last executing test programs: 29m58.740060546s ago: executing program 32 (id=203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) statfs(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000003c0)={[0x2]}, 0x8) socket(0x8, 0x80000, 0xffffffff) r4 = socket(0x1, 0xa, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000004c0)="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", 0x1000, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f00000014c0), &(0x7f0000001500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r8, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) close(r11) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0x3, r9}]}, 0x44}, 0x1, 0x8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) 28m38.966526306s ago: executing program 33 (id=341): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) 20m14.56258462s ago: executing program 34 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a00000000000000", 0x6c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 19m9.197117141s ago: executing program 5 (id=1382): socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19m7.393627267s ago: executing program 5 (id=1386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000180)=[{0x7, 0x4, 0x5, 0x4}, {0x45b6, 0x1, 0x2, 0x5}, {0xd24, 0x1, 0x8, 0xd9d2}]}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x14) close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) 19m5.390175299s ago: executing program 5 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(r0) 19m0.355055366s ago: executing program 5 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d6d697865642c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235352c636865636b3d7374726963742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c004c21fbd23364597e61bd9e6c47bce24b3f93d831eaa8688deebdbf10d10f509bad0fabd2253225b10ce42f4dc8b613d3585bcb3b5892369a7a4e0325cb6510"], 0x25, 0x34c, &(0x7f0000001740)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) syz_clone3(&(0x7f0000000380)={0x200, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f68010203"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r6, 0x58, &(0x7f0000000180)}, 0x10) 18m55.044720106s ago: executing program 5 (id=1398): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1a, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), 0x0, 0x0, 0xee, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = syz_open_dev$vcsn(&(0x7f0000000400), 0x5, 0x1018c0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x3, 0x9, 0x10840, 0xffffffffffffffff, 0x7, '\x00', r5, r0, 0x2, 0x5, 0x2, 0x9, @void, @value, @value=r3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r7, 0x5441, 0x9) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TIOCGETD(r8, 0x5424, &(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 18m47.444828951s ago: executing program 5 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 18m30.926215958s ago: executing program 35 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 18m24.005211398s ago: executing program 4 (id=1433): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_pts(r0, 0x301006) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r2, 0x100c17a) fstat(r1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xac, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x820}, 0x11) mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x2102080, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe82) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000540)='.\x00', 0x1a4243c, &(0x7f00000005c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000000)='./file2\x00', 0x0) 18m22.201787504s ago: executing program 4 (id=1437): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3, 0x16b, &(0x7f0000000100)="$eJzs20+rElEYB+B30u6datFdR4uBNq2kWrUM4gaBUBQu2hVYGw0hN1Mr6ZO07cMF4cpFcKJGtESR/szMRZ9n4ws/jr7nHPRwhHl58+1oOJm+mTydR55l0X0QRSyyOItL0YnKLACAQ7JIKb6mlNLpLK58ipRS2x0BAHVz/gPA8dl7/t9vqTEAoDbu/wBwfJ6/SNcj+ufPiiKP+DIrB+Wgeq3yR4/753eKn87Wo+ZlOeis8rtVXvyeX46ry/ze1vwkbt+q8h/Zwyf9jfxaDPc1f/JflgAAAAAOXq9Y2Xq/7/V25VX1y/8DG/f3btzoNjYNAOAPTN9/GL0aj1+/U9RYnC5X+6L0U3+RR0RTn/UtpfQXwz9+bmxT8sa3IIuIf3ufNn+VgCasv/RtdwIAAAAAAAAAAAAAAOxS79NInbanBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFt9DwAA//+7AkiZ") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x3, 0x181, &(0x7f0000000580)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r5, 0x0, 0x2a) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x0, 0xfffb) 18m19.956330676s ago: executing program 4 (id=1441): socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) gettid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[]) 18m15.559356142s ago: executing program 4 (id=1446): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xfffffffffffffffd}}, {@utf8}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8}, {@uni_xlate}]}, 0x1, 0x285, &(0x7f0000000580)="$eJzs3UFL22ccB/BfNC6JMJLDQDYG+49ddhJ1eI8MB2OBjY0cttNkRjaMEyYI60G9Sd9D+xbaY6+FHkqvfQOlUGyhl9qTByEl/cc00SQ11pjSfj4Xf+T5fZPneXxI8OCTP7/cWF/d3Fo7PDyIfD4T2XKU4ygTpZiIyUjtBQDwITlqNOJFIzXuuQAAV8PnPwB8fAZ9/mf22o/9cvUzAwBG5Z3+/p8YyZQAgBH77fc/flqqVJZ/TZJ8xMb+dnW7mv5Mx5fW4p+oRy3mohjHEY22tP7hx8ryXNL0tBT5jd2JNL+7XZ3szs9HMUq98/NJKqrN3El+KqZb+UfTUYuFKMZnvfMLPfOfxLffdLz+bBTj4V+xGfVYjWY2zeciYmc+Sb7/udLcgJZmPve6DwAAAAAAAAAAAAAAAAAAAAAARmE2aSt135+T3t8zmzZMxZnxNN95P1Bh0P1Ajd1T9/Nk44vseNcOAAAAAAAAAAAAAAAAAAAA74ut/6+tr9Trtf8GFf8+uHXvIJcG3to8uMi0Xne41P7AnsLpVeQjYjEiBqY+/frJjV5DucidY3+OaycrufBuTJ2aYdJ6wrtfXXx7L7UoRP+e+wd/f/7d1sxix1Cl82xEtjN1vbnUrufpc5Cy5zuQwxfPixF9e/JDH8jO4vZJUX55pifXPiSFcf9OZ26WV+7sPH523tSAN43G5GW/DQEAAAAAAAAAAAAAAAAAAF3/396/Z/EqJwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY/Dm+/+HLXLR9Ui+b/PeuNcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvAgAA//8zvIqx") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 18m15.302736873s ago: executing program 3 (id=1447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socket$packet(0x11, 0x2, 0x300) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000180)=[{0x7, 0x4, 0x5, 0x4}, {0x45b6, 0x1, 0x2, 0x5}, {0xd24, 0x1, 0x8, 0xd9d2}]}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x14) close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) 18m15.050715543s ago: executing program 4 (id=1448): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 18m12.454567153s ago: executing program 3 (id=1450): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 18m11.196238315s ago: executing program 4 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) socket$inet(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000800)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) cachestat(r5, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 18m10.229910353s ago: executing program 36 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) socket$inet(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000800)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) cachestat(r5, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 18m7.838816717s ago: executing program 3 (id=1454): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$usbmon(0x0, 0x6, 0x101) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0x0, 0xee00) getresuid(&(0x7f0000001ec0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x10, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x50f, &(0x7f0000000e80)="$eJzs3c9vG1kdAPDvOHF+rbvpwh4AAVuWhYKqOj+6G1XLge4FhFYrIVacOHRD4o2i2HUUJ8sm9JAcuSNRiRP8Cdw4IPXEgRs3uHEpB6QCFahB4mA040nixnHS0sRu7c9Hmsx7b6b+vmd33vO8dvICGFpXImI3IsYi4qOImM7Lk3yLW60tPe/xo7tL+4/uLiXRbH74jyQ7npZF259JvZK/5kRE/OC7ET9OOuM2tnfWFqvVykaen9msrc80tneurxbykvmFuYXZmzfemT+3tr5R+83D76y+/8Pf/fZLD/64+82fptUq/exSdqy9Heep1fRilNrKRiPi/Sx18yJC9txo/veHl096tX0mIt7Mrv/pGMk+TQBgkDWb09Gcbs8DAIMuvf8vRVIo53MBpSgUyuXWHN7rMVWo1hub16brW3eWI5vDuhzFwser1cpsPld4OYpJmp/L0kf5+WP5GxHxWkT8fHwyy5eXzBgBQL+8cmz8//d4a/wHAAbcREdJsS/1AAB6p338H+ljPQCA3um8/wcABt0zjP+eDgSAAeH+HwCGj/EfAIbPmeP/Xm/qAQD0xPc/+CDdmvv5779e/mR761ulT64vVxpr5drWUnmpvrFeXqnXV6qV8lKzedbrVev19bm3D7ON7Z3btfrWnc3bq7XFlcrtigcLAaD/Xnvj/p+TiNh9dzLbom0tB2M1DLZCvysA9I3H/WF4eZ4Hhlf7PX6X38hvGgAG3AlL9D6h638RumfxV3hZXf28+X8YVub/YXj9f/P/3z73egC9Z/4fhlezmVjzHwCGjDl+4Ln+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGVCnbkkI5Wwt8N/1ZKJcjLkXE5SgmH69WK7MR8WpE/Gm8OJ7m5/pdaQDgORX+luTrf12dfqt0/OhY8p/xbB8RP/nlh7/4dHFzc2MuLf/nYfnmvbx8fqwfDQAA2t3qLGqN0/m+7Ub+8aO7SwfbyS82eSFVfPhea3HRNO5+vrWOjMZotp+IYkRM/SvJ8y3p95WRc4i/uxcRnztq/6dZ6WQWoZTNgbRWPj0eP4196QLiH7z/Yx3xC0/EL2TH0n0xey8+ew51gWFz/71WP5lfe+kllvc/hbiS7U++/ieyHur5HfR/+x39X+Gw/xvpiJ9k1/yVw/zpNXn49u+/11HYnG4d24v4wuhJ8ZPD+EmX/vetU6M2mwepv3zxy292PetXEVfj5Pgttaybndmsrc80tneur9YWVyorlTvz8wtzC7M3b7wzP5PNUbd+/uGkGH9/99qrXd+bvYipLvEnzmj/105t/5Ff//ejH33llPjf+OrJn//rp8RPx8SvP2X8xalbXZfvTuMvd2n/WZ//taeM/+CvO8tPeSoA0AON7Z21xWq1snFGIv2uedY5F5gYfYaqSjxjInYjXoBq9CCRfmt+AarxUiT63TMBF+3oou93TQAAAAAAAAAAAAAAgG4a2ztr43GxjxP1u40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMrv8FAAD//zYbzMw=") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) clock_getres(0x7, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 18m6.56713s ago: executing program 3 (id=1455): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xfffffffffffffffd}}, {@utf8}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8}, {@uni_xlate}]}, 0x1, 0x285, &(0x7f0000000580)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 18m6.491883276s ago: executing program 3 (id=1456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000003880)=ANY=[@ANYBLOB="1805000000000000", @ANYRES64, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a80f00000000", @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff00300000", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c000000100", @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000", @ANYRES64=r1, @ANYRES32, @ANYRESHEX, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x518) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x6, 0x44, 0x401, 0x800}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000008000000010000007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000005f10000000000026000000000f00000000000000000000003886eddab5585d6963895f16a0edfde250c48cf26401aeaffebd15b6a9bce9e11b03f8ea0b406ec897862eef616589e7d8d5336ab6c546b66f76fc223fb586e1076b0ec9fc0cbed92cad7691ae455c636033"], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020}, 0x2020) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x529400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r2}, 0x38) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xeb000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x80, 0x24d457e6, 0x301a, 0x5, 0x9, 0xf, 0x2, 0x4}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r2, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r8, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x0, 0x1012) 18m4.205673151s ago: executing program 3 (id=1459): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b, 0x20010, r1, 0xabd1000) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) 18m3.60133584s ago: executing program 37 (id=1459): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b, 0x20010, r1, 0xabd1000) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) 16m47.992043909s ago: executing program 7 (id=1575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) setpgid(r1, r1) 16m46.861558161s ago: executing program 7 (id=1579): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socket$packet(0x11, 0x2, 0x300) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000180)=[{0x7, 0x4, 0x5, 0x4}, {0x45b6, 0x1, 0x2, 0x5}, {0xd24, 0x1, 0x8, 0xd9d2}]}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x14) close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) 16m45.26765354s ago: executing program 7 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x5, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x3, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 16m43.791128s ago: executing program 7 (id=1588): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xfffffffffffffffd}}, {@utf8}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8}, {@uni_xlate}]}, 0x1, 0x285, &(0x7f0000000580)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 16m42.42024281s ago: executing program 7 (id=1590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x402, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, 0x0, 0x0}, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x1, 0x2eb, &(0x7f0000000a00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40081) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getpeername$inet6(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 16m39.481414118s ago: executing program 7 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r5, 0x2000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16m38.9599655s ago: executing program 38 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r5, 0x2000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16m12.689728897s ago: executing program 8 (id=1637): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) 16m10.777949602s ago: executing program 8 (id=1640): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fe880000000000000000000000000101ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x1bc}}, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x180000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x20002) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000040)={0x0, "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"}) 16m9.537594692s ago: executing program 8 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 16m8.734515157s ago: executing program 8 (id=1644): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 16m8.149052274s ago: executing program 8 (id=1647): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) 16m8.07839015s ago: executing program 8 (id=1649): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) clock_getres(0x7ffffffff000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@minixdf}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@mblk_io_submit}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") fcntl$getown(0xffffffffffffffff, 0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000805, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 15m52.373062651s ago: executing program 39 (id=1649): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) clock_getres(0x7ffffffff000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@minixdf}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@mblk_io_submit}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") fcntl$getown(0xffffffffffffffff, 0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000805, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 12m42.546785785s ago: executing program 9 (id=2140): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x387, 0xff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x17b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20011814) r4 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, &(0x7f00000001c0), &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3734, &(0x7f0000000580)={0x0, 0x139b, 0x4, 0x1, 0x16a, 0x0, r4}, &(0x7f0000000600), &(0x7f0000000900)) r6 = syz_io_uring_setup(0x7dc0, &(0x7f0000000880)={0x0, 0x5, 0x20000, 0x2, 0x2000000, 0x0, r5}, &(0x7f0000000780), 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r8, 0x58, &(0x7f0000000500)}, 0x10) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000700)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, 0x0) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) gettid() 12m41.213713803s ago: executing program 9 (id=2143): socket$kcm(0x2, 0xa, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ftruncate(r4, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) 12m38.90127291s ago: executing program 9 (id=2146): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) 12m38.260394712s ago: executing program 9 (id=2147): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) r3 = getpid() ptrace$setregset(0x4205, r3, 0xab45e551ea8ad07d, &(0x7f0000000240)={0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0xffffff4b, 0x0, 0x0, 0xfffffffffffffffc}, 0x40002041) 12m34.753919476s ago: executing program 9 (id=2156): r0 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x102a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) 12m34.533507754s ago: executing program 9 (id=2157): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 12m18.874524591s ago: executing program 40 (id=2157): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 29.878863883s ago: executing program 1 (id=4323): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3426, 0x0, 0xa, 0x0, 0x0) 24.007917288s ago: executing program 1 (id=4338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) 22.757813979s ago: executing program 1 (id=4342): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) 22.140464779s ago: executing program 1 (id=4346): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3426, 0x0, 0xa, 0x0, 0x0) 15.609801587s ago: executing program 1 (id=4363): syz_emit_ethernet(0x20, &(0x7f0000001780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa001142806b7fb6685b0e7ab5a817817a8e6e6e"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0x5, 0x3, 0x3}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400000013000159993dde440113e90005", @ANYRESHEX], 0x14}], 0x1, 0x0, 0x0, 0x24049080}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x24, 0x6, 0xff, @loopback, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x9, 0x2, 0x3, 0x0, 0x3, {[@exp_fastopen={0xfe, 0x10, 0xf989, "7a85303edb1facc672808dae"}]}}}}}}}}, 0x0) 13.195410962s ago: executing program 1 (id=4368): syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create(0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f00000002c0)=0xfff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 8.338795895s ago: executing program 2 (id=4383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) 6.5516872s ago: executing program 2 (id=4387): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 5.598083937s ago: executing program 6 (id=4389): syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001600350b27bd7000fcdbdf2501000000d970381e9d1f971ec0ca894a676733edba70c353af2c7559a458be88bd6e4616f24693fb67aee84e554f1fde650f25f8af6b50ec55f17230757d4e01dc1c3aacc96201049bbd1a2a77bfac3431eee8a4876af9ca8d22e1f95913800fea0f5d5f288dc3f37caea2d5d065894d3c34802eb719fddb4a7e618175f2a353bb9726fcb570f02f924dfaed36103a8e5ac87d8355fb1464cf7fe03d3d823084274744b4875c6e5af30802cadbe16ce11fc9dc131c3b"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 5.129153285s ago: executing program 2 (id=4390): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) 4.82456979s ago: executing program 0 (id=4391): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) write(r0, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) 4.724567898s ago: executing program 2 (id=4392): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 4.20150147s ago: executing program 2 (id=4393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.069264581s ago: executing program 6 (id=4394): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x0, 0x1, 0x2, @mcast1, @mcast2, 0x7, 0x1, 0xf, 0xfffffff9}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000300)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5500000020007fafb32d13b2a4a2719302000000030b43026c26236925000400d1870000bd2d", 0x26}, {&(0x7f0000000080)}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) r8 = socket$packet(0x11, 0xa, 0x300) getsockopt$sock_buf(r8, 0x1, 0x28, &(0x7f0000000240)=""/47, &(0x7f0000000280)=0x2f) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64abf929", @ANYRES16=0x0, @ANYBLOB="20072dbd7000fedbdf255700000006009500c69700000600950006000000060095000800000006009500000200000600950002000000060095000e000000060095000200000006009500010100000600950080ff00000600950064000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 3.785217154s ago: executing program 2 (id=4395): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800000000000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) r3 = dup3(0xffffffffffffffff, r2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_open_dev$usbfs(0x0, 0x76, 0x101301) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap$fb(&(0x7f0000538000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r3, 0xff000) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000040c410cf8a00000000000109022400010000000009040000010300000009210000050122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000740)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00!$\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbc79123afe3676346be53e799976556a2f7ee3658dbc650ea8cc6538c5d55a3740bcc5105fd7ab237ff48d72102f08f0f57e5f08bc030f1ad81a389a097b82ed2bc72297d007f9640ecc2ff61c1edbe729acba278ff2da776f4f5cbfa7bb331e1abc059295f35f66a10acbd1300e64df82dec5cbc516323252641fcd9f3343681630b9901515a8b3ac7087e9fc84f08f4d8ec60c69", @ANYRES8, @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x802) 3.779350144s ago: executing program 0 (id=4396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x102) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x200}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x10001, 0x8001, 0xca, 0x2, 0x800, 0x8001}, {0x9, 0x4, 0xff6, 0x100, 0x9, 0x1}], ['\x00']}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r8, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.96182703s ago: executing program 6 (id=4397): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) close(r1) recvmsg$unix(r0, 0x0, 0x4003) 2.21806234s ago: executing program 0 (id=4398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 2.095295301s ago: executing program 6 (id=4399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x7, 0xfff, 0x7}, 0x50) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.847233841s ago: executing program 0 (id=4400): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 1.024399537s ago: executing program 6 (id=4401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x114a, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0xc4) close_range(r0, 0xffffffffffffffff, 0x0) 821.823034ms ago: executing program 0 (id=4402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 650.401457ms ago: executing program 6 (id=4403): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) write(r0, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) 0s ago: executing program 0 (id=4404): syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001600350b27bd7000fcdbdf2501000000d970381e9d1f971ec0ca894a676733edba70c353af2c7559a458be88bd6e4616f24693fb67aee84e554f1fde650f25f8af6b50ec55f17230757d4e01dc1c3aacc96201049bbd1a2a77bfac3431eee8a4876af9ca8d22e1f95913800fea0f5d5f288dc3f37caea2d5d065894d3c34802eb719fddb4a7e618175f2a353bb9726fcb570f02f924dfaed36103a8e5ac87d8355fb1464cf7fe03d3d823084274744b4875c6e5af30802cadbe16ce11fc9dc131c3b"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) kernel console output (not intermixed with test programs): : Test dummy encryption mode enabled [ 1323.175597][T17659] EXT4-fs (loop2): 1 truncate cleaned up [ 1323.209371][ T27] audit: type=1326 audit(1754701816.573:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17649 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1323.238158][T17659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.312300][ T27] audit: type=1326 audit(1754701816.573:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17649 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1323.561555][T17670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 1324.028194][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.228496][T17675] loop2: detected capacity change from 0 to 512 [ 1324.281723][T17676] loop0: detected capacity change from 0 to 1024 [ 1324.307862][T17675] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2412: casefold flag without casefold feature [ 1324.337087][T17676] EXT4-fs: inline encryption not supported [ 1324.363572][T17675] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2412: couldn't read orphan inode 15 (err -117) [ 1324.425598][T17676] EXT4-fs: Ignoring removed bh option [ 1324.471413][T17676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.484532][T17675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.857166][T17687] overlay: ./file0 is not a directory [ 1324.917627][T17690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2412'. [ 1325.312458][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.272903][T17703] input: syz1 as /devices/virtual/input/input61 [ 1326.578859][T17710] loop6: detected capacity change from 0 to 128 [ 1326.640295][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.699221][T17710] bio_check_eod: 1219 callbacks suppressed [ 1326.699239][T17710] syz.6.2418: attempt to access beyond end of device [ 1326.699239][T17710] loop6: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 1326.766187][T17714] loop2: detected capacity change from 0 to 512 [ 1326.773589][T17714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1326.840796][T17710] syz.6.2418: attempt to access beyond end of device [ 1326.840796][T17710] loop6: rw=2049, sector=241, nr_sectors = 232 limit=128 [ 1326.852367][T17714] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1326.917993][T17714] EXT4-fs (loop2): 1 truncate cleaned up [ 1326.919904][T17710] syz.6.2418: attempt to access beyond end of device [ 1326.919904][T17710] loop6: rw=524288, sector=241, nr_sectors = 232 limit=128 [ 1326.935174][T17714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.998764][T17715] syz.6.2418: attempt to access beyond end of device [ 1326.998764][T17715] loop6: rw=0, sector=241, nr_sectors = 1 limit=128 [ 1327.054854][T17708] syz.6.2418: attempt to access beyond end of device [ 1327.054854][T17708] loop6: rw=0, sector=241, nr_sectors = 1 limit=128 [ 1327.080055][T17708] buffer_io_error: 1214 callbacks suppressed [ 1327.080070][T17708] Buffer I/O error on dev loop6, logical block 241, async page read [ 1327.110375][T17708] syz.6.2418: attempt to access beyond end of device [ 1327.110375][T17708] loop6: rw=0, sector=242, nr_sectors = 1 limit=128 [ 1327.146145][T17708] Buffer I/O error on dev loop6, logical block 242, async page read [ 1327.160860][T17708] syz.6.2418: attempt to access beyond end of device [ 1327.160860][T17708] loop6: rw=0, sector=243, nr_sectors = 1 limit=128 [ 1327.207477][T17708] Buffer I/O error on dev loop6, logical block 243, async page read [ 1327.236048][T17708] syz.6.2418: attempt to access beyond end of device [ 1327.236048][T17708] loop6: rw=0, sector=244, nr_sectors = 1 limit=128 [ 1327.256919][T17708] Buffer I/O error on dev loop6, logical block 244, async page read [ 1327.265008][T17708] syz.6.2418: attempt to access beyond end of device [ 1327.265008][T17708] loop6: rw=0, sector=245, nr_sectors = 1 limit=128 [ 1327.326901][T17708] Buffer I/O error on dev loop6, logical block 245, async page read [ 1327.335069][T17708] syz.6.2418: attempt to access beyond end of device [ 1327.335069][T17708] loop6: rw=0, sector=246, nr_sectors = 1 limit=128 [ 1327.363279][T17708] Buffer I/O error on dev loop6, logical block 246, async page read [ 1327.374036][T17708] Buffer I/O error on dev loop6, logical block 247, async page read [ 1327.392826][T17708] Buffer I/O error on dev loop6, logical block 248, async page read [ 1327.405482][T17710] Buffer I/O error on dev loop6, logical block 241, async page read [ 1327.465998][T17710] Buffer I/O error on dev loop6, logical block 242, async page read [ 1327.476138][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1327.677860][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 1327.689826][ T5869] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1327.733277][T17737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1327.906014][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.949782][ T5869] usb 1-1: config 0 descriptor?? [ 1328.175100][ T5869] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1328.210091][ T5869] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1328.235411][ T5869] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1328.288684][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.439341][T17746] input: syz1 as /devices/virtual/input/input62 [ 1328.673680][T17753] loop2: detected capacity change from 0 to 1024 [ 1328.719116][T17753] EXT4-fs: inline encryption not supported [ 1328.769766][T17753] EXT4-fs: Ignoring removed bh option [ 1328.881936][T17753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.136478][ T8] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1329.388620][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 1329.411919][ T8] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1329.444416][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.480907][ T8] usb 7-1: config 0 has no interface number 0 [ 1329.531877][ T8] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1329.550078][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.570450][ T8] usb 7-1: Product: syz [ 1329.576091][ T8] usb 7-1: Manufacturer: syz [ 1329.580732][ T8] usb 7-1: SerialNumber: syz [ 1329.642878][ T8] usb 7-1: config 0 descriptor?? [ 1329.660219][ T8] usb 7-1: Found UVC 0.00 device syz (046c:14e8) [ 1329.708643][ T8] usb 7-1: No valid video chain found. [ 1329.910759][ T28] usb 7-1: USB disconnect, device number 12 [ 1329.954189][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 1329.954203][ T27] audit: type=1326 audit(1754701823.833:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.114809][ T27] audit: type=1326 audit(1754701823.883:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.194355][ T27] audit: type=1326 audit(1754701823.883:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.203001][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.218249][ T27] audit: type=1326 audit(1754701823.883:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.249434][ T27] audit: type=1326 audit(1754701823.883:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.290981][ T27] audit: type=1326 audit(1754701823.883:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.346107][ T27] audit: type=1326 audit(1754701823.883:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.403500][ T27] audit: type=1326 audit(1754701823.883:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.483034][ T27] audit: type=1326 audit(1754701823.893:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1330.647243][ T27] audit: type=1326 audit(1754701823.893:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17783 comm="syz.1.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a7f98d550 code=0x7ffc0000 [ 1331.125270][T17796] loop6: detected capacity change from 0 to 512 [ 1331.140207][T17796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1331.179171][T17796] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1331.237623][T17796] EXT4-fs (loop6): 1 truncate cleaned up [ 1331.251776][T17796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.408902][T17801] input: syz1 as /devices/virtual/input/input63 [ 1331.955897][ T5848] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1332.036196][T17818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1332.208657][ T5848] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1332.328348][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1332.362536][ T5848] usb 3-1: config 0 has no interface number 0 [ 1332.376793][T11150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.387197][ T5848] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1332.404414][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.456212][ T5848] usb 3-1: config 0 descriptor?? [ 1332.481186][ T5848] hub 3-1:0.3: bad descriptor, ignoring hub [ 1332.522799][ T5848] hub: probe of 3-1:0.3 failed with error -5 [ 1332.529326][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1332.549841][ T5848] sierra 3-1:0.3: Sierra USB modem converter detected [ 1332.567894][ T8] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1332.606864][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.635311][ T8] usb 2-1: config 0 descriptor?? [ 1332.690543][ T5848] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1332.767079][ T5848] usb 3-1: USB disconnect, device number 15 [ 1332.817495][ T5848] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1332.850071][ T5848] sierra 3-1:0.3: device disconnected [ 1332.866756][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1332.954727][T17832] loop6: detected capacity change from 0 to 1024 [ 1332.972344][T17832] EXT4-fs: inline encryption not supported [ 1333.008637][T17832] EXT4-fs: Ignoring removed bh option [ 1333.085029][T17832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.711282][T17845] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1334.813394][T17853] input: syz1 as /devices/virtual/input/input64 [ 1335.425954][T17865] loop2: detected capacity change from 0 to 512 [ 1335.448181][T17865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1335.470388][T11150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.506307][T17865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1335.594088][T17865] EXT4-fs (loop2): 1 truncate cleaned up [ 1335.620182][T17865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1335.945662][T12462] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1336.166592][T12462] usb 7-1: Using ep0 maxpacket: 16 [ 1336.173992][T12462] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1336.189615][T12462] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.215526][T12462] usb 7-1: config 0 has no interface number 0 [ 1336.224360][T12462] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1336.245454][T12462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.254290][T12462] usb 7-1: Product: syz [ 1336.275500][T12462] usb 7-1: Manufacturer: syz [ 1336.280309][T12462] usb 7-1: SerialNumber: syz [ 1336.290084][T12462] usb 7-1: config 0 descriptor?? [ 1336.301964][T12462] usb 7-1: Found UVC 0.00 device syz (046c:14e8) [ 1336.313708][T12462] usb 7-1: No valid video chain found. [ 1336.439419][T17888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1336.507086][T12462] usb 7-1: USB disconnect, device number 13 [ 1336.838564][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.295411][T17904] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1337.295411][T17904] program syz.6.2452 not setting count and/or reply_len properly [ 1338.059622][T17915] input: syz1 as /devices/virtual/input/input65 [ 1340.116430][T17943] loop0: detected capacity change from 0 to 512 [ 1340.195114][T17943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1340.314964][T17943] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1340.438980][T17943] EXT4-fs (loop0): 1 truncate cleaned up [ 1340.457127][T17943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.705432][T12958] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1341.903748][T12958] usb 7-1: Using ep0 maxpacket: 16 [ 1341.945363][T12958] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1341.982165][T12958] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.115458][T12958] usb 7-1: config 0 has no interface number 0 [ 1342.165274][T17945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1342.208723][T12958] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1342.281003][T12958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.343446][T12958] usb 7-1: Product: syz [ 1342.378097][T12958] usb 7-1: Manufacturer: syz [ 1342.429848][T12958] usb 7-1: SerialNumber: syz [ 1342.519093][T12958] usb 7-1: config 0 descriptor?? [ 1342.589772][T12958] usb 7-1: Found UVC 0.00 device syz (046c:14e8) [ 1342.633515][T12958] usb 7-1: No valid video chain found. [ 1342.805171][T12958] usb 7-1: USB disconnect, device number 14 [ 1343.002477][T17988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2460'. [ 1343.143916][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2467'. [ 1343.205307][ T5848] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1343.398798][ T5848] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1343.419497][ T5848] usb 3-1: config 0 has no interface number 0 [ 1343.433700][ T5848] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1343.456615][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.613685][ T5848] usb 3-1: config 0 descriptor?? [ 1343.629920][ T5848] hub 3-1:0.3: bad descriptor, ignoring hub [ 1343.643593][ T5848] hub: probe of 3-1:0.3 failed with error -5 [ 1343.656630][ T5848] sierra 3-1:0.3: Sierra USB modem converter detected [ 1344.897146][ T5848] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1344.935995][ T5848] usb 3-1: USB disconnect, device number 16 [ 1344.964791][ T5848] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1345.021540][ T5848] sierra 3-1:0.3: device disconnected [ 1346.478218][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.479666][T18032] loop2: detected capacity change from 0 to 1024 [ 1346.575890][T18032] EXT4-fs: inline encryption not supported [ 1346.581840][T18032] EXT4-fs: Ignoring removed bh option [ 1346.648358][T18032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.010918][T18094] loop0: detected capacity change from 0 to 512 [ 1350.029522][T18094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1350.087839][T18094] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1350.120773][T18094] EXT4-fs (loop0): 1 truncate cleaned up [ 1350.343272][T18094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.366281][T18103] ubi31: attaching mtd0 [ 1351.374458][T18103] ubi31: scanning is finished [ 1351.430363][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.469732][T18103] ubi31: empty MTD device detected [ 1352.488986][T18103] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1353.110125][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2485'. [ 1353.376861][T12958] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1354.245701][T18038] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1354.288641][T12958] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 1354.297494][T12958] usb 7-1: config 0 has no interface number 0 [ 1354.304070][T12958] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1354.323382][T12958] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1354.343090][T12958] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1354.357904][T12958] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1354.367581][T12958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.398320][T12958] usb 7-1: config 0 descriptor?? [ 1354.417557][T12958] hub 7-1:0.3: bad descriptor, ignoring hub [ 1354.443398][T12958] hub: probe of 7-1:0.3 failed with error -5 [ 1354.491257][T12958] sierra 7-1:0.3: Sierra USB modem converter detected [ 1354.638264][T12958] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1354.708875][T12958] usb 7-1: USB disconnect, device number 15 [ 1354.772101][T12958] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1354.840152][T12958] sierra 7-1:0.3: device disconnected [ 1355.234998][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.864716][T18172] loop0: detected capacity change from 0 to 1024 [ 1355.880729][T18172] EXT4-fs: inline encryption not supported [ 1355.893250][T18172] EXT4-fs: Ignoring removed bh option [ 1355.942716][T18175] loop2: detected capacity change from 0 to 128 [ 1355.969843][T18172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.352801][T18183] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2501'. [ 1356.392796][T18183] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2501'. [ 1357.730459][T18210] loop2: detected capacity change from 0 to 512 [ 1357.761348][T18210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1357.815455][T18210] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1357.840836][T18210] EXT4-fs (loop2): 1 truncate cleaned up [ 1357.856617][T18210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.898770][T18213] loop1: detected capacity change from 0 to 512 [ 1358.048484][T18213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.094626][T18213] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.259764][T16513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.415968][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.748666][ T9222] Bluetooth: hci1: command 0x0406 tx timeout [ 1358.776439][T12966] IPVS: starting estimator thread 0... [ 1358.874326][T18228] IPVS: using max 34 ests per chain, 81600 per kthread [ 1359.082749][T18233] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2510'. [ 1359.152044][T18233] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2510'. [ 1359.211430][T18235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2506'. [ 1360.199056][T18271] pim6reg: entered allmulticast mode [ 1360.363487][T18277] loop1: detected capacity change from 0 to 256 [ 1361.769641][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.769858][T18178] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1361.776295][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.481596][T18277] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1363.759827][T18282] loop1: detected capacity change from 0 to 512 [ 1363.970114][T18282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.989705][T18282] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.047383][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.083628][T16513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.568817][T18304] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2520'. [ 1364.585280][T18304] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2520'. [ 1364.958306][T18311] input: syz1 as /devices/virtual/input/input69 [ 1365.921202][T18322] loop0: detected capacity change from 0 to 256 [ 1366.789788][T18322] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1367.141370][T18325] ubi31: attaching mtd0 [ 1368.097464][T18325] ubi31: scanning is finished [ 1368.178827][T18325] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1368.187165][T18325] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1368.194649][T18325] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1368.202268][T18325] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1368.209860][T18325] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1368.216782][T18325] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1368.225197][T18325] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 155750131 [ 1368.235315][T18325] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1368.248018][T18330] ubi31: background thread "ubi_bgt31d" started, PID 18330 [ 1368.445518][T18334] loop2: detected capacity change from 0 to 512 [ 1368.458313][T18334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1368.542378][T18334] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1368.779247][T18334] EXT4-fs (loop2): 1 truncate cleaned up [ 1368.835683][T18334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.230130][T18334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1369.615514][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.084758][T18351] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2531'. [ 1370.119485][T18351] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2531'. [ 1372.033180][T18382] random: crng reseeded on system resumption [ 1372.403698][ T9222] Bluetooth: hci2: command 0xfc11 tx timeout [ 1372.733135][ T5795] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1373.368989][T18395] loop2: detected capacity change from 0 to 512 [ 1373.469421][T18395] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2538: casefold flag without casefold feature [ 1373.625077][T18395] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2538: couldn't read orphan inode 15 (err -117) [ 1373.674753][T18395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.480516][T18404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2538'. [ 1374.590750][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.866561][T18412] loop6: detected capacity change from 0 to 2048 [ 1375.842127][T18418] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2541'. [ 1375.892933][T18418] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2541'. [ 1376.080410][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 1376.080424][ T27] audit: type=1800 audit(1754701869.966:3745): pid=18421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2542" name="file1" dev="overlay" ino=1085 res=0 errno=0 [ 1376.645827][T18427] loop2: detected capacity change from 0 to 1024 [ 1376.658543][T18427] EXT4-fs: inline encryption not supported [ 1376.667449][T18427] EXT4-fs: Ignoring removed bh option [ 1376.750112][T18427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.735194][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.500885][T18461] loop0: detected capacity change from 0 to 128 [ 1379.598413][T18457] loop2: detected capacity change from 0 to 2048 [ 1379.698502][T18457] loop2: p3 < > p4 < > [ 1379.702746][T18457] loop2: partition table partially beyond EOD, truncated [ 1379.710091][T18457] loop2: p3 start 4284289 is beyond EOD, truncated [ 1380.008009][T18469] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1380.028429][T18469] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1380.038502][T16326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1380.121042][T12629] udevd[12629]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1380.519784][ T27] audit: type=1800 audit(1754701874.406:3746): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2554" name="file1" dev="overlay" ino=465 res=0 errno=0 [ 1380.987825][T18479] loop2: detected capacity change from 0 to 1024 [ 1381.038383][T18479] EXT4-fs: inline encryption not supported [ 1381.063201][T18479] EXT4-fs: Ignoring removed bh option [ 1381.118501][T18479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.846940][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.272315][T18514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2562'. [ 1385.313062][T18514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2562'. [ 1385.937845][T18524] loop1: detected capacity change from 0 to 128 [ 1386.194226][ T27] audit: type=1800 audit(1754701880.087:3747): pid=18526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2564" name="file1" dev="overlay" ino=1813 res=0 errno=0 [ 1387.189057][T18536] loop0: detected capacity change from 0 to 1024 [ 1387.257446][T18536] EXT4-fs: inline encryption not supported [ 1387.299088][T18536] EXT4-fs: Ignoring removed bh option [ 1387.386542][T18536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.402967][T18542] loop6: detected capacity change from 0 to 512 [ 1388.997901][T18542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.028124][T18542] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.043863][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.176963][T11150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.405709][T18570] loop0: detected capacity change from 0 to 512 [ 1389.430254][T18570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1389.460256][T18570] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1389.487586][T18570] EXT4-fs (loop0): 1 truncate cleaned up [ 1389.559128][T18570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1390.076475][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1392.322427][T18540] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1392.503912][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.531132][ T8] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1392.548039][ T8] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 [ 1392.581208][ T5869] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1392.583838][ T8] usb 2-1: USB disconnect, device number 34 [ 1392.631613][ T5869] dvb_usb_az6027: probe of 1-1:0.0 failed with error -110 [ 1392.690425][ T5869] usb 1-1: USB disconnect, device number 14 [ 1392.749435][T18611] loop1: detected capacity change from 0 to 1024 [ 1392.820682][T18611] EXT4-fs: inline encryption not supported [ 1392.841746][T18611] EXT4-fs: Ignoring removed bh option [ 1392.976618][T18611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.912706][T16513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.939684][T18632] loop6: detected capacity change from 0 to 512 [ 1395.039356][T18632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.072937][T18632] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.252029][T11150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.794987][T18653] loop1: detected capacity change from 0 to 512 [ 1396.114034][T18653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1396.178136][T18653] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1396.262429][T18653] EXT4-fs (loop1): 1 truncate cleaned up [ 1396.269354][T18653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.547591][T18660] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1396.686334][T18666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2587'. [ 1397.283474][T16513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.640827][T18685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2594'. [ 1398.759080][T18685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2594'. [ 1399.181224][T18687] loop6: detected capacity change from 0 to 512 [ 1399.774044][T18687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.806029][T18687] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.020259][T18707] loop1: detected capacity change from 0 to 512 [ 1400.036174][T11150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.043061][T18707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1400.070086][T18707] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1400.150618][T18707] EXT4-fs (loop1): 1 truncate cleaned up [ 1400.189025][T18707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1400.458474][T18714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2599'. [ 1401.026668][T16513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.443491][T18721] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1403.233641][T18742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2606'. [ 1403.243336][T18742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2606'. [ 1405.714508][T18763] loop2: detected capacity change from 0 to 128 [ 1407.233579][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2616'. [ 1407.242749][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2616'. [ 1407.640600][T18791] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1410.486637][T18810] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2622'. [ 1410.496043][T18810] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2622'. [ 1411.463104][ T27] audit: type=1326 audit(1754701905.358:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1411.544429][ T27] audit: type=1326 audit(1754701905.358:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1411.610359][ T27] audit: type=1326 audit(1754701905.388:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1411.690392][ T27] audit: type=1326 audit(1754701905.388:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1411.759263][ T27] audit: type=1326 audit(1754701905.388:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1411.845895][ T27] audit: type=1326 audit(1754701905.388:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1411.935320][ T27] audit: type=1326 audit(1754701905.388:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1412.031847][ T27] audit: type=1326 audit(1754701905.388:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1412.116905][ T27] audit: type=1326 audit(1754701905.388:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1412.190447][ T27] audit: type=1326 audit(1754701905.388:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.6.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1412.219280][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1412.280262][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1412.504473][T18839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2627'. [ 1415.274711][T18871] loop0: detected capacity change from 0 to 512 [ 1415.368859][T18871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.407891][T18871] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.547425][T18879] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2636'. [ 1415.619867][T18879] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2636'. [ 1415.622772][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.643710][T18910] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1420.961809][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2648'. [ 1420.979040][T18929] fuse: Bad value for 'fd' [ 1420.993348][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2648'. [ 1422.478244][ T5869] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1422.560839][T12462] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1422.690586][ T5869] usb 7-1: Using ep0 maxpacket: 8 [ 1422.719112][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.782479][ T5869] usb 7-1: config 0 has no interfaces? [ 1422.813991][ T5869] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1422.843746][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.920701][ T5869] usb 7-1: Product: syz [ 1422.925268][ T5869] usb 7-1: Manufacturer: syz [ 1422.931373][T12462] usb 1-1: Using ep0 maxpacket: 16 [ 1422.949563][ T5869] usb 7-1: SerialNumber: syz [ 1423.013711][ T5869] usb 7-1: config 0 descriptor?? [ 1423.020617][T12462] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.041361][T12462] usb 1-1: config 0 has no interfaces? [ 1423.053738][T12462] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1423.120674][T12462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.128737][T12462] usb 1-1: Product: syz [ 1423.147552][T12462] usb 1-1: Manufacturer: syz [ 1423.160617][T12462] usb 1-1: SerialNumber: syz [ 1423.171908][T12462] usb 1-1: config 0 descriptor?? [ 1423.206407][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.216168][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.302441][ T965] usb 7-1: USB disconnect, device number 16 [ 1423.401979][ T8] usb 1-1: USB disconnect, device number 15 [ 1424.456876][T18989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 1425.342072][T19001] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1427.714016][T19018] loop6: detected capacity change from 0 to 2048 [ 1427.809918][T19018] loop6: p3 < > p4 < > [ 1427.860460][T19018] loop6: partition table partially beyond EOD, truncated [ 1427.977396][T19018] loop6: p3 start 4284289 is beyond EOD, truncated [ 1428.176158][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1428.380653][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1428.392544][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.419760][ T8] usb 2-1: config 0 has no interfaces? [ 1428.434942][ T8] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1428.444589][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.452758][ T8] usb 2-1: Product: syz [ 1428.457084][ T8] usb 2-1: Manufacturer: syz [ 1428.462334][ T8] usb 2-1: SerialNumber: syz [ 1428.477979][ T8] usb 2-1: config 0 descriptor?? [ 1428.693805][ T28] usb 2-1: USB disconnect, device number 35 [ 1431.767333][T19060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2670'. [ 1432.041550][T19071] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1435.531292][T19091] loop1: detected capacity change from 0 to 128 [ 1435.573974][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1435.820376][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1435.828346][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.850371][ T8] usb 3-1: config 0 has no interfaces? [ 1435.868228][ T8] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1435.887795][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.909909][ T8] usb 3-1: Product: syz [ 1435.914131][ T8] usb 3-1: Manufacturer: syz [ 1435.948765][ T8] usb 3-1: SerialNumber: syz [ 1436.000174][ T8] usb 3-1: config 0 descriptor?? [ 1436.325801][T12462] usb 3-1: USB disconnect, device number 17 [ 1438.703841][T19123] loop0: detected capacity change from 0 to 512 [ 1438.731155][T19123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1438.788428][T19123] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1438.920919][T19123] EXT4-fs (loop0): 1 truncate cleaned up [ 1438.927832][T19123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.990139][T19159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2683'. [ 1440.081668][T19129] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1440.244927][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 1442.446636][T19185] loop1: detected capacity change from 0 to 128 [ 1444.658185][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.982280][T19245] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1449.927864][T19262] loop2: detected capacity change from 0 to 128 [ 1450.618155][T19276] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1450.667132][ T27] kauditd_printk_skb: 82 callbacks suppressed [ 1450.667148][ T27] audit: type=1326 audit(1754701944.550:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1450.740985][ T27] audit: type=1326 audit(1754701944.550:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1450.860213][ T27] audit: type=1326 audit(1754701944.560:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1450.884083][ T27] audit: type=1326 audit(1754701944.560:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1450.906871][ T27] audit: type=1326 audit(1754701944.560:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1450.929970][ T27] audit: type=1326 audit(1754701944.560:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1451.138821][ T27] audit: type=1326 audit(1754701944.560:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1451.189155][ T27] audit: type=1326 audit(1754701944.570:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1451.214236][ T27] audit: type=1326 audit(1754701944.570:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1451.657701][ T27] audit: type=1326 audit(1754701944.570:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.1.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a7f98d550 code=0x7ffc0000 [ 1454.843957][T19331] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1455.168197][T19335] loop6: detected capacity change from 0 to 128 [ 1456.525424][T19347] tipc: Started in network mode [ 1456.588393][T19347] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1456.630029][T19347] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1456.690165][T19347] tipc: Enabled bearer , priority 10 [ 1456.873470][T19357] overlayfs: failed to clone upperpath [ 1456.903933][T19359] loop2: detected capacity change from 0 to 512 [ 1457.289631][T19359] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2726: casefold flag without casefold feature [ 1457.305912][T19359] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2726: couldn't read orphan inode 15 (err -117) [ 1457.364739][T19359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.731366][ T28] tipc: Node number set to 1 [ 1457.850628][T19377] loop0: detected capacity change from 0 to 1024 [ 1457.892310][T19377] EXT4-fs: inline encryption not supported [ 1457.909774][T19379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2726'. [ 1458.100896][T19377] EXT4-fs: Ignoring removed bh option [ 1458.316718][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.486032][T19377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.392492][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 1460.517600][T19404] overlayfs: failed to clone upperpath [ 1460.574395][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.733473][T19412] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1463.804471][T19445] loop0: detected capacity change from 0 to 1024 [ 1463.850137][T19445] EXT4-fs: inline encryption not supported [ 1463.856070][T19445] EXT4-fs: Ignoring removed bh option [ 1464.000124][T19445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1464.128047][T19450] loop6: detected capacity change from 0 to 40427 [ 1464.236355][T19450] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1464.285901][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1464.305933][T19450] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1464.925024][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.985042][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1465.006960][ T8] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1465.032960][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.117682][ T8] usb 3-1: config 0 has no interface number 0 [ 1465.161256][ T8] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1465.203325][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.242295][ T8] usb 3-1: Product: syz [ 1465.257146][ T8] usb 3-1: Manufacturer: syz [ 1465.274767][ T8] usb 3-1: SerialNumber: syz [ 1465.298677][ T8] usb 3-1: config 0 descriptor?? [ 1465.310857][T19472] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1465.377163][ T8] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 1465.392175][ T8] usb 3-1: No valid video chain found. [ 1465.598167][ T8] usb 3-1: USB disconnect, device number 18 [ 1468.003996][T11150] bio_check_eod: 1146 callbacks suppressed [ 1468.004015][T11150] syz-executor: attempt to access beyond end of device [ 1468.004015][T11150] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1468.038804][T11150] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1468.485765][T19512] loop0: detected capacity change from 0 to 1024 [ 1468.521948][T19512] EXT4-fs: inline encryption not supported [ 1468.593540][T19512] EXT4-fs: Ignoring removed bh option [ 1468.728946][T19512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1469.863585][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.049535][T19532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2763'. [ 1477.640531][T19617] CIFS: iocharset name too long [ 1480.685299][T19655] CIFS: iocharset name too long [ 1483.354711][T19691] loop6: detected capacity change from 0 to 128 [ 1484.644562][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.656457][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.114124][T19726] loop6: detected capacity change from 0 to 512 [ 1486.271930][T19726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1486.395658][T19726] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1486.540735][T11150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.488871][T19743] CIFS: iocharset name too long [ 1489.093399][T19770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2818'. [ 1489.919391][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 1489.919407][ T27] audit: type=1326 audit(1754701983.812:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1489.997092][ T27] audit: type=1326 audit(1754701983.842:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1490.067416][ T27] audit: type=1326 audit(1754701983.842:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1490.189548][ T27] audit: type=1326 audit(1754701983.842:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1490.243859][ T27] audit: type=1326 audit(1754701983.842:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1490.980838][ T27] audit: type=1326 audit(1754701983.842:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1491.395128][ T27] audit: type=1326 audit(1754701983.842:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1491.575938][ T27] audit: type=1326 audit(1754701983.842:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1491.619557][ T27] audit: type=1326 audit(1754701983.842:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1491.740146][ T27] audit: type=1326 audit(1754701983.842:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19773 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf8118d550 code=0x7ffc0000 [ 1493.619773][T19802] CIFS: iocharset name too long [ 1495.008198][ T1153] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1495.276756][ T1153] usb 1-1: Using ep0 maxpacket: 32 [ 1495.313337][ T1153] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1495.519734][ T1153] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1495.759360][ T1153] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1495.831692][ T1153] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1495.936912][ T1153] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1495.964010][ T1153] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1495.983837][ T1153] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1496.026805][ T1153] usb 1-1: Product: syz [ 1496.031154][ T1153] usb 1-1: Manufacturer: syz [ 1496.035770][ T1153] usb 1-1: SerialNumber: syz [ 1496.133366][ T1153] usb 1-1: config 0 descriptor?? [ 1496.184572][ T1153] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1496.251666][ T1153] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1497.009646][ T1153] usb 1-1: USB disconnect, device number 16 [ 1497.053540][ T1153] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1498.203060][T19857] loop2: detected capacity change from 0 to 256 [ 1498.262375][T19857] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1499.263389][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 1499.263672][ T27] audit: type=1326 audit(1754701993.153:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1499.449640][ T27] audit: type=1326 audit(1754701993.193:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1499.558601][ T27] audit: type=1326 audit(1754701993.223:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1499.634702][ T27] audit: type=1326 audit(1754701993.223:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1499.802435][ T27] audit: type=1326 audit(1754701993.223:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1499.863254][ T27] audit: type=1326 audit(1754701993.253:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1500.179017][ T27] audit: type=1326 audit(1754701993.343:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1500.623128][ T27] audit: type=1326 audit(1754701993.343:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1500.767759][ T27] audit: type=1326 audit(1754701993.343:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1501.110866][ T27] audit: type=1326 audit(1754701993.343:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19867 comm="syz.0.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1505.942551][ T27] kauditd_printk_skb: 82 callbacks suppressed [ 1505.942565][ T27] audit: type=1326 audit(1754701999.833:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1505.990028][ T27] audit: type=1326 audit(1754701999.873:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1506.054078][ T27] audit: type=1326 audit(1754701999.873:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1506.116002][ T27] audit: type=1326 audit(1754701999.873:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1506.196818][ T27] audit: type=1326 audit(1754701999.873:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1506.275707][ T27] audit: type=1326 audit(1754701999.873:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1506.395569][ T27] audit: type=1326 audit(1754701999.873:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1506.433231][ T27] audit: type=1326 audit(1754701999.873:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1506.456000][ T27] audit: type=1326 audit(1754701999.873:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d7858d550 code=0x7ffc0000 [ 1506.486058][ T27] audit: type=1326 audit(1754701999.873:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19959 comm="syz.0.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7858ebe9 code=0x7ffc0000 [ 1507.244828][T19944] loop6: detected capacity change from 0 to 40427 [ 1507.405004][T19944] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1507.637652][T19944] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1508.132688][T11150] syz-executor: attempt to access beyond end of device [ 1508.132688][T11150] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1508.181264][T11150] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1510.223416][T20037] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1512.653039][T20068] loop6: detected capacity change from 0 to 40427 [ 1512.674770][T20068] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1512.803453][T20068] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1513.111613][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 1513.111629][ T27] audit: type=1326 audit(1754702007.004:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1513.200418][ T27] audit: type=1326 audit(1754702007.044:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1513.223726][ T27] audit: type=1326 audit(1754702007.044:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1513.321332][ T27] audit: type=1326 audit(1754702007.044:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1513.378607][T11150] syz-executor: attempt to access beyond end of device [ 1513.378607][T11150] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1513.584292][T11150] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1517.366020][T20092] loop0: detected capacity change from 0 to 256 [ 1517.473091][ T27] audit: type=1326 audit(1754702007.044:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1518.300647][T20092] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1518.703881][ T27] audit: type=1326 audit(1754702007.044:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1518.770434][ T27] audit: type=1326 audit(1754702007.044:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1518.815221][ T27] audit: type=1326 audit(1754702007.044:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1518.899759][ T27] audit: type=1326 audit(1754702007.054:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1518.991650][ T27] audit: type=1326 audit(1754702007.054:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a7f98d550 code=0x7ffc0000 [ 1519.055527][ T27] audit: type=1326 audit(1754702007.054:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1519.175261][ T27] audit: type=1326 audit(1754702007.054:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1519.255255][ T27] audit: type=1326 audit(1754702007.054:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1519.328062][ T27] audit: type=1326 audit(1754702007.054:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1519.430010][ T27] audit: type=1326 audit(1754702007.054:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f98ebe9 code=0x7ffc0000 [ 1520.264458][T20125] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1522.037543][ T5795] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 1522.514590][ T5795] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1523.907011][T20193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2907'. [ 1525.181606][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 1525.181622][ T27] audit: type=1326 audit(1754702019.074:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1525.352668][ T27] audit: type=1326 audit(1754702019.074:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1525.462062][ T27] audit: type=1326 audit(1754702019.074:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1525.798108][ T27] audit: type=1326 audit(1754702019.074:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1525.946815][T20205] loop6: detected capacity change from 0 to 1024 [ 1525.982106][ T27] audit: type=1326 audit(1754702019.074:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1526.000077][T20205] EXT4-fs: inline encryption not supported [ 1526.075108][T20205] EXT4-fs: Ignoring removed bh option [ 1526.078532][ T5795] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1526.091753][ T5795] Bluetooth: hci3: Injecting HCI hardware error event [ 1526.101918][ T5795] Bluetooth: hci3: hardware error 0x00 [ 1526.156585][ T27] audit: type=1326 audit(1754702019.074:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1526.246060][T20215] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1526.271484][T20205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1526.294927][ T27] audit: type=1326 audit(1754702019.074:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1526.325264][ T27] audit: type=1326 audit(1754702019.074:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1526.526058][ T27] audit: type=1326 audit(1754702019.074:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1526.549089][ T27] audit: type=1326 audit(1754702019.084:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20198 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510418ebe9 code=0x7ffc0000 [ 1528.161000][ T5795] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1528.873197][T20260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1528.993258][T11150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1529.804704][T12958] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1529.994724][T12958] usb 7-1: Using ep0 maxpacket: 8 [ 1530.023156][T12958] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1530.054351][T12958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.075666][T12958] usb 7-1: Product: syz [ 1530.084925][T12958] usb 7-1: Manufacturer: syz [ 1530.093280][T12958] usb 7-1: SerialNumber: syz [ 1530.113906][T12958] usb 7-1: config 0 descriptor?? [ 1530.358863][T12958] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1532.089446][T20316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2929'. [ 1532.746011][T12958] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1533.004056][T12958] usb 7-1: USB disconnect, device number 17 [ 1533.547381][T20322] overlayfs: failed to resolve './file1': -2 [ 1533.811933][T20331] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1534.307880][T20339] loop6: detected capacity change from 0 to 40427 [ 1534.422658][T20339] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1534.504366][T20339] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1535.098528][T11150] syz-executor: attempt to access beyond end of device [ 1535.098528][T11150] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1535.136363][T11150] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1536.356305][T20379] loop2: detected capacity change from 0 to 512 [ 1536.415221][T20379] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2944: casefold flag without casefold feature [ 1536.495354][T20379] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2944: couldn't read orphan inode 15 (err -117) [ 1536.664247][T20379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.924366][T20395] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2944'. [ 1539.409863][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.928196][T20412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1541.908989][T20426] overlayfs: failed to resolve './file1': -2 [ 1542.893877][T20430] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1545.471588][T20471] overlayfs: failed to resolve './file1': -2 [ 1546.095202][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.101640][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.335520][T20611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1555.566907][T20616] netlink: 'syz.6.2997': attribute type 11 has an invalid length. [ 1555.575624][T20616] netlink: 'syz.6.2997': attribute type 8 has an invalid length. [ 1557.293432][T20649] overlay: ./file0 is not a directory [ 1557.317849][T20650] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3001'. [ 1557.663108][T20644] overlayfs: failed to resolve './file1': -2 [ 1559.809335][T20690] loop0: detected capacity change from 0 to 512 [ 1559.887996][T20693] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1560.543454][T20690] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.3013: casefold flag without casefold feature [ 1560.604645][T20690] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3013: couldn't read orphan inode 15 (err -117) [ 1560.670121][T20690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1560.711743][T20701] overlayfs: failed to resolve './file1': -2 [ 1561.116472][T20709] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1561.566501][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.416841][T20731] loop0: detected capacity change from 0 to 512 [ 1562.547762][T20731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1563.884499][T20731] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.347874][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.437911][T20750] overlayfs: failed to resolve './file1': -2 [ 1567.365647][T20811] overlayfs: failed to resolve './file1': -2 [ 1568.395777][T20831] CIFS: iocharset name too long [ 1570.943025][T20878] CIFS: iocharset name too long [ 1571.124312][T20880] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1576.382128][T20942] CIFS: iocharset name too long [ 1579.202319][T20985] CIFS: iocharset name too long [ 1583.766556][T21039] CIFS: iocharset name too long [ 1584.510129][T12189] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1584.718967][T12189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.735721][T12189] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1584.745705][T12189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.791251][T12189] usb 1-1: config 0 descriptor?? [ 1584.817994][T12189] pwc: Askey VC010 type 2 USB webcam detected. [ 1585.373300][T12189] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1585.383770][T12189] pwc: recv_control_msg error -32 req 02 val 2700 [ 1585.397133][T12189] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1585.405738][T12189] pwc: recv_control_msg error -32 req 04 val 1000 [ 1585.416235][T12189] pwc: recv_control_msg error -32 req 04 val 1300 [ 1585.425289][T12189] pwc: recv_control_msg error -32 req 04 val 1400 [ 1585.468819][T12189] pwc: recv_control_msg error -32 req 02 val 2000 [ 1585.483500][T12189] pwc: recv_control_msg error -32 req 02 val 2100 [ 1585.491766][T12189] pwc: recv_control_msg error -32 req 04 val 1500 [ 1585.712499][T12189] pwc: recv_control_msg error -71 req 02 val 2400 [ 1585.720381][T12189] pwc: recv_control_msg error -71 req 02 val 2600 [ 1585.741211][T12189] pwc: recv_control_msg error -71 req 02 val 2900 [ 1585.754979][T12189] pwc: recv_control_msg error -71 req 02 val 2800 [ 1585.788952][T12189] pwc: recv_control_msg error -71 req 04 val 1100 [ 1585.805269][T12189] pwc: recv_control_msg error -71 req 04 val 1200 [ 1585.837021][T12189] pwc: Registered as video103. [ 1585.857006][T12189] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input74 [ 1585.939058][T12189] usb 1-1: USB disconnect, device number 17 [ 1586.161383][T21074] CIFS: iocharset name too long [ 1586.784193][T21079] overlay: ./file0 is not a directory [ 1586.792901][T21079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3108'. [ 1590.675154][T21115] overlay: ./file0 is not a directory [ 1590.700337][T21115] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3119'. [ 1591.379734][T21116] CIFS: iocharset name too long [ 1597.650168][T21170] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1597.759272][T21173] CIFS: iocharset name too long [ 1598.163047][ T5795] Bluetooth: hci4: unexpected event for opcode 0x0030 [ 1600.784893][T21209] CIFS: iocharset name too long [ 1600.932354][T21212] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1602.231024][ T5795] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1602.242756][ T5795] Bluetooth: hci4: Injecting HCI hardware error event [ 1602.265323][ T5795] Bluetooth: hci4: hardware error 0x00 [ 1602.407497][T21231] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 1603.557223][T21248] CIFS: iocharset name too long [ 1604.425479][ T5795] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1605.218721][T21271] overlay: ./file0 is not a directory [ 1605.279597][T21272] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3172'. [ 1606.002175][ T5795] Bluetooth: hci1: unexpected event for opcode 0x0005 [ 1607.174155][T21285] CIFS: iocharset name too long [ 1607.523945][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.537240][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.705198][T21295] loop2: detected capacity change from 0 to 512 [ 1607.750128][T21295] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3182: casefold flag without casefold feature [ 1607.775234][T21295] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3182: couldn't read orphan inode 15 (err -117) [ 1607.818397][T21295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.440663][T21308] overlay: ./file0 is not a directory [ 1608.479880][T21308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3182'. [ 1608.951085][T13312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.073354][T21318] CIFS: iocharset name too long [ 1610.112295][T21332] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1611.122756][T21343] loop0: detected capacity change from 0 to 512 [ 1611.195289][T21343] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.3199: casefold flag without casefold feature [ 1611.213915][T21343] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3199: couldn't read orphan inode 15 (err -117) [ 1611.229089][T21343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1611.744929][T21351] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1612.967299][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.088205][T21354] CIFS: iocharset name too long [ 1616.381265][T21390] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1620.599547][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 1621.550813][T21461] overlay: ./file0 is not a directory [ 1623.850645][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 1624.415491][T21503] overlay: ./file0 is not a directory [ 1625.774160][T21512] overlayfs: failed to resolve './file1': -2 [ 1626.228976][T21530] CIFS: iocharset name too long [ 1626.496276][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3251'. [ 1626.564040][T21543] overlay: ./file0 is not a directory [ 1628.244952][T21562] overlayfs: failed to resolve './file1': -2 [ 1628.722041][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 1630.102585][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3267'. [ 1632.778338][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3275'. [ 1635.832074][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3289'. [ 1639.268248][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1641.740870][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 1643.940775][T21788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1644.083884][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1646.243774][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3341'. [ 1646.766089][T21846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1650.396100][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1651.725148][T21904] overlayfs: missing 'lowerdir' [ 1661.577606][T22021] overlay: ./file0 is not a directory [ 1662.336321][T22019] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1665.283495][T22058] overlayfs: missing 'lowerdir' [ 1667.726786][T22087] overlayfs: missing 'lowerdir' [ 1668.963930][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.994080][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.283952][T22106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3432'. [ 1670.438784][T22121] overlayfs: missing 'lowerdir' [ 1672.136801][T22142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3444'. [ 1684.688890][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 1684.688907][ T27] audit: type=1326 audit(1754702178.593:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22304 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1684.751096][ T27] audit: type=1326 audit(1754702178.593:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22304 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1684.804771][ T27] audit: type=1326 audit(1754702178.623:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22304 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1684.838651][ T27] audit: type=1326 audit(1754704756.633:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22304 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8118ebe9 code=0x7ffc0000 [ 1685.914483][T22322] CIFS: iocharset name too long [ 1685.978308][T22328] overlayfs: failed to clone upperpath [ 1686.789378][T22338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1688.606969][T22359] CIFS: iocharset name too long [ 1690.633755][T22384] CIFS: iocharset name too long [ 1692.172887][T22413] CIFS: iocharset name too long [ 1692.701637][T22427] overlayfs: failed to resolve './file1': -2 [ 1694.446535][T22449] overlayfs: failed to resolve './file1': -2 [ 1696.463093][T22484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1696.484533][T22484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1696.902110][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 1697.488130][T22523] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1697.512394][T22523] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1698.131888][T22550] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1698.256146][T22550] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1701.220150][T22572] overlayfs: failed to resolve './file1': -2 [ 1701.884338][T22604] overlayfs: failed to resolve './file1': -2 [ 1704.091967][T22631] overlayfs: failed to resolve './file1': -2 [ 1706.338359][T21231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1706.351548][T21231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1706.360232][T21231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1706.391316][T21231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1706.408844][T21231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1706.417104][T21231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1707.588143][T22670] overlayfs: failed to resolve './file1': -2 [ 1708.371471][T22651] chnl_net:caif_netlink_parms(): no params data found [ 1708.543121][T21231] Bluetooth: hci2: command tx timeout [ 1708.620676][T22678] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1709.708094][T22651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.733710][T22651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.747268][T22651] bridge_slave_0: entered allmulticast mode [ 1709.756299][T22651] bridge_slave_0: entered promiscuous mode [ 1709.972042][T22651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.980872][T22651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.988700][T22651] bridge_slave_1: entered allmulticast mode [ 1709.995794][T22651] bridge_slave_1: entered promiscuous mode [ 1710.649376][T21231] Bluetooth: hci2: command tx timeout [ 1710.708668][T22699] overlayfs: failed to resolve './file1': -2 [ 1710.818000][T22651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1710.956858][T22651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.214395][T22651] team0: Port device team_slave_0 added [ 1711.549867][T22651] team0: Port device team_slave_1 added [ 1711.919647][T22717] bridge_slave_0: left allmulticast mode [ 1711.952558][T22717] bridge_slave_0: left promiscuous mode [ 1711.958376][T22717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.137789][T22717] bridge_slave_1: left allmulticast mode [ 1712.161179][T22717] bridge_slave_1: left promiscuous mode [ 1712.190968][T22717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.658690][T22717] bond0: (slave bond_slave_0): Releasing backup interface [ 1712.704594][T21231] Bluetooth: hci2: command tx timeout [ 1712.925191][T22717] bond0: (slave bond_slave_1): Releasing backup interface [ 1713.029024][T22717] team0: Port device team_slave_0 removed [ 1713.052235][T22717] team0: Port device team_slave_1 removed [ 1713.087612][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.097564][T22717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.111161][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.135245][T22717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.420974][T22651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.488177][T22651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.631740][T22651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.181637][T22651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.218576][T22651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.299236][T22651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.820300][T21231] Bluetooth: hci2: command tx timeout [ 1715.685734][T22651] hsr_slave_0: entered promiscuous mode [ 1715.707951][T22651] hsr_slave_1: entered promiscuous mode [ 1715.954253][T22651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1716.054008][T22651] Cannot create hsr debugfs directory [ 1716.283183][ T6002] bond0: (slave wlan1): Releasing backup interface [ 1717.229779][ T6002] hsr_slave_0: left promiscuous mode [ 1717.290957][ T6002] hsr_slave_1: left promiscuous mode [ 1717.309188][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.321606][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.391242][ T6002] bridge_slave_1: left allmulticast mode [ 1717.406483][ T6002] bridge_slave_1: left promiscuous mode [ 1717.426638][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.455974][ T6002] bridge_slave_0: left allmulticast mode [ 1718.475628][ T6002] bridge_slave_0: left promiscuous mode [ 1718.496841][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.055002][ T6002] pim6reg (unregistering): left allmulticast mode [ 1719.787386][ T6002] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1720.021299][ T6002] bond1 (unregistering): Released all slaves [ 1720.572391][ T6002] team0 (unregistering): Port device team_slave_1 removed [ 1720.646142][ T6002] team0 (unregistering): Port device team_slave_0 removed [ 1720.709559][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1720.780147][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1721.572380][ T6002] bond0 (unregistering): Released all slaves [ 1722.337331][T22827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3672'. [ 1723.377342][T22846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3677'. [ 1723.468053][T22845] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1724.656990][T22651] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1724.678393][T22651] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1724.701313][T22651] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1724.715656][T22651] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1725.512403][T22651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.554911][T22651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.590088][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.597362][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.639664][T22893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1725.646859][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.655802][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1725.823636][T22651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1728.123879][T22651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1728.426234][T22945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1730.332872][T22651] veth0_vlan: entered promiscuous mode [ 1730.388057][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.395867][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.424346][T22651] veth1_vlan: entered promiscuous mode [ 1730.518939][T22651] veth0_macvtap: entered promiscuous mode [ 1730.558165][T22651] veth1_macvtap: entered promiscuous mode [ 1730.623653][T22651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1730.655254][T22651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1730.683120][T22651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1730.707211][T22651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1730.733988][T22651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1730.762302][T22651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.783720][T22651] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.818986][T22651] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.869186][T22651] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.916300][T22651] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.118661][T15945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.149354][T15945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1731.739872][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.765106][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.090707][T23009] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1737.651462][T23096] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1747.516313][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 1749.032027][T21231] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1749.041206][T21231] Bluetooth: hci2: Injecting HCI hardware error event [ 1749.051694][T21231] Bluetooth: hci2: hardware error 0x00 [ 1751.217814][T21231] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1753.515225][T21231] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 1753.549262][T23260] overlayfs: failed to resolve './file1': -2 [ 1756.060042][T23281] netlink: 'syz.1.3775': attribute type 2 has an invalid length. [ 1756.248284][T23282] CIFS: iocharset name too long [ 1757.766487][T21231] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1757.775641][T21231] Bluetooth: hci0: Injecting HCI hardware error event [ 1757.786839][ T5795] Bluetooth: hci0: hardware error 0x00 [ 1760.212692][T23300] overlayfs: failed to resolve './file1': -2 [ 1761.480001][T23314] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1761.493143][T23314] PKCS7: Only support pkcs7_signedData type [ 1762.000346][ T5795] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1762.075094][T23322] CIFS: iocharset name too long [ 1762.533114][T23324] loop6: detected capacity change from 0 to 40427 [ 1762.782040][T23324] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1762.864760][T23324] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1763.605404][T23339] overlayfs: failed to resolve './file1': -2 [ 1764.394908][T22651] syz-executor: attempt to access beyond end of device [ 1764.394908][T22651] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1764.628497][T22651] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1765.870955][T23358] CIFS: iocharset name too long [ 1768.306150][T23399] CIFS: iocharset name too long [ 1769.509520][T23406] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1771.194524][T23428] CIFS: iocharset name too long [ 1771.204246][T23430] overlayfs: failed to resolve './file1': -2 [ 1772.616271][T23450] loop6: detected capacity change from 0 to 1024 [ 1772.629674][T23450] EXT4-fs: inline encryption not supported [ 1772.637486][T23450] EXT4-fs: Ignoring removed bh option [ 1772.663203][T23450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1774.518828][T22651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.740287][T23468] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1774.790115][T23471] overlayfs: failed to resolve './file1': -2 [ 1775.970901][T23479] netlink: 'syz.2.3837': attribute type 3 has an invalid length. [ 1777.864285][T23511] overlayfs: failed to clone upperpath [ 1780.773516][T23538] vlan0: entered promiscuous mode [ 1780.917178][T23538] team0: Port device vlan0 added [ 1781.095114][T23544] CIFS: iocharset name too long [ 1783.270683][T23564] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1784.468686][ T5795] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 1786.974806][T23614] syz_tun: entered allmulticast mode [ 1787.075730][T23611] syz_tun: left allmulticast mode [ 1788.977816][ T5795] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1788.987191][ T5795] Bluetooth: hci1: Injecting HCI hardware error event [ 1788.997562][ T5795] Bluetooth: hci1: hardware error 0x00 [ 1791.694030][ T5795] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1791.826043][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.832386][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.135885][T23689] kAFS: unable to lookup cell '' [ 1795.063723][T23699] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1796.440696][T23712] binder: 23711:23712 ioctl 4018620d 0 returned -22 [ 1796.448295][T23712] binder: 23711:23712 unknown command 0 [ 1796.454022][T23712] binder: 23711:23712 ioctl c0306201 2000000003c0 returned -22 [ 1799.293588][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1815.281619][T23923] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1821.870920][T23990] futex_wake_op: syz.1.3993 tries to shift op by 144; fix this program [ 1824.517631][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1824.540905][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1824.567717][T24007] netlink: 'syz.2.3997': attribute type 18 has an invalid length. [ 1825.143210][T24013] serio: Serial port ptm0 [ 1825.939689][T24019] loop6: detected capacity change from 0 to 1024 [ 1825.947133][T24019] EXT4-fs: inline encryption not supported [ 1825.962358][T24019] EXT4-fs: Ignoring removed bh option [ 1826.003963][T24019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.847845][T22651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.101281][T24052] loop6: detected capacity change from 0 to 512 [ 1828.118237][T24052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1828.155619][T24052] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1828.196115][T24052] EXT4-fs (loop6): 1 truncate cleaned up [ 1828.205020][T24052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1829.653156][T22651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1834.728403][ T8] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1834.907833][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1834.915373][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.927006][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.937731][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1834.946812][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.956902][ T8] usb 7-1: config 0 descriptor?? [ 1834.975030][ T8] hub 7-1:0.0: USB hub found [ 1835.292562][ T8] hub 7-1:0.0: 1 port detected [ 1836.027895][ T8] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1836.077050][ T8] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1836.089794][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 1836.095854][ T8] usbhid: probe of 7-1:0.0 failed with error -71 [ 1836.167763][ T8] usb 7-1: USB disconnect, device number 18 [ 1839.345759][T24186] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1839.355467][T24186] macvtap1: entered allmulticast mode [ 1839.362415][T24186] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1839.662121][T24186] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1839.669706][T24186] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1839.775822][T24180] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1839.783352][T24180] macvtap1: entered allmulticast mode [ 1839.788834][T24180] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1839.799988][T24180] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1839.807379][T24180] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1841.152712][T24217] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1841.290829][T24217] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1841.492069][T24229] kvm: pic: non byte write [ 1841.609954][T24217] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1848.515301][T21231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1848.529234][T21231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1848.541434][T21231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1848.555107][T21231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1848.676519][T21231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1848.693626][T21231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1849.495508][ T5993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.271810][ T5993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.548685][ T5993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.827360][T21231] Bluetooth: hci0: command tx timeout [ 1850.877887][ T5993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.310592][T24338] loop6: detected capacity change from 0 to 256 [ 1851.503477][T24338] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1851.751448][T24303] chnl_net:caif_netlink_parms(): no params data found [ 1852.867275][T21231] Bluetooth: hci0: command tx timeout [ 1853.071207][T24303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.088042][T24303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.095323][T24303] bridge_slave_0: entered allmulticast mode [ 1853.184631][T24303] bridge_slave_0: entered promiscuous mode [ 1853.203226][ T5993] tipc: Disabling bearer [ 1853.213101][ T5993] tipc: Left network mode [ 1853.218399][T24303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.239951][T24303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.749385][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.755921][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.004335][T24303] bridge_slave_1: entered allmulticast mode [ 1854.020680][T24360] slcan: can't register candev [ 1854.026373][T24360] Falling back ldisc for ttyS3. [ 1854.100311][T24303] bridge_slave_1: entered promiscuous mode [ 1854.925564][T21231] Bluetooth: hci0: command tx timeout [ 1855.824496][T24303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1855.997565][T24303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1858.508216][T21231] Bluetooth: hci0: command tx timeout [ 1858.779892][T24303] team0: Port device team_slave_0 added [ 1858.980985][T24303] team0: Port device team_slave_1 added [ 1859.801730][T24406] lo speed is unknown, defaulting to 1000 [ 1859.853128][T24303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1859.870495][T24303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1859.944865][T24303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.961801][T24406] lo speed is unknown, defaulting to 1000 [ 1859.970620][T24406] lo speed is unknown, defaulting to 1000 [ 1859.981499][T24406] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1859.994971][T24406] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 1860.024398][T24406] lo speed is unknown, defaulting to 1000 [ 1860.031438][T24406] lo speed is unknown, defaulting to 1000 [ 1860.039097][T24406] lo speed is unknown, defaulting to 1000 [ 1860.045723][T24406] lo speed is unknown, defaulting to 1000 [ 1860.052481][T24406] lo speed is unknown, defaulting to 1000 [ 1860.242305][T24303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.255376][T24303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.317762][T24303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1860.444256][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 1860.640861][T24423] syz_tun (unregistering): left promiscuous mode [ 1861.889299][T24303] hsr_slave_0: entered promiscuous mode [ 1861.903202][T24303] hsr_slave_1: entered promiscuous mode [ 1863.231085][ T5993] hsr_slave_0: left promiscuous mode [ 1863.242052][ T5993] hsr_slave_1: left promiscuous mode [ 1863.259070][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1863.275057][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.292188][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1863.312544][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1863.335346][ T5993] bridge_slave_1: left allmulticast mode [ 1863.345548][ T5993] bridge_slave_1: left promiscuous mode [ 1863.361561][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.380981][ T5993] bridge_slave_0: left allmulticast mode [ 1863.391546][ T5993] bridge_slave_0: left promiscuous mode [ 1863.403460][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.615703][ T5993] veth1_vlan: left promiscuous mode [ 1864.836729][ T5993] team0 (unregistering): Port device vlan0 removed [ 1865.348691][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 1865.524692][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 1865.647372][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.447852][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1868.618448][ T5993] bond0 (unregistering): Released all slaves [ 1869.564457][ T5993] IPVS: stop unused estimator thread 0... [ 1872.475562][T24303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1872.502476][T24303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1872.525799][T24303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1872.563949][T24303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1872.928653][T24303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1874.038851][T24303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1874.185783][T15945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.192934][T15945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1874.258246][T15945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.265487][T15945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.627457][T24303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1876.405501][T24303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1876.595251][T24303] veth0_vlan: entered promiscuous mode [ 1876.608879][T24303] veth1_vlan: entered promiscuous mode [ 1876.880087][T24303] veth0_macvtap: entered promiscuous mode [ 1876.891406][T24303] veth1_macvtap: entered promiscuous mode [ 1876.912935][T24303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1876.924093][T24303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.936564][T24303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.947494][T24303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.958806][T24303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.970703][T24303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.983104][T24303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.992097][T24303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.007676][T24303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.040637][T24303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.657072][T15945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.725986][T15945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.377618][T16812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.418005][T16812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.776499][T24658] veth1_macvtap: left promiscuous mode [ 1882.782150][T24658] macsec0: entered promiscuous mode [ 1882.792242][T24655] veth1_macvtap: entered promiscuous mode [ 1882.798568][T24655] macsec0: left promiscuous mode [ 1882.952696][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4162'. [ 1882.961767][T24663] netlink: 'syz.6.4162': attribute type 30 has an invalid length. [ 1882.983656][T24663] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1882.992833][T24663] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1883.001727][T24663] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1883.010776][T24663] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1883.025474][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4162'. [ 1883.034607][T24663] netlink: 'syz.6.4162': attribute type 30 has an invalid length. [ 1884.802979][T24681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4165'. [ 1885.220114][T21231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1885.239688][T21231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1885.249492][T21231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1885.260934][T21231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1885.273981][T21231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1885.281826][T21231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1885.717669][T16812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.738897][T24705] ceph: No mds server is up or the cluster is laggy [ 1886.750556][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 1886.871807][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 1887.247148][T16812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.385544][T24688] lo speed is unknown, defaulting to 1000 [ 1887.411641][ T5795] Bluetooth: hci3: command tx timeout [ 1887.996268][T16812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.337898][T16812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.624752][T24745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1889.481393][ T5795] Bluetooth: hci3: command tx timeout [ 1890.060384][T24688] chnl_net:caif_netlink_parms(): no params data found [ 1890.236212][T24772] netlink: 'syz.2.4185': attribute type 3 has an invalid length. [ 1891.561178][ T5795] Bluetooth: hci3: command tx timeout [ 1892.097434][T24688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.120470][T24688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.128805][T24688] bridge_slave_0: entered allmulticast mode [ 1892.145015][T24688] bridge_slave_0: entered promiscuous mode [ 1892.230249][T24688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.251293][T24688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.279026][T24688] bridge_slave_1: entered allmulticast mode [ 1892.292653][T24688] bridge_slave_1: entered promiscuous mode [ 1892.497993][T24688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.549325][T24688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.597796][T24688] team0: Port device team_slave_0 added [ 1892.657522][T24688] team0: Port device team_slave_1 added [ 1892.804513][T24688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.822361][T24688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.019030][T24688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.032191][T24688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.039256][T24688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.094628][T24688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.728292][ T5795] Bluetooth: hci3: command tx timeout [ 1893.937143][T24688] hsr_slave_0: entered promiscuous mode [ 1894.093445][T24688] hsr_slave_1: entered promiscuous mode [ 1894.668949][T24830] loop2: detected capacity change from 0 to 256 [ 1895.164983][T24830] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1895.305734][T16812] IPVS: stopping backup sync thread 23564 ... [ 1895.365443][T24688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1895.373164][T24688] Cannot create hsr debugfs directory [ 1895.937870][T24842] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1896.731143][ T5795] Bluetooth: hci0: failed to read key size for handle 201 [ 1897.677771][T16812] batadv_slave_1: left promiscuous mode [ 1897.828873][T16812] hsr_slave_0: left promiscuous mode [ 1897.839021][T16812] hsr_slave_1: left promiscuous mode [ 1898.112936][T16812] veth1_vlan: left promiscuous mode [ 1899.276738][T24876] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1900.305901][T16812] team0 (unregistering): Port device vlan0 removed [ 1900.760210][ T5795] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1900.771891][ T5795] Bluetooth: hci0: Injecting HCI hardware error event [ 1900.792390][T21231] Bluetooth: hci0: hardware error 0x00 [ 1902.424801][T16812] bond0 (unregistering): Released all slaves [ 1902.870139][T21231] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1904.416828][T24920] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1904.437191][ T5869] IPVS: starting estimator thread 0... [ 1904.624207][T16812] IPVS: stop unused estimator thread 0... [ 1904.677138][T24921] IPVS: using max 16 ests per chain, 38400 per kthread [ 1905.724372][T24934] can0: slcan on ttyS3. [ 1906.145548][T24930] can0 (unregistered): slcan off ttyS3. [ 1907.031277][T24688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1907.097172][T24688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1907.157253][T24688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1907.770564][T24688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1908.353961][T24688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1908.411115][T24688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1908.448298][T16812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.455546][T16812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1908.521962][T16812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.529302][T16812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1909.925654][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1911.360277][T25019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.367690][T25019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.692026][T25019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1911.730678][T25019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1912.103393][T25019] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.121488][T25019] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.130877][T25019] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.140082][T25019] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.851769][T24688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1912.984554][T24688] veth0_vlan: entered promiscuous mode [ 1913.070811][T24688] veth1_vlan: entered promiscuous mode [ 1913.229379][T25057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1913.336128][T24688] veth0_macvtap: entered promiscuous mode [ 1913.418293][T24688] veth1_macvtap: entered promiscuous mode [ 1913.439904][T24688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.475282][T24688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1914.179614][T24688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1914.244517][T24688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1914.290051][T24688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1914.301525][T24688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1914.317654][T24688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.328427][T24688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.347402][T24688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.375132][T24688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.587604][T15945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.620218][T15945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.684078][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.690881][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.770199][T15945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.778071][T15945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.906731][T25110] loop0: detected capacity change from 0 to 256 [ 1917.959370][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4261'. [ 1918.199456][T25110] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1920.293860][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'. [ 1921.137189][T25166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4275'. [ 1924.262382][T25200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4287'. [ 1926.192272][T25210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4286'. [ 1928.774822][T25241] loop2: detected capacity change from 0 to 256 [ 1928.983244][T25241] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1929.398501][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4298'. [ 1929.980666][T25258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1932.911847][T25290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4308'. [ 1933.940314][T25302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input76 [ 1935.556198][T21231] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1935.565359][T21231] Bluetooth: hci3: Injecting HCI hardware error event [ 1935.576070][T21231] Bluetooth: hci3: hardware error 0x00 [ 1937.166388][T25333] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1937.215819][ T5869] IPVS: starting estimator thread 0... [ 1937.696454][T25334] IPVS: using max 18 ests per chain, 43200 per kthread [ 1938.019627][T21231] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1938.034642][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4319'. [ 1938.976549][T25348] loop0: detected capacity change from 0 to 40427 [ 1939.016437][T25348] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1939.054943][T25348] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1939.903151][T24688] syz-executor: attempt to access beyond end of device [ 1939.903151][T24688] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1939.937936][T24688] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1941.947463][T25403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4329'. [ 1943.255974][T25412] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1943.739511][T25423] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4337'. [ 1943.801980][T25419] loop2: detected capacity change from 0 to 40427 [ 1943.810792][T25423] unsupported nlmsg_type 40 [ 1943.859841][T25419] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1943.915899][T25419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1944.758434][T24303] syz-executor: attempt to access beyond end of device [ 1944.758434][T24303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1944.804277][T24303] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1945.598783][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4341'. [ 1946.399606][T25455] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4344'. [ 1946.764786][ T5869] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1947.024792][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 1947.446047][ T5869] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1947.584833][ T5869] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1947.608422][ T5869] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1947.634779][ T5869] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1947.649377][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1947.660632][ T5869] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1947.674991][ T5869] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1947.687065][ T5869] usb 3-1: Product: syz [ 1947.692481][ T5869] usb 3-1: Manufacturer: syz [ 1947.706373][ T5869] usb 3-1: SerialNumber: syz [ 1947.725990][ T5869] usb 3-1: config 0 descriptor?? [ 1947.737343][ T5869] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1947.754353][ T5869] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1948.580717][T12462] usb 3-1: USB disconnect, device number 19 [ 1948.580753][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1948.610098][T25453] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1948.682997][T12462] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1950.321445][T25492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'. [ 1951.788064][T25517] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1954.539324][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4364'. [ 1955.943471][T25571] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1957.381918][T25583] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4373'. [ 1958.218090][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4375'. [ 1960.428149][T25614] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1962.347695][T25633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4386'. [ 1963.856265][T25320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1963.875590][T25320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1963.885103][T25320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1963.900042][T25320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1963.911021][T25320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1963.980572][T16812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.005772][T25320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1964.226579][T16812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.609539][T16812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.664568][T25645] chnl_net:caif_netlink_parms(): no params data found [ 1965.439439][T16812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.832721][T25680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4396'. [ 1966.124376][T25320] Bluetooth: hci1: command tx timeout [ 1966.489686][T25645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.503601][T25645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.525979][T25645] bridge_slave_0: entered allmulticast mode [ 1966.542299][T25645] bridge_slave_0: entered promiscuous mode [ 1966.558972][T25645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.582929][T25645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.599953][T25645] bridge_slave_1: entered allmulticast mode [ 1966.607781][T25645] bridge_slave_1: entered promiscuous mode [ 1966.670066][T25645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1966.850684][T25032] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1967.421006][T25645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1967.496307][T25692] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4399'. [ 1967.595266][T25032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1967.662423][T25032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1967.675778][T25645] team0: Port device team_slave_0 added [ 1967.703247][T25032] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1967.720012][T25645] team0: Port device team_slave_1 added [ 1967.740736][T25032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.778959][T25032] usb 3-1: config 0 descriptor?? [ 1967.884378][T25645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1967.891398][T25645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.917672][T25645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1968.078810][T25645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1968.090769][T25645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1968.163964][T25645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1968.194147][T25320] Bluetooth: hci1: command tx timeout [ 1968.601747][T25032] hid-u2fzero 0003:10C4:8ACF.0009: unknown main item tag 0x0 [ 1968.639030][T25032] hid-u2fzero 0003:10C4:8ACF.0009: unknown main item tag 0x0 [ 1968.703124][T25032] hid-u2fzero 0003:10C4:8ACF.0009: unknown main item tag 0x0 [ 1968.718203][T25032] hid-u2fzero 0003:10C4:8ACF.0009: unknown main item tag 0x0 [ 1968.734988][T25645] hsr_slave_0: entered promiscuous mode [ 1968.772910][T25645] hsr_slave_1: entered promiscuous mode [ 1968.780990][T25645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1968.787725][T25032] hid-u2fzero 0003:10C4:8ACF.0009: unknown main item tag 0x0 [ 1968.788887][T25645] Cannot create hsr debugfs directory [ 1968.966690][T25032] hid-u2fzero 0003:10C4:8ACF.0009: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 1969.213558][T25032] hid-u2fzero 0003:10C4:8ACF.0009: U2F Zero LED initialised [ 1969.246335][T25032] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1969.258111][T25032] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1969.266552][T25032] CPU: 0 PID: 25032 Comm: kworker/0:1 Not tainted 6.6.101-syzkaller #0 [ 1969.274808][T25032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1969.284881][T25032] Workqueue: usb_hub_wq hub_event [ 1969.289957][T25032] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 1969.295618][T25032] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 87 1e fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 ff 1e fa f9 48 8d 44 24 60 49 89 07 [ 1969.315248][T25032] RSP: 0018:ffffc900038e6780 EFLAGS: 00010202 [ 1969.321338][T25032] RAX: 0000000000000015 RBX: ffff88805da0f030 RCX: dffffc0000000000 [ 1969.329419][T25032] RDX: 0000000000000000 RSI: ffffc900038e68a0 RDI: ffff88805e8c2968 [ 1969.337499][T25032] RBP: ffffc900038e6998 R08: 0000000000000000 R09: 0000000000000000 [ 1969.345571][T25032] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805da0f300 [ 1969.353643][T25032] R13: 1ffff9200071ccf8 R14: ffff88805da0f418 R15: 00000000000000a8 [ 1969.361627][T25032] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1969.370569][T25032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1969.377246][T25032] CR2: 00007fffdb824f88 CR3: 0000000065ba2000 CR4: 00000000003506f0 [ 1969.385249][T25032] Call Trace: [ 1969.388537][T25032] [ 1969.391479][T25032] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1969.397060][T25032] ? add_early_randomness+0x1e/0x1a0 [ 1969.402374][T25032] ? mutex_unlock+0x10/0x10 [ 1969.406995][T25032] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1969.412562][T25032] add_early_randomness+0x7a/0x1a0 [ 1969.417688][T25032] hwrng_register+0x3db/0x4a0 [ 1969.422396][T25032] devm_hwrng_register+0x47/0xb0 [ 1969.427367][T25032] u2fzero_probe+0x348/0x460 [ 1969.431997][T25032] hid_device_probe+0x293/0x5b0 [ 1969.436869][T25032] ? hid_uevent+0x350/0x350 [ 1969.441369][T25032] really_probe+0x25b/0xb40 [ 1969.445873][T25032] ? pm_runtime_barrier+0x14b/0x1c0 [ 1969.451088][T25032] __driver_probe_device+0x18c/0x330 [ 1969.456406][T25032] driver_probe_device+0x4f/0x420 [ 1969.461436][T25032] __device_attach_driver+0x2ca/0x520 [ 1969.466810][T25032] bus_for_each_drv+0x24b/0x2d0 [ 1969.471656][T25032] ? coredump_store+0x90/0x90 [ 1969.476326][T25032] ? bus_find_device+0x320/0x320 [ 1969.481261][T25032] __device_attach+0x2b5/0x400 [ 1969.486022][T25032] ? device_attach+0x20/0x20 [ 1969.490605][T25032] ? do_raw_spin_unlock+0x121/0x230 [ 1969.495796][T25032] bus_probe_device+0x180/0x260 [ 1969.500640][T25032] device_add+0x85b/0xc20 [ 1969.504982][T25032] hid_add_device+0x38d/0x530 [ 1969.509655][T25032] usbhid_probe+0xe02/0x1220 [ 1969.514238][T25032] usb_probe_interface+0x5a4/0xb00 [ 1969.519355][T25032] ? usb_register_driver+0x3d0/0x3d0 [ 1969.524636][T25032] really_probe+0x25b/0xb40 [ 1969.529134][T25032] ? pm_runtime_barrier+0x14b/0x1c0 [ 1969.534321][T25032] __driver_probe_device+0x18c/0x330 [ 1969.539597][T25032] driver_probe_device+0x4f/0x420 [ 1969.544612][T25032] __device_attach_driver+0x2ca/0x520 [ 1969.549973][T25032] bus_for_each_drv+0x24b/0x2d0 [ 1969.554818][T25032] ? coredump_store+0x90/0x90 [ 1969.559491][T25032] ? bus_find_device+0x320/0x320 [ 1969.564420][T25032] __device_attach+0x2b5/0x400 [ 1969.569184][T25032] ? device_attach+0x20/0x20 [ 1969.573948][T25032] ? __kmem_cache_free+0xba/0x1f0 [ 1969.578972][T25032] ? do_raw_spin_unlock+0x121/0x230 [ 1969.584167][T25032] bus_probe_device+0x180/0x260 [ 1969.589015][T25032] device_add+0x85b/0xc20 [ 1969.593340][T25032] usb_set_configuration+0x1a79/0x20c0 [ 1969.598801][T25032] usb_generic_driver_probe+0x8d/0x150 [ 1969.604258][T25032] usb_probe_device+0x13d/0x280 [ 1969.609106][T25032] ? usb_register_device_driver+0x230/0x230 [ 1969.614992][T25032] really_probe+0x25b/0xb40 [ 1969.619493][T25032] ? pm_runtime_barrier+0x14b/0x1c0 [ 1969.624680][T25032] __driver_probe_device+0x18c/0x330 [ 1969.629958][T25032] driver_probe_device+0x4f/0x420 [ 1969.634984][T25032] __device_attach_driver+0x2ca/0x520 [ 1969.640353][T25032] bus_for_each_drv+0x24b/0x2d0 [ 1969.645193][T25032] ? coredump_store+0x90/0x90 [ 1969.649858][T25032] ? bus_find_device+0x320/0x320 [ 1969.654787][T25032] __device_attach+0x2b5/0x400 [ 1969.659540][T25032] ? device_attach+0x20/0x20 [ 1969.664118][T25032] ? __kmem_cache_free+0xba/0x1f0 [ 1969.669143][T25032] ? do_raw_spin_unlock+0x121/0x230 [ 1969.674348][T25032] bus_probe_device+0x180/0x260 [ 1969.679226][T25032] device_add+0x85b/0xc20 [ 1969.683554][T25032] usb_new_device+0xa31/0x1630 [ 1969.688325][T25032] ? usb_disconnect+0x8a0/0x8a0 [ 1969.693251][T25032] ? _raw_spin_unlock_irq+0x23/0x50 [ 1969.698443][T25032] ? lockdep_hardirqs_on+0x98/0x150 [ 1969.703671][T25032] hub_event+0x2962/0x49c0 [ 1969.708102][T25032] ? hub_post_resume+0x120/0x120 [ 1969.713026][T25032] ? read_lock_is_recursive+0x20/0x20 [ 1969.718386][T25032] ? _raw_spin_unlock_irq+0x23/0x50 [ 1969.723581][T25032] ? process_scheduled_works+0x957/0x15b0 [ 1969.729294][T25032] ? process_scheduled_works+0x957/0x15b0 [ 1969.735000][T25032] process_scheduled_works+0xa45/0x15b0 [ 1969.740546][T25032] ? assign_work+0x400/0x400 [ 1969.745126][T25032] ? assign_work+0x39e/0x400 [ 1969.749704][T25032] worker_thread+0xa55/0xfc0 [ 1969.754282][T25032] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1969.760171][T25032] ? _raw_spin_unlock+0x40/0x40 [ 1969.765018][T25032] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1969.770911][T25032] kthread+0x2fa/0x390 [ 1969.774970][T25032] ? pr_cont_work+0x560/0x560 [ 1969.779635][T25032] ? kthread_blkcg+0xd0/0xd0 [ 1969.784208][T25032] ret_from_fork+0x48/0x80 [ 1969.788680][T25032] ? kthread_blkcg+0xd0/0xd0 [ 1969.793255][T25032] ret_from_fork_asm+0x11/0x20 [ 1969.798015][T25032] [ 1969.801060][T25032] Modules linked in: [ 1970.012844][T25717] IPVS: fo: SCTP 172.20.20.187:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1970.273711][ T5869] IPVS: starting estimator thread 0... [ 1970.372047][T25320] Bluetooth: hci1: command tx timeout [ 1970.462436][T25718] IPVS: using max 70 ests per chain, 168000 per kthread [ 1970.777306][T25032] ---[ end trace 0000000000000000 ]--- [ 1970.812251][T25032] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 1970.817967][T25032] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 87 1e fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 ff 1e fa f9 48 8d 44 24 60 49 89 07 [ 1970.884607][T25032] RSP: 0018:ffffc900038e6780 EFLAGS: 00010202 [ 1970.909542][T25032] RAX: 0000000000000015 RBX: ffff88805da0f030 RCX: dffffc0000000000 [ 1970.972203][T25032] RDX: 0000000000000000 RSI: ffffc900038e68a0 RDI: ffff88805e8c2968 [ 1970.987601][T25032] RBP: ffffc900038e6998 R08: 0000000000000000 R09: 0000000000000000 [ 1971.012671][T25032] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805da0f300 [ 1971.020707][T25032] R13: 1ffff9200071ccf8 R14: ffff88805da0f418 R15: 00000000000000a8 [ 1971.053444][T25032] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1971.076477][T25032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1971.088302][T25032] CR2: 000055b61e737be0 CR3: 0000000031794000 CR4: 00000000003506f0 [ 1971.112120][T25032] Kernel panic - not syncing: Fatal exception [ 1971.126036][T25032] Kernel Offset: disabled [ 1971.130387][T25032] Rebooting in 86400 seconds..