmlccHF+r1IXeCBqXIZxp825Ab/OShd9f6MiZVe8H9Cxua2vsbIZyZs13BFrKLRZyONeI69yZfQAAu+3khu3w8va/ag7XfP9/49f/vS4pBIB9ZbEH+x0c2ettBACW00oDAAAAAAAAAAAAAAAAAAAAAAAAAADA9tvUD/j/7nQyNzeb7EJnAYsjPVvJcOORjuxSzns+0plkr2r/52x5rXIf75eHzsjykT0+MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAriqRzrfkdycEkA0nO7n5WO+feXiewXWoPtlpxP/fzXg5tdzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN92zd//70hj+GhjVro6klNJbib5973OcTvd3+sE9sx/Vfctv//fkXRnvkhXY7en6B4emZocL3d/cbBc/uUnn35U3tqXvbpXhbKAsoaVnUuUNbRMdi9f+ni1Vu/I7Lt3/+/t/6mNXK4OzMszV8ZGxq9O/ctS4FPFZ40uEFq7QVjI9zunfv3DltkHGoPis3JL17ay3itVvSOr6/3btdZep95NuDM3O1TWNFN/feb///vOey2LnsiJ5Pm+pG95Tf9Z3tap6cTKx3O54qvi+8Wh/CQ3q/1fPhrFfFHuosPV9j9y+87cbP9bb8/dWszpu8tyOpLjSW4lPZvP6Xh1PllTddR1dJe1DlRB5d3RNuVtqKXEwXUe18erQ6Z3S9tQW38bKm0e92ZG59bM6Ef/+2ROb3lPn25T45qKr4o/Ftfyh3yvpf+PjnL/n8rS83/jIqrIliOlddmyp1dHI7La8qHWBW+sLHPdZyU74Af5j/zT4v7vaDn/N/fV7pyPWmpc+3mRbP158fPDq1qUJVWLdLSlRfrVG4tnn/XWaeZ5tBG1Tp5/k5eTrmNbOqO83OaMslPP/58Wfflz7un/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2P+KpHOt+R3JqSRHkhwup2vJ/MqYew9QX0dv8SBpbpsHyfmbp1h3Q4v7uZ/3cmi3MwIAAAAAAABgZ1we+fKTTz8qb9Xn8Z35+47mklrSleRI8ePu4ZGpyfE2BXUnNxc+0u/ZWg43y7vHlqa/KKeebrPS3l4+AADfaH8NAAD//6OKb+M=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000001c0), 0xfe, 0x54c, &(0x7f0000000400)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xb, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6306}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000680)='GPL\x00', 0xe69, 0x5d, &(0x7f00000006c0)=""/93, 0x40f00, 0x1e, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0xe, 0x1, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000780), &(0x7f00000007c0)=[{0xffffffff, 0x0, 0x7, 0x2}, {0x5, 0x4, 0x8, 0x9}, {0x2, 0x3, 0x1, 0x5}, {0x2, 0x2, 0x2, 0x3}, {0x1, 0x4, 0xb, 0xc}], 0x10, 0x3}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) r8 = open(&(0x7f0000000540)='./file1\x00', 0x64842, 0x88) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r8}) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000180)=0x10fa00, 0x4) sendmsg$nl_route(r8, &(0x7f0000000bc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@RTM_GETNSID={0x1c, 0x5a, 0x494, 0x70bd27, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x54) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x15, 0x3, 0xfffffffe, 0x1000, 0x108, 0xffffffffffffffff, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000060000000000000001800000852000000500000095000000000000004d570000f0ffffff18270000", @ANYRES32=r0, @ANYBLOB="00800000ffffc9bb3beb3784", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018240000", @ANYRES32=r3, @ANYBLOB="00000000d68d000085200000010000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20539, r5, 0x5, &(0x7f0000000b00)=[0xffffffffffffffff, r6, r9, r10, r11, 0x1, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x3, 0x5, 0xe, 0xb}, {0x4, 0x3, 0xb, 0x5}, {0x5, 0x1, 0x2, 0x5}, {0x2, 0x5, 0x10, 0x2}, {0x3, 0x1, 0x8, 0xa}], 0x10, 0x1}, 0x90) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) 32.494879887s ago: executing program 1: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001bc0)={&(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@rdma_dest={0x18}], 0x18}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) link(0x0, &(0x7f0000000bc0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083008000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x10, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 32.154508283s ago: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$session_to_parent(0x12) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000140)=""/45, 0x0) keyctl$session_to_parent(0x12) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000003c0)={0x8, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3", 0x0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 31.476507476s ago: executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000010c0)="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", 0xff55}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000dc0)="ddbf2011806e6720f319cf7328576c5012720676d84a00000000e9db12cfcf678d019c76b79320582d67d9d9e571b973616e6040781ec3f1b435b3f02989f94c0f97948d7eb40fa30d34ab7b60e54947269ebf42004d943feb7c6aaf40e305797c4d8ee50225934e0000000000002b84d3910adadd7baf16836512e01c6600bf3dba330f622a890b81cfe7e3f5198eaa479f8fb43b6cb29da01738d3c731118d05cc82b7018f2fb6b312aad5a940880f1c43ecb052624e41d8cbc7a05194ce7de7c588ea428b45847c723836ced51013b9e9c15813cdc50c07b5fceb3f16ff584cb3e676a5ebf4113730733e88e1f9fa3fc220dc2ee0233d330baca3677f75dab3d312f76067a9407f9c6c6af5e281bb728297e9bf53dca225c39b187f1b9b1c8a8f47be99061f8492d61b1d9164fbc3330a033b0aec34cb8e8b14b7dec5dbd7433a3e0b7b8094989b69943a14df82f603326dc70985f2e024e35e0ed3440d72a190623829558df3b4c69f80", 0x16c}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) 31.178742727s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x8000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfc, 0x0, 0x2019}}}, 0x7) 31.145116929s ago: executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x180003, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x0, 0x0, 0x8, 0x1, 0x0, 0x1}}]}}]}, 0x154}}, 0x0) rmdir(0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 31.107760223s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x25, 0x1, 0x1, 0xfffffffc}, {}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="a1", 0x1, 0x4080, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x80, 0x7f, 0x49, @empty, @mcast2, 0x7881, 0x8, 0x80000001, 0x4}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 30.214502696s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100000000000007b0ae4ac4564000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="7a00330080000000ffffffffffff08021100000050505050505000"/37], 0x98}}, 0x0) 30.033425042s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="7a00330080000000ffffffffffff080211"], 0x98}}, 0x0) 29.383828565s ago: executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(r0, &(0x7f0000000000)='oom_score\x00') syncfs(r1) prlimit64(r0, 0xe, &(0x7f0000000140)={0x0, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x4000) shmat(r4, &(0x7f0000fee000/0x4000)=nil, 0x6000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x0, 0x7fe2}, 0x48) 18.543175084s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x9, 0xff, 0x9}, {0x83, 0x0, 0x5, 0x3}, {0x8, 0x80, 0x6, 0x3}, {0xfff9, 0x80, 0x4, 0xc573}, {0x20, 0x4, 0xcc, 0x9}, {0x1, 0x4, 0x5, 0xfffffffb}, {0xff, 0x81, 0xf9, 0x9}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8520006deb000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 182.701828ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000f40)={[{@noload}, {@mblk_io_submit}, {@lazytime}, {@nogrpid}, {@block_validity}, {@user_xattr}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xfcb8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 0s ago: executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000d00)={'netdevsim0\x00', 0x0}) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000004, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], 0x1, 0x167, &(0x7f0000000200)="$eJzs28tO6lAUxvGv5c45nIOiE+OAxIkTucYLAxN9FAKVoEWJOIGYGB/FF/JJNNEXEAOBGgqJt8BW+v+N9teVwtqEDWtSAQisrLKyZCkyCJvx9E3GMt0SgAXpS3rpAwim0JPpDgCY8XgstSU9PF/XFIpMzQeD+tG4bken67fSRnhUt2KK++eLu8RoNagnZt6fHL++lZxZ394av/8f/VVK//Rfaa1odVSve/evf2MSAoLHUs6fJy7YOmm6TsHLkWEuejk6zCVfLns5Nsy52oVbn9cWAHyR/c75D/nOf9h3/gH8Xp1u76zqus4li6Av7I9+JeyU6Va7Uf2ET2ypF4Z/mADMXf6q1c53ur2dZqvacBrOeemgVNkr7xb3K/eHklPIT87/AJbH25/+5PVTUw0BAAAAAAAAAAAAAIBPy2jNdAsAAAAAFmQRjxOZ3iMAAAAAAAAAAAAAAAAAAACwLF4DAAD//6xeHjM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48801, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000070000001e000000c30002000000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x118, &(0x7f0000000140)=""/250}, 0x23) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) kernel console output (not intermixed with test programs): ommended to keep mac addresses unique to avoid problems! [ 88.100167][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.123655][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.171069][ T5230] loop4: detected capacity change from 0 to 2048 [ 88.203373][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.224409][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.246519][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.263428][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.275337][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.285664][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.297401][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.309830][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.374850][ T5175] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.398317][ T5113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.411116][ T5113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.422458][ T5113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.434287][ T5113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.463021][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.481649][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.502188][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.512989][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.531779][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.551277][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.561570][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.579082][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.591536][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.631226][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.648291][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.712925][ T5114] veth0_macvtap: entered promiscuous mode [ 88.737187][ T5121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.763661][ T5121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.772415][ T5121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.793133][ T5121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.912078][ T5114] veth1_macvtap: entered promiscuous mode [ 88.943315][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.966991][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.046305][ T5232] loop2: detected capacity change from 0 to 32768 [ 89.125665][ T5232] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.183370][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.223316][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.276109][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.309714][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.330202][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.353087][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.375734][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.406860][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.441123][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.465891][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.477256][ T5232] XFS (loop2): Ending clean mount [ 89.493376][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.523224][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.555209][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.652324][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.699151][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.733689][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.769796][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.819845][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.858595][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.891447][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.915410][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.932808][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.951014][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.969950][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.985743][ T5128] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.082438][ T5244] loop3: detected capacity change from 0 to 32768 [ 90.097677][ T5244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5244) [ 90.125702][ T5114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.142983][ T5244] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.155029][ T5114] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.163263][ T5244] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 90.193203][ T5114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.202021][ T5114] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.202073][ T5244] BTRFS info (device loop3): using free-space-tree [ 90.258684][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.279946][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.290434][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.325060][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.691738][ T2478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.749626][ T2478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.205021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 91.307551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 91.333898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.409623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.417673][ T5262] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 91.493655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.513729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.993268][ T5262] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 92.004705][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.083179][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.112656][ T5262] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 92.213862][ T5269] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 92.481434][ T5279] Zero length message leads to an empty skb [ 92.932322][ T2455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.031267][ T2455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.428225][ T5273] process 'syz-executor.2' launched './file1' with NULL argv: empty string added [ 93.643732][ T29] audit: type=1804 audit(1718922605.248:2): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir384280137/syzkaller.eAsx9w/3/bus" dev="sda1" ino=1968 res=1 errno=0 [ 93.663431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.700649][ T5290] overlayfs: missing 'workdir' [ 93.711514][ T5283] loop2: detected capacity change from 0 to 128 [ 93.790456][ T29] audit: type=1804 audit(1718922605.258:3): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir384280137/syzkaller.eAsx9w/3/bus" dev="sda1" ino=1968 res=1 errno=0 [ 93.803359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.913367][ T29] audit: type=1804 audit(1718922605.278:4): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir384280137/syzkaller.eAsx9w/3/bus" dev="sda1" ino=1968 res=1 errno=0 [ 93.929639][ T5289] loop0: detected capacity change from 0 to 4096 [ 93.938812][ T29] audit: type=1804 audit(1718922605.278:5): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir384280137/syzkaller.eAsx9w/3/bus" dev="sda1" ino=1968 res=1 errno=0 [ 93.971447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.036252][ T29] audit: type=1326 audit(1718922605.728:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x0 [ 95.157022][ T5299] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.181786][ T29] audit: type=1800 audit(1718922606.808:7): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048599 res=0 errno=0 [ 95.486394][ T5304] loop4: detected capacity change from 0 to 1024 [ 100.347443][ T5304] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 100.624532][ T29] audit: type=1800 audit(1718922612.318:8): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 102.145395][ T5334] loop2: detected capacity change from 0 to 512 [ 102.229185][ T5335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.375203][ T5334] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 4: comm syz-executor.2: lblock 0 mapped to illegal pblock 4 (length 1) [ 102.486412][ T5334] EXT4-fs (loop2): Remounting filesystem read-only [ 102.929675][ T5334] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 103.053369][ T5334] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 103.196575][ T5334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.229221][ T5328] sctp: failed to load transform for md5: -2 [ 103.418975][ T5125] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.618730][ T5128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.969346][ T29] audit: type=1326 audit(1718922615.658:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff090c7cf29 code=0x0 [ 104.334422][ T5363] loop0: detected capacity change from 0 to 128 [ 113.845011][ T29] audit: type=1800 audit(1718922617.008:10): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048602 res=0 errno=0 [ 113.926225][ T5369] tty tty1: ldisc open failed (-12), clearing slot 0 [ 114.425121][ T5378] loop2: detected capacity change from 0 to 1024 [ 115.044823][ T5378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0102] [ 115.081861][ T5378] System zones: 0-1, 3-12 [ 115.162331][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.303487][ T5378] EXT4-fs error (device loop2): __ext4_remount:6503: comm syz-executor.2: Abort forced by user [ 115.460125][ T5378] EXT4-fs (loop2): Remounting filesystem read-only [ 115.638787][ T5128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.213427][ T29] audit: type=1326 audit(1718922632.868:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 122.729255][ T5412] loop2: detected capacity change from 0 to 32768 [ 122.840802][ T5412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5412) [ 122.947599][ T5412] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.193425][ T5412] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 123.763325][ T5412] BTRFS info (device loop2): using free-space-tree [ 123.898723][ T5412] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 123.933608][ T5412] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 123.990260][ T5412] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 124.114365][ T5412] BTRFS error (device loop2): open_ctree failed [ 124.120644][ T5455] loop1: detected capacity change from 0 to 2048 [ 131.242161][ T5485] loop5: detected capacity change from 0 to 32768 [ 131.468630][ T5485] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 131.485034][ T5485] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 131.555065][ T5485] bcachefs (loop5): alloc_read... done [ 131.561016][ T5485] bcachefs (loop5): stripes_read... done [ 131.566815][ T5485] bcachefs (loop5): snapshots_read... done [ 131.577442][ T5485] bcachefs (loop5): journal_replay... done [ 131.583341][ T5485] bcachefs (loop5): resume_logged_ops... done [ 131.599346][ T5485] bcachefs (loop5): going read-write [ 131.618387][ T5485] bcachefs (loop5): done starting filesystem [ 132.579522][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.593258][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.681857][ T5498] loop4: detected capacity change from 0 to 128 [ 132.693727][ T5114] bcachefs (loop5): shutting down [ 132.699106][ T5114] bcachefs (loop5): going read-only [ 132.729090][ T5114] bcachefs (loop5): finished waiting for writes to stop [ 132.848033][ T5114] bcachefs (loop5): flushing journal and stopping allocators, journal seq 12 [ 132.919329][ T5114] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 12 [ 132.992602][ T5114] bcachefs (loop5): shutdown complete, journal seq 13 [ 133.001328][ T5114] bcachefs (loop5): marking filesystem clean [ 133.014433][ T29] audit: type=1800 audit(1718922644.698:12): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048605 res=0 errno=0 [ 133.765143][ T5511] loop2: detected capacity change from 0 to 16 [ 133.861152][ T5511] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.947981][ T5114] bcachefs (loop5): shutdown complete [ 134.467113][ T5520] loop1: detected capacity change from 0 to 512 [ 134.495920][ T5520] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.551931][ T5520] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.612320][ T5520] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.776417][ T29] audit: type=1326 audit(1718922646.468:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff090c7cf29 code=0x0 [ 134.804431][ T5520] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value out of bounds [ 134.978252][ T5520] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 135.097408][ T5520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.369765][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.680749][ T5539] loop1: detected capacity change from 0 to 1024 [ 136.951629][ T29] audit: type=1326 audit(1718922648.638:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5587cf29 code=0x0 [ 137.044044][ T5539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0102] [ 137.044222][ T5539] System zones: 0-1, 3-12 [ 137.046157][ T5539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.125312][ T5539] EXT4-fs error (device loop1): __ext4_remount:6503: comm syz-executor.1: Abort forced by user [ 137.138506][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 140.785816][ T5556] loop3: detected capacity change from 0 to 128 [ 141.207528][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.543308][ T5559] loop0: detected capacity change from 0 to 32768 [ 141.747452][ T5559] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 141.762999][ T5559] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 141.903821][ T5559] bcachefs (loop0): alloc_read... done [ 141.909370][ T5559] bcachefs (loop0): stripes_read... done [ 141.915164][ T5559] bcachefs (loop0): snapshots_read... done [ 141.923539][ T5559] bcachefs (loop0): journal_replay... done [ 141.929419][ T5559] bcachefs (loop0): resume_logged_ops... done [ 141.960248][ T5559] bcachefs (loop0): going read-write [ 142.038430][ T5559] bcachefs (loop0): done starting filesystem [ 143.936702][ T5113] bcachefs (loop0): shutting down [ 144.003431][ T5113] bcachefs (loop0): going read-only [ 144.010184][ T5113] bcachefs (loop0): finished waiting for writes to stop [ 144.039830][ T5579] loop2: detected capacity change from 0 to 2048 [ 144.066828][ T5574] loop1: detected capacity change from 0 to 4096 [ 144.112452][ T5577] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.140451][ T5580] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.190834][ T5113] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 144.211302][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 144.245411][ T5113] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 144.304724][ T5113] bcachefs (loop0): shutdown complete, journal seq 13 [ 144.317245][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 144.338689][ T5113] bcachefs (loop0): marking filesystem clean [ 144.421972][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 144.478461][ T5113] bcachefs (loop0): shutdown complete [ 146.586664][ T5577] infiniband syz0: set active [ 146.591592][ T5577] infiniband syz0: added geneve1 [ 146.607625][ T5592] loop5: detected capacity change from 0 to 512 [ 146.610648][ T926] geneve1 speed is unknown, defaulting to 1000 [ 146.654030][ T5592] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.667448][ T5577] syz0: rxe_create_cq: returned err = -12 [ 146.701505][ T5577] infiniband syz0: Couldn't create ib_mad CQ [ 146.722409][ T5592] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.750536][ T5577] infiniband syz0: Couldn't open port 1 [ 146.756357][ T29] audit: type=1326 audit(1718922658.408:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5593 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x0 [ 146.839589][ T5592] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.5: corrupted in-inode xattr: e_value out of bounds [ 146.947771][ T5592] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 146.988821][ T5577] RDS/IB: syz0: added [ 147.002465][ T5577] smc: adding ib device syz0 with port count 1 [ 147.019627][ T5592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.063368][ T5577] smc: ib device syz0 port 1 has pnetid [ 147.114067][ T5183] geneve1 speed is unknown, defaulting to 1000 [ 147.163935][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 147.310669][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.702379][ T5599] loop0: detected capacity change from 0 to 1024 [ 148.514091][ T29] audit: type=1804 audit(1718922659.908:16): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir932748977/syzkaller.7pcVCM/17/bus" dev="sda1" ino=1974 res=1 errno=0 [ 148.588515][ T29] audit: type=1804 audit(1718922659.948:17): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir932748977/syzkaller.7pcVCM/17/bus" dev="sda1" ino=1974 res=1 errno=0 [ 148.619874][ T5605] overlay: ./bus is not a directory [ 148.679253][ T5599] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0102] [ 148.729188][ T5599] System zones: 0-1, 3-12 [ 148.817015][ T5599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.829313][ T29] audit: type=1804 audit(1718922659.998:18): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir932748977/syzkaller.7pcVCM/17/bus" dev="sda1" ino=1974 res=1 errno=0 [ 148.835311][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 149.023007][ T29] audit: type=1804 audit(1718922660.008:19): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir932748977/syzkaller.7pcVCM/17/bus" dev="sda1" ino=1974 res=1 errno=0 [ 149.183882][ T5599] EXT4-fs error (device loop0): __ext4_remount:6503: comm syz-executor.0: Abort forced by user [ 149.262330][ T5599] EXT4-fs (loop0): Remounting filesystem read-only [ 150.186373][ T5113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.129644][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.263453][ T5633] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 154.545387][ T5636] loop0: detected capacity change from 0 to 32768 [ 154.824626][ T5636] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 154.840204][ T5636] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 154.952815][ T5645] loop2: detected capacity change from 0 to 4096 [ 154.994453][ T5636] bcachefs (loop0): alloc_read... done [ 155.002154][ T5636] bcachefs (loop0): stripes_read... done [ 155.008029][ T5636] bcachefs (loop0): snapshots_read... done [ 155.016914][ T5636] bcachefs (loop0): journal_replay... done [ 155.022868][ T5636] bcachefs (loop0): resume_logged_ops... done [ 155.033733][ T5636] bcachefs (loop0): going read-write [ 155.048442][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 155.064179][ T5636] bcachefs (loop0): done starting filesystem [ 155.279736][ T29] audit: type=1326 audit(1718922666.968:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x0 [ 156.625565][ T5657] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.925837][ T5113] bcachefs (loop0): shutting down [ 156.930901][ T5113] bcachefs (loop0): going read-only [ 156.949574][ T5660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.018346][ T5113] bcachefs (loop0): finished waiting for writes to stop [ 157.156196][ T5113] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 157.170201][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 157.178646][ T5660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.192957][ T5113] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 157.235536][ T5113] bcachefs (loop0): shutdown complete, journal seq 13 [ 157.255779][ T5113] bcachefs (loop0): marking filesystem clean [ 157.275878][ T5653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.400871][ T5665] loop1: detected capacity change from 0 to 512 [ 157.428430][ T5113] bcachefs (loop0): shutdown complete [ 157.446739][ T5665] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.515364][ T5665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.641456][ T5665] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value out of bounds [ 157.690350][ T5665] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 157.704716][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 157.737395][ T5665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.007014][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.207307][ T5674] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.400920][ T5577] geneve1 speed is unknown, defaulting to 1000 [ 159.323451][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 159.354397][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 159.388605][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 159.437385][ T5692] loop2: detected capacity change from 0 to 128 [ 164.668680][ T5709] loop0: detected capacity change from 0 to 4096 [ 164.779634][ T5710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.992561][ T5693] infiniband syz1: set active [ 165.014631][ T5712] loop4: detected capacity change from 0 to 4096 [ 165.040865][ T29] audit: type=1800 audit(1718922676.698:21): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 165.043249][ T781] vcan0 speed is unknown, defaulting to 1000 [ 165.073455][ T5693] infiniband syz1: added vcan0 [ 165.079183][ T5693] syz1: rxe_create_cq: returned err = -12 [ 165.133238][ T5693] infiniband syz1: Couldn't create ib_mad CQ [ 165.190581][ T29] audit: type=1804 audit(1718922676.768:22): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1902912663/syzkaller.ARlBal/18/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 165.227983][ T5693] infiniband syz1: Couldn't open port 1 [ 165.278583][ T5717] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.315077][ T5716] loop1: detected capacity change from 0 to 512 [ 165.353211][ T5716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.463539][ T5716] EXT4-fs (loop1): 1 truncate cleaned up [ 165.470344][ T5716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.514657][ T5693] RDS/IB: syz1: added [ 165.518696][ T5693] smc: adding ib device syz1 with port count 1 [ 165.598433][ T5693] smc: ib device syz1 port 1 has pnetid [ 165.631954][ T926] vcan0 speed is unknown, defaulting to 1000 [ 165.672778][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 165.887128][ T5716] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 166.067964][ T5724] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.246092][ T5726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.267523][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.399475][ T5727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.231579][ T5727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.287344][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 167.797930][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 168.104667][ T5744] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.104841][ T5744] syz0: rxe_newlink: already configured on geneve1 [ 168.534899][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 169.872754][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 170.266829][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 170.476935][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 170.655775][ T5217] libceph: connect (1)[c::]:6789 error -101 [ 170.665815][ T5217] libceph: mon0 (1)[c::]:6789 connect error [ 170.908173][ T5763] loop0: detected capacity change from 0 to 128 [ 170.945822][ T5217] libceph: connect (1)[c::]:6789 error -101 [ 170.952421][ T5217] libceph: mon0 (1)[c::]:6789 connect error [ 171.108749][ T5769] loop4: detected capacity change from 0 to 2048 [ 171.145335][ T5769] udf: Bad value for 'lastblock' [ 171.182759][ T5769] ======================================================= [ 171.182759][ T5769] WARNING: The mand mount option has been deprecated and [ 171.182759][ T5769] and is ignored by this kernel. Remove the mand [ 171.182759][ T5769] option from the mount to silence this warning. [ 171.182759][ T5769] ======================================================= [ 171.220363][ T5693] vcan0 speed is unknown, defaulting to 1000 [ 171.255898][ T29] audit: type=1800 audit(1718922682.918:23): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048608 res=0 errno=0 [ 171.457787][ T5765] ceph: No mds server is up or the cluster is laggy [ 171.474716][ T926] libceph: connect (1)[c::]:6789 error -101 [ 171.490416][ T926] libceph: mon0 (1)[c::]:6789 connect error [ 171.884903][ T5728] geneve1 speed is unknown, defaulting to 1000 [ 171.956627][ T5774] loop5: detected capacity change from 0 to 128 [ 172.061718][ T5774] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.063839][ T5776] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.497314][ T5724] rdma_rxe: rxe_newlink: failed to add geneve1 [ 172.506039][ T5776] rdma_rxe: rxe_newlink: failed to add geneve1 [ 172.581407][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 172.641891][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 172.720808][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.173752][ T5792] loop1: detected capacity change from 0 to 256 [ 174.084481][ T5792] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 174.167110][ T5796] loop0: detected capacity change from 0 to 4096 [ 174.286425][ T5792] exFAT-fs (loop1): hint_cluster is invalid (1), rewind to the first cluster [ 174.373353][ T5812] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.819461][ T5823] loop3: detected capacity change from 0 to 512 [ 174.820684][ T5818] input: syz0 as /devices/virtual/input/input5 [ 174.986314][ T5830] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.022470][ T5824] loop5: detected capacity change from 0 to 128 [ 175.033707][ T5830] rdma_rxe: rxe_newlink: failed to add geneve1 [ 175.050383][ T5823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01d, mo2=0002] [ 175.060164][ T5823] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.088026][ T5823] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 175.115963][ T5832] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000000) [ 175.125310][ T5832] exFAT-fs (loop1): Filesystem has been set read-only [ 175.156300][ T5811] input: syz1 as /devices/virtual/input/input6 [ 175.184293][ T5823] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 175.225888][ T29] audit: type=1800 audit(1718922686.918:24): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=1048614 res=0 errno=0 [ 175.343616][ T5823] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 175.471447][ T5823] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 176.641570][ T5823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.778111][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.014333][ T5841] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.075152][ T5841] rdma_rxe: rxe_newlink: failed to add geneve1 [ 177.085238][ T5813] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 177.445940][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.457797][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.489215][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.506694][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.524373][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 177.540461][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.549673][ T926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 177.805397][ T926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.853640][ T926] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 178.103154][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.230573][ T5858] loop0: detected capacity change from 0 to 1764 [ 179.115358][ T926] usb 4-1: config 0 descriptor?? [ 179.148839][ T143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.193367][ T926] usb 4-1: can't set config #0, error -71 [ 179.241383][ T926] usb 4-1: USB disconnect, device number 2 [ 179.290407][ T5849] geneve1 speed is unknown, defaulting to 1000 [ 179.353798][ T29] audit: type=1326 audit(1718922691.018:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5866 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 179.432714][ T143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.468759][ T5857] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 179.486402][ T5857] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 179.578495][ T5126] Bluetooth: hci4: command tx timeout [ 179.740135][ T5854] loop2: detected capacity change from 0 to 4096 [ 179.748246][ T5854] ntfs3: Unknown parameter 'Æ…ý&ˆ]ö5 (046d:08c1) [ 184.354392][ T5217] usb 4-1: No valid video chain found. [ 184.536536][ T143] bond0 (unregistering): Released all slaves [ 184.759197][ T45] geneve1 speed is unknown, defaulting to 1000 [ 184.830509][ T5183] usb 4-1: USB disconnect, device number 3 [ 184.971867][ T29] audit: type=1326 audit(1718922696.658:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5587cf29 code=0x0 [ 185.824057][ T5131] Bluetooth: hci4: command tx timeout [ 186.912302][ T5939] loop1: detected capacity change from 0 to 4096 [ 187.852184][ T5954] overlayfs: conflicting lowerdir path [ 187.893976][ T5131] Bluetooth: hci4: command 0x0405 tx timeout [ 187.920557][ T5960] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.315285][ T5966] loop2: detected capacity change from 0 to 16 [ 188.336233][ T5967] loop5: detected capacity change from 0 to 2048 [ 188.375200][ T5966] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 188.388446][ T5967] EXT4-fs: Ignoring removed bh option [ 188.413267][ T5967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.444261][ T5967] EXT4-fs: Ignoring removed nobh option [ 188.659647][ T5967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.903557][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.185850][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.451197][ T29] audit: type=1326 audit(1718922701.128:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 189.478716][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 189.555260][ T6004] loop2: detected capacity change from 0 to 256 [ 190.263356][ T6004] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 190.452164][ T6004] exFAT-fs (loop2): hint_cluster is invalid (1), rewind to the first cluster [ 190.775243][ T5126] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 190.795910][ T5126] Bluetooth: hci0: Injecting HCI hardware error event [ 190.805792][ T5131] Bluetooth: hci0: hardware error 0x00 [ 192.259968][ T6036] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.441317][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.450318][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.651756][ T5849] bridge_slave_0: entered allmulticast mode [ 192.713156][ T5849] bridge_slave_0: entered promiscuous mode [ 192.722178][ T6044] overlayfs: conflicting lowerdir path [ 192.753441][ T6035] loop2: detected capacity change from 0 to 4096 [ 192.793312][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.828252][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.865035][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.869014][ T5849] bridge_slave_1: entered allmulticast mode [ 192.900572][ T6043] loop1: detected capacity change from 0 to 2048 [ 192.901447][ T6050] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.906882][ T6043] EXT4-fs: Ignoring removed bh option [ 192.906908][ T6043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.906965][ T6043] EXT4-fs: Ignoring removed nobh option [ 192.908544][ T5849] bridge_slave_1: entered promiscuous mode [ 192.940589][ T5126] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 192.965312][ T5131] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 192.982258][ T5126] Bluetooth: hci5: Injecting HCI hardware error event [ 192.991790][ T5131] Bluetooth: hci5: hardware error 0x00 [ 193.139279][ T6043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.537931][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.564546][ T6060] loop0: detected capacity change from 0 to 512 [ 193.572869][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.588273][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.637549][ T6060] EXT4-fs error (device loop0): ext4_map_blocks:580: inode #2: block 4: comm syz-executor.0: lblock 0 mapped to illegal pblock 4 (length 1) [ 193.694347][ T6060] EXT4-fs (loop0): Remounting filesystem read-only [ 193.775781][ T6060] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 193.827500][ T6060] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 193.914306][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.920656][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.036617][ T6060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.042264][ T29] audit: type=1326 audit(1718922705.728:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x0 [ 194.378201][ T5113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.350767][ T5131] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 195.412270][ T29] audit: type=1800 audit(1718922707.098:29): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 196.221222][ T5849] team0: Port device team_slave_0 added [ 196.261373][ T5849] team0: Port device team_slave_1 added [ 196.694394][ T5131] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 196.705673][ T5131] Bluetooth: hci1: Injecting HCI hardware error event [ 196.714816][ T5126] Bluetooth: hci1: hardware error 0x00 [ 196.790930][ T6096] loop5: detected capacity change from 0 to 128 [ 196.823410][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.866676][ T29] audit: type=1800 audit(1718922708.538:30): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=1048623 res=0 errno=0 [ 196.975170][ T926] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.255292][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 197.274510][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 197.328111][ T926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.421021][ T926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.460636][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.585201][ T926] usb 2-1: config 0 descriptor?? [ 198.039561][ T6118] loop0: detected capacity change from 0 to 64 [ 198.070103][ T926] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 198.117301][ T926] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 198.142284][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.162745][ T6117] overlayfs: conflicting lowerdir path [ 198.168542][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.168622][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.274983][ T926] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 198.308855][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.308878][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.308908][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.547792][ T6119] tty tty25: ldisc open failed (-12), clearing slot 24 [ 198.863148][ T5126] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 198.912373][ T5849] hsr_slave_0: entered promiscuous mode [ 198.945435][ T5849] hsr_slave_1: entered promiscuous mode [ 199.034322][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.050100][ T6129] loop0: detected capacity change from 0 to 512 [ 199.073199][ T5849] Cannot create hsr debugfs directory [ 199.152071][ T6129] EXT4-fs error (device loop0): ext4_map_blocks:580: inode #2: block 4: comm syz-executor.0: lblock 0 mapped to illegal pblock 4 (length 1) [ 199.170480][ T6129] EXT4-fs (loop0): Remounting filesystem read-only [ 199.177785][ T6129] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 199.186880][ T6129] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 199.278182][ T6129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.430887][ T45] usb 2-1: USB disconnect, device number 2 [ 199.535275][ T5113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.956163][ T29] audit: type=1326 audit(1718922711.618:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5587cf29 code=0x0 [ 200.168044][ T6143] loop1: detected capacity change from 0 to 256 [ 200.191579][ T6143] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 200.290494][ T143] hsr_slave_0: left promiscuous mode [ 200.342890][ T6146] Bluetooth: MGMT ver 1.22 [ 200.407594][ T143] hsr_slave_1: left promiscuous mode [ 200.470676][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.537185][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.574191][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.584343][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.615111][ T6143] Process accounting resumed [ 200.628627][ T6143] syz-executor.1: attempt to access beyond end of device [ 200.628627][ T6143] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 200.721598][ T6143] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 200.730522][ T6143] exFAT-fs (loop1): Filesystem has been set read-only [ 201.093236][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 201.099514][ T5123] Bluetooth: hci3: command 0x0406 tx timeout [ 201.442373][ T143] veth1_macvtap: left promiscuous mode [ 201.489217][ T143] veth0_macvtap: left promiscuous mode [ 201.530834][ T143] veth1_vlan: left promiscuous mode [ 201.543520][ T143] veth0_vlan: left promiscuous mode [ 202.494410][ T6157] loop0: detected capacity change from 0 to 1024 [ 202.818668][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.172928][ T6177] loop0: detected capacity change from 0 to 1024 [ 204.258384][ T6177] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0102] [ 204.307414][ T6177] System zones: 0-1, 3-12 [ 204.329878][ T6177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.503196][ T6177] EXT4-fs error (device loop0): __ext4_remount:6503: comm syz-executor.0: Abort forced by user [ 204.527246][ T6177] EXT4-fs (loop0): Remounting filesystem read-only [ 204.603898][ T6186] overlayfs: conflicting lowerdir path [ 204.847589][ T5113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.025469][ T143] team0 (unregistering): Port device team_slave_1 removed [ 206.018182][ T143] team0 (unregistering): Port device team_slave_0 removed [ 206.240246][ T6195] loop0: detected capacity change from 0 to 8 [ 206.361767][ T6201] loop2: detected capacity change from 0 to 128 [ 206.601605][ T29] audit: type=1800 audit(1718922718.258:32): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048631 res=0 errno=0 [ 208.854622][ T6211] loop1: detected capacity change from 0 to 128 [ 211.531374][ T6237] loop5: detected capacity change from 0 to 512 [ 211.569640][ T6237] EXT4-fs warning (device loop5): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 211.654207][ T5847] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.769139][ T6237] loop5: detected capacity change from 0 to 1764 [ 211.830209][ T6237] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 212.769902][ T5126] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 212.967110][ T6252] overlayfs: conflicting lowerdir path [ 214.114279][ T5131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.135343][ T5131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.155139][ T5131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.226135][ T5131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.238498][ T5131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.265654][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.460611][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.586539][ T6260] vcan0 speed is unknown, defaulting to 1000 [ 216.161067][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.373287][ T5126] Bluetooth: hci0: command tx timeout [ 216.699067][ T6288] loop1: detected capacity change from 0 to 512 [ 216.773943][ T5126] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 216.783379][ T5126] Bluetooth: hci3: Injecting HCI hardware error event [ 216.798233][ T5126] Bluetooth: hci3: hardware error 0x00 [ 217.196020][ T143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.325057][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.403801][ T6288] ext4 filesystem being mounted at /root/syzkaller-testdir932748977/syzkaller.7pcVCM/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.458498][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.482954][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.503018][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.513412][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.529266][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.546905][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.549202][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.561296][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.613926][ T6288] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 217.622543][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.649927][ T6288] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 217.686164][ T6288] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 217.719716][ T6288] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 217.772432][ T143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.979726][ T143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.102785][ T6323] tipc: Started in network mode [ 218.120986][ T6323] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 218.185497][ T6323] tipc: Enabled bearer , priority 10 [ 218.339336][ T6300] vcan0 speed is unknown, defaulting to 1000 [ 218.454013][ T5131] Bluetooth: hci0: command tx timeout [ 218.495607][ T143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.024537][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 219.182930][ T5126] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 219.236201][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 219.256583][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.270448][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.282561][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.298062][ T5176] tipc: Node number set to 15444650 [ 219.340946][ T9] usb 3-1: config 0 descriptor?? [ 219.357860][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 219.467125][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 219.653291][ T5126] Bluetooth: hci1: command tx timeout [ 219.724496][ T143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.777412][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.874167][ T29] audit: type=1800 audit(1718922731.558:33): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 219.937606][ T143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.479686][ T143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.533351][ T5126] Bluetooth: hci0: command tx timeout [ 220.771497][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.842729][ T143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.733352][ T5126] Bluetooth: hci1: command tx timeout [ 222.614747][ T5126] Bluetooth: hci0: command tx timeout [ 223.815127][ T5126] Bluetooth: hci1: command tx timeout [ 224.935475][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.945112][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.954987][ T6260] bridge_slave_0: entered allmulticast mode [ 224.968055][ T6260] bridge_slave_0: entered promiscuous mode [ 225.044103][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.051313][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.070090][ T781] usb 3-1: USB disconnect, device number 2 [ 225.109666][ T6260] bridge_slave_1: entered allmulticast mode [ 225.166031][ T6260] bridge_slave_1: entered promiscuous mode [ 225.305678][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.736532][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.795069][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.802338][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.891050][ T6384] loop1: detected capacity change from 0 to 32768 [ 225.900114][ T5126] Bluetooth: hci1: command tx timeout [ 225.900970][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.288723][ T6384] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 226.305712][ T6384] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 226.428391][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.435843][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.545236][ T6384] bcachefs (loop1): alloc_read... done [ 226.550800][ T6384] bcachefs (loop1): stripes_read... done [ 226.556561][ T6384] bcachefs (loop1): snapshots_read... done [ 226.566720][ T6384] bcachefs (loop1): journal_replay... done [ 226.572585][ T6384] bcachefs (loop1): resume_logged_ops... done [ 226.612844][ T6384] bcachefs (loop1): going read-write [ 226.883553][ T6384] bcachefs (loop1): done starting filesystem [ 226.914475][ T6384] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 227.084559][ T29] audit: type=1800 audit(1718922738.738:34): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1073741825 res=0 errno=0 [ 227.586022][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.972964][ T5121] bcachefs (loop1): shutting down [ 228.243160][ T5121] bcachefs (loop1): going read-only [ 228.248463][ T5121] bcachefs (loop1): finished waiting for writes to stop [ 228.450730][ T5121] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 228.515823][ T5121] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 228.577488][ T5121] bcachefs (loop1): shutdown complete, journal seq 11 [ 228.602886][ T5121] bcachefs (loop1): marking filesystem clean [ 228.605772][ T6260] team0: Port device team_slave_0 added [ 228.630790][ T143] bridge_slave_1: left allmulticast mode [ 228.647380][ T143] bridge_slave_1: left promiscuous mode [ 228.678823][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.718778][ T143] bridge_slave_0: left allmulticast mode [ 228.736072][ T143] bridge_slave_0: left promiscuous mode [ 228.746332][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.760514][ T5121] bcachefs (loop1): shutdown complete [ 228.780564][ T143] bridge_slave_1: left allmulticast mode [ 228.800197][ T143] bridge_slave_1: left promiscuous mode [ 228.815156][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.884537][ T143] bridge_slave_0: left allmulticast mode [ 228.890336][ T143] bridge_slave_0: left promiscuous mode [ 228.925306][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.321906][ T6411] loop2: detected capacity change from 0 to 40427 [ 230.837496][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.851205][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.870457][ T143] bond0 (unregistering): Released all slaves [ 230.948317][ T6461] loop2: detected capacity change from 0 to 128 [ 231.077340][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.079963][ T29] audit: type=1800 audit(1718922742.768:35): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048636 res=0 errno=0 [ 231.143673][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.164211][ T143] bond0 (unregistering): Released all slaves [ 231.227142][ T6300] chnl_net:caif_netlink_parms(): no params data found [ 231.272075][ T6260] team0: Port device team_slave_1 added [ 231.516067][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.562636][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.201006][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.042973][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.071251][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.101395][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.119036][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.273537][ T5180] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 233.475905][ T5180] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.493613][ T5180] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.534300][ T5180] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.560749][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.603995][ T5180] usb 2-1: config 0 descriptor?? [ 233.639339][ T5180] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 233.835040][ T6260] hsr_slave_0: entered promiscuous mode [ 233.869178][ T6260] hsr_slave_1: entered promiscuous mode [ 234.115362][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.135916][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.150226][ T6300] bridge_slave_0: entered allmulticast mode [ 234.180284][ T6300] bridge_slave_0: entered promiscuous mode [ 234.190022][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.199807][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.212646][ T6300] bridge_slave_1: entered allmulticast mode [ 234.225772][ T6300] bridge_slave_1: entered promiscuous mode [ 234.585373][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.812822][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.157734][ T6300] team0: Port device team_slave_0 added [ 235.243583][ T6300] team0: Port device team_slave_1 added [ 235.613822][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.650000][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.767813][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.979670][ T5180] usb 2-1: USB disconnect, device number 3 [ 236.292146][ T6498] loop2: detected capacity change from 0 to 32768 [ 236.317047][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.351723][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.377722][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.450117][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.593231][ T5180] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 236.627969][ T143] hsr_slave_0: left promiscuous mode [ 236.664892][ T143] hsr_slave_1: left promiscuous mode [ 236.693608][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.712181][ T6498] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 236.733271][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.754013][ T6498] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 236.761194][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.777070][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.831503][ T143] hsr_slave_0: left promiscuous mode [ 236.837162][ T5180] usb 2-1: Using ep0 maxpacket: 16 [ 236.860219][ T143] hsr_slave_1: left promiscuous mode [ 236.864104][ T6498] bcachefs (loop2): alloc_read... [ 236.870597][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.872620][ T6498] done [ 236.889526][ T5180] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.911525][ T5180] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.922319][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.923556][ T6498] bcachefs (loop2): stripes_read... done [ 236.944987][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.963176][ T6498] bcachefs (loop2): snapshots_read... done [ 236.964337][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.972180][ T6498] bcachefs (loop2): journal_replay... [ 236.984537][ T5180] usb 2-1: config 0 descriptor?? [ 237.004242][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.012316][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.025256][ T6498] done [ 237.028095][ T6498] bcachefs (loop2): resume_logged_ops... done [ 237.093765][ T6498] bcachefs (loop2): going read-write [ 237.143573][ T6498] bcachefs (loop2): done starting filesystem [ 237.199474][ T143] veth1_macvtap: left promiscuous mode [ 237.225410][ T143] veth0_macvtap: left promiscuous mode [ 237.232749][ T143] veth1_vlan: left promiscuous mode [ 237.266408][ T143] veth0_vlan: left promiscuous mode [ 237.283953][ T5128] bcachefs (loop2): shutting down [ 237.288998][ T5128] bcachefs (loop2): going read-only [ 237.301090][ T5128] bcachefs (loop2): finished waiting for writes to stop [ 237.313002][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.335267][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.346647][ T143] veth1_macvtap: left promiscuous mode [ 237.352971][ T143] veth0_macvtap: left promiscuous mode [ 237.353823][ T5128] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 237.358694][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.376160][ T143] veth1_vlan: left promiscuous mode [ 237.381665][ T143] veth0_vlan: left promiscuous mode [ 237.399097][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.408398][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 237.418571][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.430232][ T29] audit: type=1326 audit(1718922749.118:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x7ffc0000 [ 237.484413][ T29] audit: type=1326 audit(1718922749.118:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x7ffc0000 [ 237.507474][ T29] audit: type=1326 audit(1718922749.168:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6d9667cf29 code=0x7ffc0000 [ 237.530167][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.539279][ T29] audit: type=1326 audit(1718922749.168:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x7ffc0000 [ 237.562003][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.576435][ T29] audit: type=1326 audit(1718922749.168:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x7ffc0000 [ 237.599164][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.603313][ T5128] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 237.656269][ T5180] usbhid 2-1:0.0: can't add hid device: -71 [ 237.662323][ T5180] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 237.676716][ T5128] bcachefs (loop2): shutdown complete, journal seq 14 [ 237.686114][ T5180] usb 2-1: USB disconnect, device number 4 [ 237.714216][ T5128] bcachefs (loop2): marking filesystem clean [ 237.788929][ T5128] bcachefs (loop2): shutdown complete [ 238.104595][ T6536] loop1: detected capacity change from 0 to 32768 [ 238.119426][ T143] infiniband syz1: set down [ 238.451339][ T6536] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 238.469174][ T6536] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 238.744455][ T6536] bcachefs (loop1): alloc_read... done [ 238.750047][ T6536] bcachefs (loop1): stripes_read... done [ 238.755810][ T6536] bcachefs (loop1): snapshots_read... done [ 238.765461][ T6536] bcachefs (loop1): journal_replay... done [ 238.771446][ T6536] bcachefs (loop1): resume_logged_ops... done [ 238.806822][ T6536] bcachefs (loop1): going read-write [ 239.000420][ T6536] bcachefs (loop1): done starting filesystem [ 239.466230][ T29] audit: type=1800 audit(1718922751.148:41): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1073741825 res=0 errno=0 [ 239.545992][ T5131] Bluetooth: hci4: command tx timeout [ 239.776200][ T5121] bcachefs (loop1): shutting down [ 239.781283][ T5121] bcachefs (loop1): going read-only [ 239.815892][ T5121] bcachefs (loop1): finished waiting for writes to stop [ 239.856236][ T5121] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 239.907627][ T5121] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 9 [ 239.925087][ T5121] bcachefs (loop1): shutdown complete, journal seq 10 [ 239.932917][ T5121] bcachefs (loop1): marking filesystem clean [ 240.046507][ T5121] bcachefs (loop1): shutdown complete [ 241.507289][ T143] team0 (unregistering): Port device team_slave_1 removed [ 241.583159][ T5131] Bluetooth: hci4: command tx timeout [ 241.658923][ T143] team0 (unregistering): Port device team_slave_0 removed [ 241.685623][ T6571] loop1: detected capacity change from 0 to 128 [ 242.943397][ T6577] loop1: detected capacity change from 0 to 512 [ 242.960000][ T6577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.013681][ T6577] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 243.039418][ T6577] EXT4-fs (loop1): 1 truncate cleaned up [ 243.051559][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.530092][ T1043] smc: removing ib device syz1 [ 243.665401][ T5131] Bluetooth: hci4: command tx timeout [ 245.018332][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.145007][ T143] team0 (unregistering): Port device team_slave_1 removed [ 245.249544][ T143] team0 (unregistering): Port device team_slave_0 removed [ 245.741526][ T5123] Bluetooth: hci4: command tx timeout [ 246.080098][ T9] vcan0 speed is unknown, defaulting to 1000 [ 246.080430][ T6567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.093902][ T6567] IPv6: NLM_F_CREATE should be set when creating new route [ 246.131597][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.265783][ T6300] hsr_slave_0: entered promiscuous mode [ 246.283805][ T6300] hsr_slave_1: entered promiscuous mode [ 246.298677][ T6300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.306660][ T6300] Cannot create hsr debugfs directory [ 248.193249][ T6621] loop2: detected capacity change from 0 to 1024 [ 248.345716][ T6621] hfsplus: extend alloc file! (8192,65536,366) [ 248.466705][ T6260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.504600][ T6260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.710704][ T6260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.741236][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 248.753920][ T6260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.900518][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 248.961233][ T8] usb 4-1: config 0 has no interfaces? [ 248.968783][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 248.984367][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.019394][ T8] usb 4-1: config 0 descriptor?? [ 249.257835][ T781] usb 4-1: USB disconnect, device number 4 [ 249.444754][ T6637] loop1: detected capacity change from 0 to 32768 [ 249.652425][ T6637] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 249.668864][ T6637] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 249.710752][ T6637] bcachefs (loop1): alloc_read... done [ 249.725032][ T6637] bcachefs (loop1): stripes_read... done [ 249.743288][ T6637] bcachefs (loop1): snapshots_read... done [ 249.752939][ T6637] bcachefs (loop1): journal_replay... done [ 249.759167][ T6637] bcachefs (loop1): resume_logged_ops... done [ 249.781384][ T6637] bcachefs (loop1): going read-write [ 249.820146][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.848826][ T6637] bcachefs (loop1): done starting filesystem [ 249.858495][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.876008][ T6530] bridge_slave_0: entered allmulticast mode [ 249.891418][ T6530] bridge_slave_0: entered promiscuous mode [ 249.981670][ T6637] syz-executor.1 (6637) used greatest stack depth: 15544 bytes left [ 250.009929][ T5121] bcachefs (loop1): shutting down [ 250.016111][ T5121] bcachefs (loop1): going read-only [ 250.021329][ T5121] bcachefs (loop1): finished waiting for writes to stop [ 250.032196][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.044775][ T5121] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 250.051437][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.070305][ T5121] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 250.070579][ T6530] bridge_slave_1: entered allmulticast mode [ 250.091851][ T5121] bcachefs (loop1): shutdown complete, journal seq 14 [ 250.097387][ T6530] bridge_slave_1: entered promiscuous mode [ 250.111346][ T5121] bcachefs (loop1): marking filesystem clean [ 250.163191][ T5178] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 250.186571][ T5121] bcachefs (loop1): shutdown complete [ 250.375563][ T5178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 250.393086][ T5178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 250.423089][ T5178] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.449243][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.468204][ T5178] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.483102][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.497564][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.521977][ T5178] usb 4-1: config 0 descriptor?? [ 250.617275][ T6300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.631349][ T6661] loop2: detected capacity change from 0 to 40427 [ 250.724225][ T6661] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 250.732747][ T6661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 250.746265][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.765642][ T6300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.817111][ T6530] team0: Port device team_slave_0 added [ 250.821956][ T6661] F2FS-fs (loop2): invalid crc value [ 250.838776][ T6530] team0: Port device team_slave_1 added [ 250.866811][ T6661] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 250.908278][ T6300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.980514][ T5178] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 251.020368][ T5178] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 251.043539][ T5178] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 251.097214][ T6661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 251.113470][ T6300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.114190][ T6661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 251.170371][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.203220][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.238018][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.282253][ T29] audit: type=1804 audit(1718922762.968:42): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1715082903/syzkaller.fM5fji/72/bus/file1" dev="loop2" ino=10 res=1 errno=0 [ 251.325447][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.332612][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.379635][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.445409][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.610324][ T143] bridge_slave_1: left allmulticast mode [ 251.617222][ T143] bridge_slave_1: left promiscuous mode [ 251.624170][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.660969][ T143] bridge_slave_0: left allmulticast mode [ 251.668695][ T143] bridge_slave_0: left promiscuous mode [ 251.676580][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.869288][ T6672] loop1: detected capacity change from 0 to 128 [ 251.930459][ T29] audit: type=1800 audit(1718922763.618:43): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048642 res=0 errno=0 [ 252.570697][ T6674] loop2: detected capacity change from 0 to 2048 [ 252.655219][ T6674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.681216][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.702866][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.717551][ T143] bond0 (unregistering): Released all slaves [ 252.747692][ T5128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.801797][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.808992][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.858857][ T6530] hsr_slave_0: entered promiscuous mode [ 252.907651][ T6530] hsr_slave_1: entered promiscuous mode [ 252.935748][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.958179][ T6530] Cannot create hsr debugfs directory [ 253.075060][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.082264][ T5217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.113297][ T5183] usb 4-1: USB disconnect, device number 5 [ 253.137902][ T6679] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.243583][ T143] hsr_slave_0: left promiscuous mode [ 253.280951][ T143] hsr_slave_1: left promiscuous mode [ 253.302226][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.340643][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.172755][ T6686] loop2: detected capacity change from 0 to 32768 [ 254.295227][ T143] team0 (unregistering): Port device team_slave_1 removed [ 254.336681][ T6686] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 254.359682][ T6686] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 254.429764][ T143] team0 (unregistering): Port device team_slave_0 removed [ 254.442279][ T6686] bcachefs (loop2): alloc_read... done [ 254.454563][ T6686] bcachefs (loop2): stripes_read... done [ 254.479801][ T6686] bcachefs (loop2): snapshots_read... done [ 254.507014][ T6686] bcachefs (loop2): journal_replay... done [ 254.512920][ T6686] bcachefs (loop2): resume_logged_ops... done [ 254.526685][ T6686] bcachefs (loop2): going read-write [ 254.559080][ T6686] bcachefs (loop2): done starting filesystem [ 254.788575][ T5128] bcachefs (loop2): shutting down [ 254.803153][ T5128] bcachefs (loop2): going read-only [ 254.812522][ T5128] bcachefs (loop2): finished waiting for writes to stop [ 254.855888][ T5128] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 254.867552][ T6708] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.904642][ T5128] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 254.916804][ T5128] bcachefs (loop2): shutdown complete, journal seq 16 [ 254.926204][ T5128] bcachefs (loop2): marking filesystem clean [ 254.973975][ T5128] bcachefs (loop2): shutdown complete [ 255.337426][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.351411][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.572121][ T6691] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.619271][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.629191][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.126409][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.412051][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.565072][ T6732] loop2: detected capacity change from 0 to 64 [ 256.632307][ T6300] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.872078][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.879319][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.048504][ T6711] loop1: detected capacity change from 0 to 32768 [ 257.158673][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.165899][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.245930][ T6711] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 257.263089][ T6711] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 257.444633][ T6711] bcachefs (loop1): alloc_read... done [ 257.450219][ T6711] bcachefs (loop1): stripes_read... done [ 257.483611][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.490694][ T6711] bcachefs (loop1): snapshots_read... done [ 257.518197][ T6711] bcachefs (loop1): journal_replay... done [ 257.552092][ T6711] bcachefs (loop1): resume_logged_ops... done [ 257.584486][ T6711] bcachefs (loop1): going read-write [ 257.610371][ T6711] bcachefs (loop1): done starting filesystem [ 257.960826][ T6530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.827466][ T6530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.854054][ T5121] bcachefs (loop1): shutting down [ 258.859157][ T5121] bcachefs (loop1): going read-only [ 258.895725][ T5121] bcachefs (loop1): finished waiting for writes to stop [ 258.927717][ T6742] loop2: detected capacity change from 0 to 32768 [ 258.939080][ T6530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.966975][ T5121] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 258.980716][ T6530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.995063][ T5121] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 259.025625][ T5121] bcachefs (loop1): shutdown complete, journal seq 15 [ 259.043611][ T5121] bcachefs (loop1): marking filesystem clean [ 259.051405][ T6742] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 259.170738][ T5121] bcachefs (loop1): shutdown complete [ 259.219358][ T6742] XFS (loop2): Ending clean mount [ 259.240536][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.316269][ T6260] veth0_vlan: entered promiscuous mode [ 259.403893][ T5128] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 259.436009][ T6260] veth1_vlan: entered promiscuous mode [ 259.655917][ T6260] veth0_macvtap: entered promiscuous mode [ 259.712468][ T6260] veth1_macvtap: entered promiscuous mode [ 259.760245][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.868761][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.894661][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.917893][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.949815][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.989239][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.023419][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.046472][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.086845][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.178137][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.203417][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.240539][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.258641][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.280669][ T6797] loop2: detected capacity change from 0 to 64 [ 260.298862][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.324408][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.351519][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.382693][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.390081][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.422528][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.429794][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.551023][ T6260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.601112][ T6260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.653171][ T6260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.684809][ T6260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.816838][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.077927][ T6300] veth0_vlan: entered promiscuous mode [ 263.317358][ T6300] veth1_vlan: entered promiscuous mode [ 263.495682][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.546641][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.787413][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.843866][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.902187][ T6300] veth0_macvtap: entered promiscuous mode [ 263.947161][ T6300] veth1_macvtap: entered promiscuous mode [ 264.022209][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.162471][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.262216][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.303127][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.312989][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.336726][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.356464][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.381400][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.411056][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.438679][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.465262][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.560929][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.623250][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.749947][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.816070][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.826059][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.861888][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.909083][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.986293][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.034162][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.066716][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.074876][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.279585][ T6300] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.333272][ T6300] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.594964][ T6300] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.690143][ T6300] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.583756][ T29] audit: type=1326 audit(1718922779.268:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 267.662673][ T6530] veth0_vlan: entered promiscuous mode [ 267.830460][ T6530] veth1_vlan: entered promiscuous mode [ 267.923285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.945019][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.222688][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.261757][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.319525][ T6530] veth0_macvtap: entered promiscuous mode [ 268.637322][ T6530] veth1_macvtap: entered promiscuous mode [ 269.217275][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.441537][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.452514][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.476186][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.508013][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.534348][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.564477][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.594931][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.617409][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.639081][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.703258][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.760574][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.839056][ T29] audit: type=1326 audit(1718922781.448:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5f27cf29 code=0x0 [ 269.932583][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.976964][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.182135][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.639386][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.903147][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.959050][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.010390][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.235295][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.306947][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.346822][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.254639][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.992600][ T6530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.021075][ T6530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.073393][ T6530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.108024][ T6530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.141431][ T6934] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 273.478913][ T6942] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 273.501685][ T6942] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 274.474728][ T29] audit: type=1326 audit(1718922786.158:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5f27cf29 code=0x0 [ 275.273261][ T5371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.281125][ T5371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.777072][ T6960] loop1: detected capacity change from 0 to 2048 [ 276.733458][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.803263][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.371326][ T6984] loop4: detected capacity change from 0 to 128 [ 280.421217][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.785086][ T29] audit: type=1800 audit(1718922793.478:47): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048656 res=0 errno=0 [ 281.865526][ T7001] pim6reg1: entered promiscuous mode [ 281.887384][ T7001] pim6reg1: entered allmulticast mode [ 283.588140][ T7013] loop5: detected capacity change from 0 to 2048 [ 283.708316][ T7013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.933919][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.032112][ T29] audit: type=1326 audit(1718922798.718:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x7ffc0000 [ 287.105713][ T29] audit: type=1326 audit(1718922798.718:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x7ffc0000 [ 287.176289][ T29] audit: type=1326 audit(1718922798.748:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fe742e7cf29 code=0x7ffc0000 [ 287.242420][ T29] audit: type=1326 audit(1718922798.748:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x7ffc0000 [ 287.267897][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.326773][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.344914][ T29] audit: type=1326 audit(1718922798.748:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x7ffc0000 [ 287.639509][ T7028] loop0: detected capacity change from 0 to 32768 [ 288.249667][ T7028] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 288.383412][ T7028] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 288.640267][ T7028] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 288.963201][ T7028] bcachefs (loop0): bch2_fs_recovery(): error EINTR [ 288.969949][ T7028] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 289.094359][ T7028] bcachefs (loop0): shutting down [ 289.268857][ T7090] team0: entered promiscuous mode [ 289.274312][ T7028] bcachefs (loop0): shutdown complete [ 289.289363][ T7090] team_slave_0: entered promiscuous mode [ 289.310259][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.341431][ T7090] team_slave_1: entered promiscuous mode [ 289.374956][ T7088] team0: left promiscuous mode [ 289.391329][ T7088] team_slave_0: left promiscuous mode [ 289.423858][ T7088] team_slave_1: left promiscuous mode [ 289.515461][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.533332][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.543796][ T7100] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.679030][ T29] audit: type=1804 audit(1718922801.368:53): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir932748977/syzkaller.7pcVCM/81/bus" dev="sda1" ino=1968 res=1 errno=0 [ 289.726563][ T7102] 9pnet: Could not find request transport: f [ 290.421173][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 291.065641][ T7126] loop4: detected capacity change from 0 to 1024 [ 291.112193][ T7126] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0102] [ 291.122718][ T7126] System zones: 0-1, 3-12 [ 292.044835][ T7126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.303595][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 292.313657][ T7126] EXT4-fs error (device loop4): __ext4_remount:6503: comm syz-executor.4: Abort forced by user [ 292.353801][ T7126] EXT4-fs (loop4): Remounting filesystem read-only [ 293.032276][ T45] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 293.257972][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.325228][ T45] usb 3-1: config 0 descriptor?? [ 293.355090][ T6530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.376604][ T45] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 293.782506][ T45] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 295.673069][ C0] sched: RT throttling activated [ 295.687153][ T45] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 296.219787][ T45] usb 3-1: USB disconnect, device number 3 [ 296.225806][ T29] audit: type=1326 audit(1718922807.908:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5ffe67a6a7 code=0x0 [ 296.383574][ T7153] 9pnet: Could not find request transport: f [ 296.672541][ T7159] loop2: detected capacity change from 0 to 512 [ 296.847047][ T7159] EXT4-fs: Ignoring removed i_version option [ 297.151672][ T7159] EXT4-fs: Ignoring removed nobh option [ 297.279185][ T7159] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.852813][ T7159] EXT4-fs (loop2): failed to initialize system zone (-117) [ 297.890327][ T7159] EXT4-fs (loop2): mount failed [ 301.641672][ T29] audit: type=1326 audit(1718922813.318:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 301.663955][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.913833][ T7223] 9pnet: Could not find request transport: f [ 305.876796][ T7254] overlayfs: failed to resolve './file0': -2 [ 306.808812][ T29] audit: type=1326 audit(1718922817.928:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 308.804224][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.681817][ T5131] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 312.692281][ T5131] Bluetooth: hci0: Injecting HCI hardware error event [ 312.806329][ T5123] Bluetooth: hci0: hardware error 0x00 [ 312.903742][ T29] audit: type=1326 audit(1718922824.588:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 313.217728][ T7340] netlink: 341 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.835802][ T5123] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 321.842468][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.857972][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.305229][ T7364] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.397364][ T781] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 324.709952][ T29] audit: type=1326 audit(1718922836.398:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5f27cf29 code=0x0 [ 324.769187][ T781] usb 4-1: device descriptor read/64, error -71 [ 325.065063][ T781] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 326.244672][ T7394] loop4: detected capacity change from 0 to 512 [ 326.253282][ T781] usb 4-1: device descriptor read/64, error -71 [ 326.481633][ T781] usb usb4-port1: attempt power cycle [ 326.584275][ T7394] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 4: comm syz-executor.4: lblock 0 mapped to illegal pblock 4 (length 1) [ 326.979604][ T7406] netlink: 341 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.216179][ T7394] EXT4-fs (loop4): Remounting filesystem read-only [ 327.222805][ T7394] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 327.352738][ T7394] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 327.605225][ T7394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.776011][ T29] audit: type=1800 audit(1718922840.428:59): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 341.705300][ T6530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.146592][ T29] audit: type=1326 audit(1718922854.838:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 344.456812][ T5123] Bluetooth: hci1: command 0x0406 tx timeout [ 344.678229][ T7460] netlink: 341 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.824263][ T7458] loop0: detected capacity change from 0 to 32768 [ 345.086227][ T7458] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 345.102059][ T7458] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 345.361046][ T7458] bcachefs (loop0): alloc_read... done [ 345.369418][ T7458] bcachefs (loop0): stripes_read... done [ 345.375224][ T7458] bcachefs (loop0): snapshots_read... done [ 345.384434][ T7458] bcachefs (loop0): journal_replay... done [ 345.390342][ T7458] bcachefs (loop0): resume_logged_ops... done [ 346.003517][ T7458] bcachefs (loop0): going read-write [ 346.065451][ T7458] bcachefs (loop0): done starting filesystem [ 348.464201][ T29] audit: type=1800 audit(1718922860.148:61): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1976 res=0 errno=0 [ 348.610319][ T7500] loop1: detected capacity change from 0 to 512 [ 348.661457][ T7500] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 4: comm syz-executor.1: lblock 0 mapped to illegal pblock 4 (length 1) [ 348.680777][ T6260] bcachefs (loop0): shutting down [ 348.688683][ T6260] bcachefs (loop0): going read-only [ 348.708062][ T6260] bcachefs (loop0): finished waiting for writes to stop [ 348.727358][ T7500] EXT4-fs (loop1): Remounting filesystem read-only [ 348.750834][ T6260] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 348.764012][ T7500] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 348.790374][ T7500] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 348.814387][ T6260] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 348.829676][ T7500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.858535][ T6260] bcachefs (loop0): shutdown complete, journal seq 13 [ 348.871585][ T6260] bcachefs (loop0): marking filesystem clean [ 348.971514][ T6260] bcachefs (loop0): shutdown complete [ 349.111502][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.422818][ T29] audit: type=1326 audit(1718922870.108:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe742e7cf29 code=0x0 [ 358.456929][ T7516] netlink: 341 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.744260][ T5131] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 361.033244][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 361.503489][ T7536] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 362.783335][ T5123] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 362.792342][ T5123] Bluetooth: hci2: Injecting HCI hardware error event [ 362.803549][ T5126] Bluetooth: hci2: hardware error 0x00 [ 362.813709][ T7546] loop1: detected capacity change from 0 to 512 [ 362.877969][ T7546] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 4: comm syz-executor.1: lblock 0 mapped to illegal pblock 4 (length 1) [ 362.927783][ T7546] EXT4-fs (loop1): Remounting filesystem read-only [ 362.950855][ T7546] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 362.992861][ T7546] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 363.022727][ T7542] loop0: detected capacity change from 0 to 32768 [ 363.031092][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.150567][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.192871][ T7542] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 363.212524][ T7542] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 363.269173][ T7542] bcachefs (loop0): alloc_read... done [ 363.274868][ T7542] bcachefs (loop0): stripes_read... done [ 363.280624][ T7542] bcachefs (loop0): snapshots_read... done [ 363.292916][ T7542] bcachefs (loop0): journal_replay... done [ 363.298907][ T7542] bcachefs (loop0): resume_logged_ops... done [ 363.333446][ T7542] bcachefs (loop0): going read-write [ 363.370610][ T7542] bcachefs (loop0): done starting filesystem [ 363.884848][ T7563] loop1: detected capacity change from 0 to 128 [ 364.046627][ T29] audit: type=1800 audit(1718922875.738:63): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048660 res=0 errno=0 [ 364.853416][ T5126] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 365.189493][ T6260] bcachefs (loop0): shutting down [ 365.203190][ T6260] bcachefs (loop0): going read-only [ 365.208515][ T6260] bcachefs (loop0): finished waiting for writes to stop [ 365.242240][ T6260] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 365.272330][ T6260] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 365.292937][ T6260] bcachefs (loop0): shutdown complete, journal seq 12 [ 365.304551][ T6260] bcachefs (loop0): marking filesystem clean [ 365.451705][ T6260] bcachefs (loop0): shutdown complete [ 369.271500][ T29] audit: type=1326 audit(1718922880.958:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d9667cf29 code=0x0 [ 369.364940][ T7585] overlayfs: conflicting lowerdir path [ 371.741242][ T7601] loop1: detected capacity change from 0 to 128 [ 372.845994][ T29] audit: type=1800 audit(1718922884.528:65): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048665 res=0 errno=0 [ 373.934797][ T5126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.946883][ T5126] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.973679][ T5126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.991369][ T5126] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.001062][ T5126] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 374.008633][ T5126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.065475][ T5131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.083283][ T5131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.096971][ T5131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.122464][ T5131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.146110][ T5131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 374.155160][ T5131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.958293][ T7622] loop1: detected capacity change from 0 to 1764 [ 375.069648][ T7622] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 375.084888][ T7622] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 375.590397][ T7626] loop1: detected capacity change from 0 to 4096 [ 375.648028][ T7627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.066643][ T5131] Bluetooth: hci6: command tx timeout [ 376.293306][ T5131] Bluetooth: hci7: command tx timeout [ 376.846974][ T29] audit: type=1326 audit(1718922888.538:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7612c7cf29 code=0x0 [ 377.358826][ T7642] overlayfs: conflicting lowerdir path [ 377.875753][ T7646] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.133162][ T5131] Bluetooth: hci6: command tx timeout [ 378.236069][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.242450][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.374438][ T5131] Bluetooth: hci7: command tx timeout [ 378.859818][ T5126] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 378.879200][ T5126] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 378.893195][ T5126] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 378.921461][ T5126] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 378.929698][ T5126] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 378.938479][ T5126] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 380.215525][ T5126] Bluetooth: hci6: command tx timeout [ 380.463259][ T5126] Bluetooth: hci7: command tx timeout [ 381.013784][ T5126] Bluetooth: hci8: command tx timeout [ 382.303272][ T5126] Bluetooth: hci6: command tx timeout [ 382.538120][ T5126] Bluetooth: hci7: command tx timeout [ 383.103665][ T5126] Bluetooth: hci8: command tx timeout [ 385.173743][ T5126] Bluetooth: hci8: command tx timeout [ 387.270079][ T5126] Bluetooth: hci8: command tx timeout [ 389.886878][ T5131] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 389.899658][ T5131] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 389.923546][ T5131] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 389.938842][ T5131] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 389.948706][ T5131] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 389.959597][ T5131] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 392.053282][ T5126] Bluetooth: hci9: command tx timeout [ 394.135954][ T5126] Bluetooth: hci9: command tx timeout [ 396.213378][ T5126] Bluetooth: hci9: command tx timeout [ 398.293537][ T5126] Bluetooth: hci9: command tx timeout [ 408.403850][ T5131] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 408.415197][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 408.433607][ T5131] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 408.445993][ T5131] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 408.465287][ T5131] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 408.473083][ T5131] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 408.591799][ T5126] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 408.614997][ T5126] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 408.638349][ T5126] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 408.656976][ T5126] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 408.668530][ T5126] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 408.676352][ T5126] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 410.534693][ T5131] Bluetooth: hci10: command tx timeout [ 410.773525][ T5131] Bluetooth: hci11: command tx timeout [ 412.614276][ T5131] Bluetooth: hci10: command tx timeout [ 412.853261][ T5131] Bluetooth: hci11: command tx timeout [ 414.694315][ T5131] Bluetooth: hci10: command tx timeout [ 414.933302][ T5131] Bluetooth: hci11: command tx timeout [ 416.783341][ T5131] Bluetooth: hci10: command tx timeout [ 417.013281][ T5131] Bluetooth: hci11: command tx timeout [ 438.664674][ T5126] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 438.676466][ T5126] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 438.687465][ T5123] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 438.696105][ T5123] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 438.710742][ T5123] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 438.721599][ T7665] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 438.729649][ T5123] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 438.740253][ T5123] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 438.747713][ T7665] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 438.757435][ T7665] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 438.772226][ T5131] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 438.784599][ T5131] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 439.656231][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.662601][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.783282][ T5123] Bluetooth: hci12: command tx timeout [ 440.863259][ T5123] Bluetooth: hci13: command tx timeout [ 442.853376][ T5123] Bluetooth: hci12: command tx timeout [ 442.933404][ T5123] Bluetooth: hci13: command tx timeout [ 443.920419][ T5126] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 443.945929][ T5126] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 443.956441][ T5126] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 443.982972][ T5126] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 443.993366][ T5126] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 444.002981][ T5126] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 444.933348][ T5126] Bluetooth: hci12: command tx timeout [ 445.013269][ T5126] Bluetooth: hci13: command tx timeout [ 446.053657][ T5126] Bluetooth: hci14: command tx timeout [ 447.013281][ T5126] Bluetooth: hci12: command tx timeout [ 447.093428][ T5126] Bluetooth: hci13: command tx timeout [ 448.133594][ T5126] Bluetooth: hci14: command tx timeout [ 450.230619][ T5126] Bluetooth: hci14: command tx timeout [ 452.293443][ T5126] Bluetooth: hci14: command tx timeout [ 455.071579][ T5123] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 455.084375][ T5123] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 455.095555][ T5123] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 455.117137][ T5123] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 455.129572][ T5123] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 455.145264][ T5123] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 457.253289][ T5126] Bluetooth: hci15: command tx timeout [ 459.336887][ T5126] Bluetooth: hci15: command tx timeout [ 461.413440][ T5126] Bluetooth: hci15: command tx timeout [ 463.493257][ T5126] Bluetooth: hci15: command tx timeout [ 473.704331][ T5123] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 473.737883][ T5123] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 473.763310][ T5123] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 473.777791][ T5123] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 473.786015][ T5123] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 473.798056][ T5131] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 473.798402][ T7665] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 473.841849][ T7665] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 473.850100][ T7665] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 473.860454][ T7665] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 473.868949][ T7665] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 473.878205][ T7665] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 475.903392][ T7665] Bluetooth: hci16: command tx timeout [ 475.981783][ T7665] Bluetooth: hci17: command tx timeout [ 477.974636][ T7665] Bluetooth: hci16: command tx timeout [ 478.053251][ T7665] Bluetooth: hci17: command tx timeout [ 480.053640][ T7665] Bluetooth: hci16: command tx timeout [ 480.133409][ T7665] Bluetooth: hci17: command tx timeout [ 480.613181][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 480.620168][ C1] EXT4-fs (loop3): last error at time 1718922687: ext4_orphan_get:1399 [ 482.133457][ T7665] Bluetooth: hci16: command tx timeout [ 482.213534][ T7665] Bluetooth: hci17: command tx timeout [ 498.060529][ T5126] Bluetooth: hci7: command 0x0406 tx timeout [ 498.071268][ T5131] Bluetooth: hci6: command 0x0406 tx timeout [ 501.111591][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.119391][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.176407][ T7665] Bluetooth: hci8: command 0x0406 tx timeout [ 503.707381][ T7665] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 503.718708][ T7665] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 503.727162][ T7665] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 503.737858][ T7665] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 503.745842][ T7665] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 503.756393][ T7665] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 503.833625][ T5131] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 503.841850][ T5131] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 503.850782][ T5131] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 503.891910][ T5131] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 503.905700][ T5131] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 503.914413][ T5131] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 505.813616][ T7665] Bluetooth: hci18: command tx timeout [ 505.973591][ T7665] Bluetooth: hci19: command tx timeout [ 506.218319][ T30] INFO: task kworker/1:7:5217 blocked for more than 143 seconds. [ 506.240311][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 506.250364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 506.263189][ T30] task:kworker/1:7 state:D stack:22872 pid:5217 tgid:5217 ppid:2 flags:0x00004000 2024/06/20 22:36:57 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 506.323116][ T30] Workqueue: events switchdev_deferred_process_work [ 506.329851][ T30] Call Trace: [ 506.344113][ T30] [ 506.347121][ T30] __schedule+0x17e8/0x4a20 [ 506.351701][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.373796][ T30] ? __pfx___schedule+0x10/0x10 [ 506.379139][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.403064][ T30] ? __pfx_lock_release+0x10/0x10 [ 506.408137][ T30] ? kick_pool+0x45c/0x620 [ 506.412586][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.423061][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.428833][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 506.454279][ T30] ? schedule+0x90/0x320 [ 506.458577][ T30] schedule+0x14b/0x320 [ 506.462769][ T30] schedule_preempt_disabled+0x13/0x30 [ 506.483127][ T30] __mutex_lock+0x6a4/0xd70 [ 506.487723][ T30] ? __mutex_lock+0x527/0xd70 [ 506.492418][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 506.513167][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 506.518297][ T30] ? process_scheduled_works+0x945/0x1830 [ 506.533554][ T30] switchdev_deferred_process_work+0xe/0x20 [ 506.541025][ T30] process_scheduled_works+0xa2e/0x1830 [ 506.564351][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.570430][ T30] ? assign_work+0x364/0x3d0 [ 506.583138][ T30] worker_thread+0x86d/0xd70 [ 506.587781][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 506.603084][ T30] ? __kthread_parkme+0x169/0x1d0 [ 506.608209][ T30] ? __pfx_worker_thread+0x10/0x10 [ 506.623079][ T30] kthread+0x2f2/0x390 [ 506.627200][ T30] ? __pfx_worker_thread+0x10/0x10 [ 506.632334][ T30] ? __pfx_kthread+0x10/0x10 [ 506.653104][ T30] ret_from_fork+0x4d/0x80 [ 506.657617][ T30] ? __pfx_kthread+0x10/0x10 [ 506.662240][ T30] ret_from_fork_asm+0x1a/0x30 [ 506.683118][ T30] [ 506.686295][ T30] INFO: task syz-executor.5:7438 blocked for more than 143 seconds. [ 506.703185][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 506.711053][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 506.743089][ T30] task:syz-executor.5 state:D stack:24672 pid:7438 tgid:7438 ppid:6300 flags:0x00000006 [ 506.763126][ T30] Call Trace: [ 506.766541][ T30] [ 506.769498][ T30] __schedule+0x17e8/0x4a20 [ 506.793155][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.798898][ T30] ? __pfx___schedule+0x10/0x10 [ 506.813119][ T30] ? __pfx_lock_release+0x10/0x10 [ 506.818291][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 506.833134][ T30] ? schedule+0x90/0x320 [ 506.837440][ T30] schedule+0x14b/0x320 [ 506.841639][ T30] schedule_preempt_disabled+0x13/0x30 [ 506.863256][ T30] __mutex_lock+0x6a4/0xd70 [ 506.867856][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.883128][ T30] ? __mutex_lock+0x527/0xd70 [ 506.887866][ T30] ? tun_chr_close+0x3e/0x1b0 [ 506.892660][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 506.913209][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.918916][ T30] tun_chr_close+0x3e/0x1b0 [ 506.933142][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 506.938325][ T30] __fput+0x408/0x8b0 [ 506.942341][ T30] task_work_run+0x251/0x310 [ 506.963137][ T30] ? __pfx_task_work_run+0x10/0x10 [ 506.968354][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 506.993112][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 506.998825][ T30] do_syscall_64+0x100/0x230 [ 507.013104][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.018796][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.033144][ T30] RIP: 0033:0x7fad5f27cf29 [ 507.037585][ T30] RSP: 002b:00007ffc4478ea48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 507.063075][ T30] RAX: 0000000000000000 RBX: 00007fad5f3b5980 RCX: 00007fad5f27cf29 [ 507.071136][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 507.093186][ T30] RBP: 00007fad5f3b5980 R08: 00000000897b4c0c R09: 0000000c00000000 [ 507.101192][ T30] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000053f02 [ 507.133117][ T30] R13: 00007fad5f3b405c R14: 0000000000000032 R15: 00007fad5f3b5980 [ 507.141173][ T30] [ 507.153149][ T30] INFO: task syz-executor.4:7444 blocked for more than 144 seconds. [ 507.162692][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 507.183205][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.191977][ T30] task:syz-executor.4 state:D stack:23800 pid:7444 tgid:7442 ppid:6530 flags:0x00000006 [