last executing test programs: 7.420208715s ago: executing program 0 (id=4464): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local, 0x4, 0x0, 0x3, 0x0, 0x8, 0x8}, 0x20) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfea7}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xba, &(0x7f00000010c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x1, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x2, 0x1, 0x3, 0x4, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x5, 0x4, 0x87}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x40, "d9"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x105, 0x5, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5a, 0x4, 0x9, 0x1, "47f3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x0, 0xe6, {0x7, 0x25, 0x1, 0x1, 0x0, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x4, 0x0, "1a7dfbbda2f0"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xfd, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0x0, 0x7}}}}}}}]}}, 0x0) ftruncate(r1, 0x96ef) sendfile(r0, r1, 0x0, 0x1000000201005) 7.239742241s ago: executing program 3 (id=4466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x980, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x6a0, 0x2, [@TCA_U32_ACT={0x258, 0x7, [@m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x401, 0x5, 0x4, 0x7ff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x800}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x3a, 0x6, "0e07bb6dca77e55470753de3f22a0fb818351eabb44ef58a1db1342f3b221e7f2656928c1469777e47b500c22ccfaecd4236e48ce047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x108, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0xdd, 0x6, "7b62c5d7e53804b0278ff4e75b823d0ea4febbe599930f98fb7985f5c60d9d31e179bf021a325ab5d798479020aae755ded973c8de7bfa43572f5b327fc5f341a9b7728472b9d90a4574a4411d484276658d886667e6c8e96773d16503e8c7e996b61966333c30c61905f261255425c7444d3fbf481ecd3e9d243a5d9ac44148a030bd3539e0dded7a4883c4c680ee3e69bf01df39673a7c8c0bf8e2ac95af5259a641f8daa980cbd429d07e75a0ce7793f2c47e61d3ea64d413e2807f2eabad2b24867f027cfff05df6cf66d6d03176bafdbc54192700bbdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x9c, 0x19, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0xe}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "900aaca7ce0906dc76d98ce963a3820a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8db4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xa}}]}, {0x19, 0x6, "f960cbb1cb533e1a92ec4d35d14c52bdc9e062bd14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_U32_SEL={0x424, 0x5, {0x0, 0x3, 0x4, 0xffff, 0x9, 0x1, 0x1, 0x80, [{0x1f62, 0x8, 0x1, 0x400}, {0x1, 0x1, 0x7b4a806c, 0x1}, {0x400, 0x531, 0x80, 0x7ff}, {0x0, 0x3, 0x1, 0x853b}, {0x7f, 0xd, 0xfffff8fc, 0x1}, {0x9, 0x111, 0x2, 0xd}, {0x0, 0x9, 0x8, 0x7}, {0xcb26, 0xa6fb, 0x5, 0x4}, {0x2, 0x286, 0x8, 0x8}, {0xda1, 0x2, 0x1, 0x2}, {0x0, 0x9, 0x3, 0x5}, {0x9, 0x1, 0x5, 0xaf}, {0xf618, 0xffff, 0xa, 0x3}, {0x3ff, 0x8a40, 0x8001, 0x1d3}, {0xfffffff9, 0x401, 0x5, 0x6}, {0x1, 0x2, 0x6, 0x3}, {0x0, 0x80, 0x8001, 0xffffffff}, {0x3ff, 0x4, 0x4, 0x1}, {0x38, 0x2, 0x9, 0x465c}, {0x7f8b, 0xe, 0xfffffffb, 0x1000}, {0x8, 0x36, 0x10001, 0x5}, {0x1, 0x2e9, 0x80000000, 0x7}, {0x401, 0x80000001, 0x5, 0xf571}, {0x13, 0x80, 0xd5, 0xa}, {0x5, 0x6, 0x4, 0x398d80ce}, {0x0, 0x0, 0x4, 0x5fa3}, {0x9, 0xffffffff, 0x8, 0x985}, {0x8, 0x1, 0x8723, 0xaf}, {0x0, 0x7, 0x3, 0x9}, {0x7ff, 0x80000000, 0x2, 0x4}, {0x8, 0x7, 0x29e9, 0x10}, {0x3, 0x0, 0x7, 0xffff}, {0x7, 0x5, 0x9}, {0x1, 0x476ac628, 0xc, 0x5}, {0x8, 0x53, 0x70b6, 0x3}, {0x766c, 0x7, 0x4, 0x5}, {0x0, 0x7, 0x23, 0x5}, {0x8, 0x3, 0xd351}, {0xfffffffd, 0x80000000, 0xfffffffe, 0x7}, {0x6, 0x1, 0xdd7d, 0x193f72a9}, {0x4, 0xe7, 0x8, 0xc}, {0x8, 0xffff, 0x40, 0x9}, {0x3, 0x7fff, 0x3, 0x4}, {0x101, 0x6b, 0xc871, 0x80}, {0x0, 0xa2, 0x10000, 0x7ff}, {0xbca, 0x4, 0xd956, 0x304}, {0x7, 0x2, 0x7c8, 0x1}, {0x4, 0x2, 0x1, 0x8}, {0x800, 0x0, 0x7fffffff, 0x5}, {0x9, 0x8, 0x1, 0x7}, {0x401, 0x8, 0x3, 0x800}, {0x1, 0x4, 0x7ff, 0xffffffff}, {0xfffffffd, 0x21, 0x10000, 0x7}, {0x80000001, 0x5, 0x0, 0x4}, {0x5, 0x1b, 0x40, 0x3}, {0x9, 0x0, 0x7, 0x7}, {0x0, 0x3, 0xc305, 0x7}, {0x7, 0x8, 0x6, 0x8}, {0x61f9, 0x6, 0x5, 0xfffffffc}, {0x7, 0x58, 0x1, 0x3}, {0x6, 0x4, 0x7, 0x8ef}, {0xaf99, 0x10001, 0x9}, {0xf7bf, 0xfffff801, 0x6, 0x59c5}, {0x1, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x40, 0xe}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x250, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e1cde38e17a99b0631ceb203eca163b3fdf9061a9210f"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x11c, 0x6, [@m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x25, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4d"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x54, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x980}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7.231607862s ago: executing program 3 (id=4467): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) close(r4) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)}], 0x1) getpid() 6.223470868s ago: executing program 3 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{}]}}) syz_usb_connect(0x0, 0x48, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xc8, 0x5c, 0xcc, 0x10, 0x1189, 0x893, 0xf495, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0xfa, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x63, 0x64, 0x3b, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x7, 0x0, 0x40}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0x60, 0xd6}}]}}]}}, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xff08, 0x0, 0x0, 0x0, @uid}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x34}}, 0x0) 6.170581262s ago: executing program 0 (id=4475): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000140)={0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '&(+'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 6.156753624s ago: executing program 2 (id=4477): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$eJzs3E1vG1UXAODjpOn32zdCLNh1pAopkWqrzkcFuwCt+BCpogILVuDYjuXW9kSx44SsWLBELPgnCCRWLPkNLFizAxZF7JBAnplAA0VFih0rzfNI4zP3zvXxuVZV6cxEDuDMmk9+fVSKa3EpImYj4mpEdl4qjsxaHl6IiOsRMfPYUSrm/5w4HxGXI+LaKHmes1Rc+vzm8Mbqz2/98s13F85d+eLr76e3a2DSHj3l+osR0d3Oz/e6R689KOZrw3YWuyvDIuYXug+LcZrHveZmlmGvdriulsXlVr4+3d7tj+JWp1YfxVZ7K5vf7rWy2B+2DvNkb3hQ28nGjeZmFtv9NIutg7yu/YP8/7ZL/UGep1Hk+yhLH4PBYcznm/vNfD/bD7NY7w2K+Txv2mjuj+KwiMXHRT3tNLI6Np/yZZ5ib7d7u/vJsLnTb6e9ZLVSfalSvV2u7qSN5qC5Uq51G7dXkoVWZ7SsPGjWumutNG11mpV62l1MFlr1erlaTRbuNDfbtV5SrVaWK7fKq4vF2c3k9XvvJZ1GsjCKr7Z7u4N2p59spTtJ/o7FZKmy/PJicqOavLO+kWzcv3t3fePdD+68f++V9TdfKxb9o6xkYenW0lK5equ8VF08Q/v/pCh6jPuHYylNuwCA00f/D0zDk/r/NG/Dj9n/79yPmHz/P3Kg/z+2U9X/nvX+fwL7h2PR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFk/zH35RnYyn4+vFPP/K6aeK8aliJiJiN+fYDbOH8k5W+SZ+5f1c3+r4dtSZBlGn3GhOC5HxFpx/Pb/SX8LAAAA8Oz66uPrn+Xdev4yP+2COEn5TZuZqx+OKV8pIubmfxxTtpnRy/NjSpb9+z4X+2PKlt3AujimZPktt3PjyvafzB4JFx8LpTzMRPx0ohUBAACTd7QTONkuBAAAgJP06bQLYDpKcfgo8/BZcPaX9389ELx0ZAQAAACcQqVpFwAAAABMXNb/+/0/AAAAeLblv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzBzv3kpBIDcAAuA/Pg/YvEuPcq7uAYHsGlS8MBvARHwCt4Ac6AO49gwNA2RgwYyZQhkO9LhtJh+NESWLSdFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6aWejZ8erh+b5ixXzZTpDQAAALDNop6N45Nhqv/N5//nU5e53gkhVCGEbWP3bvi1kdnNOfWO6+svbXgOISasP6Ofjz8hhJt8vF0c+lsAAACA8zWfTEdptJ4ehsduEG1KkzbVv9sdr3f2zFtfXw9fG7crqdZ5V4XC4u+7F+4LpcUJrEGhsDTl1iuV9iPx7/4xazf4VHRSUX3//mJ9BwAAWtTdKNodhQAAANCmu2M3gOOI67v5Xvy8FNhPRV7e+71RAwAAAE7Qvvd3AwAAAKcnjv/t/wcAAADnLe3/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCEt6tl4PpmOmuYsV82U6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8sz/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv28xlHFAQB/M7O7sVVxjbKHiCgI6sWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPDeQSbznsIYJnZWZnkkmymDWyM5vk84E377uTx7zvm4SQ777JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBi8txcn6aE9jOP83JOdB0tpv3GgTz1a25xLWxpHVSZ9MrxcfhF16ksEAACAsyMp6vsQwlZzfSHt43ZW/zeLMWnN/8Ozw7io5w/W/UVf1P5p+/237Rd3J2oP50kvemO537t4OJXG5FZZl2/GGvXckSMa2Z3P3ntJsm9I/OHqC4Nmdj+j7x4/fr+VhTP/P2MAYDIuFH0eFH8PpX23zsQAODMapcK7qP+Tdr05AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFRhsBqeLuIohDDX2ItTGzsPlkb1j9Y254p29eHDtfI100s0Qwg3lvu9ixWuZdrdvXf/1mK/37szKpjJB/3bmOMHr0zsykcH7+Yru/XxGINDOPylqPqcBccM4on+GJ/WoKZfSAAAnFo7eU2e1vVbzfWF9Fw0G8LfP+6v/98oxWHM+n/7k6tPynOV6/9uZSucfvMrt7+Yv3vv/lvLtxdv9m72Pnv7Uved7uVrV65cm8/eK8mOr9edJgAAACdYK2/l+j+ePbz/f74UhzHr/y+/735dnitR/4+0t+lXdyYAAABn2/Ov/vVnNOJ81GqFrxZXVu50h8fd15eGxxpS/c9m8lau/5PZurMCAAAAqjBYjfbt/18vxWHM/f9nfnrpl/I1kxDCuXz//8LS5/3r1S1nqlXx78R1rxEAAIB6nctbef+/mT3/H+8+8hCHEN58bRjnHwM4Vv2ffPDtz+W5ys//X65uiVMp7gzvR9Z3Qmh06s4IAACA0+ypvKXF/h/N9YVPfz3/Ucvz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABV+ycAAP//+lA8jQ==") (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x8) (async) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) (async) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6.106396698s ago: executing program 2 (id=4478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 3.249501872s ago: executing program 1 (id=4482): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x9d8, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x6a0, 0x2, [@TCA_U32_ACT={0x258, 0x7, [@m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x401, 0x5, 0x4, 0x7ff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x800}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x3a, 0x6, "0e07bb6dca77e55470753de3f22a0fb818351eabb44ef58a1db1342f3b221e7f2656928c1469777e47b500c22ccfaecd4236e48ce047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x108, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0xdd, 0x6, "7b62c5d7e53804b0278ff4e75b823d0ea4febbe599930f98fb7985f5c60d9d31e179bf021a325ab5d798479020aae755ded973c8de7bfa43572f5b327fc5f341a9b7728472b9d90a4574a4411d484276658d886667e6c8e96773d16503e8c7e996b61966333c30c61905f261255425c7444d3fbf481ecd3e9d243a5d9ac44148a030bd3539e0dded7a4883c4c680ee3e69bf01df39673a7c8c0bf8e2ac95af5259a641f8daa980cbd429d07e75a0ce7793f2c47e61d3ea64d413e2807f2eabad2b24867f027cfff05df6cf66d6d03176bafdbc54192700bbdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x9c, 0x19, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0xe}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "900aaca7ce0906dc76d98ce963a3820a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8db4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xa}}]}, {0x19, 0x6, "f960cbb1cb533e1a92ec4d35d14c52bdc9e062bd14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_U32_SEL={0x424, 0x5, {0x0, 0x3, 0x4, 0xffff, 0x9, 0x1, 0x1, 0x80, [{0x1f62, 0x8, 0x1, 0x400}, {0x1, 0x1, 0x7b4a806c, 0x1}, {0x400, 0x531, 0x80, 0x7ff}, {0x0, 0x3, 0x1, 0x853b}, {0x7f, 0xd, 0xfffff8fc, 0x1}, {0x9, 0x111, 0x2, 0xd}, {0x0, 0x9, 0x8, 0x7}, {0xcb26, 0xa6fb, 0x5, 0x4}, {0x2, 0x286, 0x8, 0x8}, {0xda1, 0x2, 0x1, 0x2}, {0x0, 0x9, 0x3, 0x5}, {0x9, 0x1, 0x5, 0xaf}, {0xf618, 0xffff, 0xa, 0x3}, {0x3ff, 0x8a40, 0x8001, 0x1d3}, {0xfffffff9, 0x401, 0x5, 0x6}, {0x1, 0x2, 0x6, 0x3}, {0x0, 0x80, 0x8001, 0xffffffff}, {0x3ff, 0x4, 0x4, 0x1}, {0x38, 0x2, 0x9, 0x465c}, {0x7f8b, 0xe, 0xfffffffb, 0x1000}, {0x8, 0x36, 0x10001, 0x5}, {0x1, 0x2e9, 0x80000000, 0x7}, {0x401, 0x80000001, 0x5, 0xf571}, {0x13, 0x80, 0xd5, 0xa}, {0x5, 0x6, 0x4, 0x398d80ce}, {0x0, 0x0, 0x4, 0x5fa3}, {0x9, 0xffffffff, 0x8, 0x985}, {0x8, 0x1, 0x8723, 0xaf}, {0x0, 0x7, 0x3, 0x9}, {0x7ff, 0x80000000, 0x2, 0x4}, {0x8, 0x7, 0x29e9, 0x10}, {0x3, 0x0, 0x7, 0xffff}, {0x7, 0x5, 0x9}, {0x1, 0x476ac628, 0xc, 0x5}, {0x8, 0x53, 0x70b6, 0x3}, {0x766c, 0x7, 0x4, 0x5}, {0x0, 0x7, 0x23, 0x5}, {0x8, 0x3, 0xd351}, {0xfffffffd, 0x80000000, 0xfffffffe, 0x7}, {0x6, 0x1, 0xdd7d, 0x193f72a9}, {0x4, 0xe7, 0x8, 0xc}, {0x8, 0xffff, 0x40, 0x9}, {0x3, 0x7fff, 0x3, 0x4}, {0x101, 0x6b, 0xc871, 0x80}, {0x0, 0xa2, 0x10000, 0x7ff}, {0xbca, 0x4, 0xd956, 0x304}, {0x7, 0x2, 0x7c8, 0x1}, {0x4, 0x2, 0x1, 0x8}, {0x800, 0x0, 0x7fffffff, 0x5}, {0x9, 0x8, 0x1, 0x7}, {0x401, 0x8, 0x3, 0x800}, {0x1, 0x4, 0x7ff, 0xffffffff}, {0xfffffffd, 0x21, 0x10000, 0x7}, {0x80000001, 0x5, 0x0, 0x4}, {0x5, 0x1b, 0x40, 0x3}, {0x9, 0x0, 0x7, 0x7}, {0x0, 0x3, 0xc305, 0x7}, {0x7, 0x8, 0x6, 0x8}, {0x61f9, 0x6, 0x5, 0xfffffffc}, {0x7, 0x58, 0x1, 0x3}, {0x6, 0x4, 0x7, 0x8ef}, {0xaf99, 0x10001, 0x9}, {0xf7bf, 0xfffff801, 0x6, 0x59c5}, {0x1, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x40, 0xe}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x2a8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e1cde38e17a99b0631ceb203eca163b3fdf9061a9210f"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_mpls={0x38, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x44, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x11, 0x6, "25e3c0c965c7f29e5a6b228b0c"}, {0xc}, {0xc}}}, @m_simple={0xc0, 0x0, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x7e, 0x3, 'mcastSui[>\xea]S]\x9c-n\x8f\x8aT\xbf0\xc3]\x183\xc3\xfa\x02R\xa8\xab\x84\xd6\xf2y\xc4\xd4\xcc\x83\xe3\x18\xeaj\xc2\xcd\xfe\x01\x8d\xbe\x05\xdd*d\n\x80aU_\x96N\xc4$\x88b\xc8\x80u%\xa9r1\xff>\xaa\x06\xb4\x004\xce\xc9:\xbf.q\xa0\vCI\"R/\x00\x18&x\x10\xd9l\xf0\xffL\xb5\x91hE\xde\xf5\x82d7#\xb4U;\xb0\xca\x80u*\xd0n'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x9d8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.248795902s ago: executing program 2 (id=4483): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0xad3a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0x6, 0x4}, 0x48) close(0x3) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r0, 0xae9a) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0xc, 0xffffff34) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='N-N:N/8'], 0x6a) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto$ax25(r2, &(0x7f00000002c0)="cc826894789d2ad78365", 0xa, 0x40000, &(0x7f0000000600)={{0x3, @bcast, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) openat$cgroup_subtree(r6, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, &(0x7f00000002c0), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0xfdc7, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="8f0000001800000226bd7000fcdbdf251c1010040004fd04000b00000000130000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0f000000000000000e0000000000000f0f000000030000ab330000000000000000000000000000000000000002000000000000000000000006000000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000900f9000277", @ANYRES32=r8, @ANYBLOB="05001a0004000000"], 0xb8}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 3.139716601s ago: executing program 0 (id=4485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) close(r4) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)}], 0x1) getpid() 3.139121792s ago: executing program 3 (id=4486): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000000240)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@journal_dev={'journal_dev', 0x3d, 0xa}}, {@lazytime}, {@delalloc}, {@grpjquota}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4000) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xffffffffffffffda, 0x0, {0xe8, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0xc34, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) creat(&(0x7f0000000380)='./file0\x00', 0x0) 3.113105514s ago: executing program 1 (id=4487): msgrcv(0x0, 0x0, 0x0, 0x4cfab3f176228cef, 0x1000) msgrcv(0x0, &(0x7f0000001500)={0x0, ""/4096}, 0x1008, 0x2, 0x800) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgsnd(0x0, &(0x7f0000003540)=ANY=[@ANYBLOB="01000000000000002da3371ba76f3c2a54b860d50711f61a12e5b6107abc4a61bd2b7e279dd2e968e1f8dd78deda3d16e27b9c40667c6d630e327852e2aa4073be6fab01d173db0ad659eaa862f0832be28ae2e18c4c348cec94a0516ae936a896b349a2d87b47502430aaf6d4d8116c63c646efec08fbb00c3581e1afa044fcdcace06d853dec9f5ead5cebe42fc14429d6c37a41e7c2ce12eda38d7e77a9e2011be01aa67ac48b720545ca0aa0e8ae901e3c9ba8faff5e5fc4f4e054382f0d02f768bbc53cf10dac7363590a794c672a8a1be2c81dcd3375e928c77fafa604bd218015927210393a7699faaa6bda2da61cfd9c"], 0xe8, 0x800) 2.188453153s ago: executing program 2 (id=4489): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000000240)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@journal_dev={'journal_dev', 0x3d, 0xa}}, {@lazytime}, {@delalloc}, {@grpjquota}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4000) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xffffffffffffffda, 0x0, {0xe8, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0xc34, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) creat(&(0x7f0000000380)='./file0\x00', 0x0) (fail_nth: 1) 2.187802193s ago: executing program 1 (id=4490): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xa00, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x690, 0x2, [@TCA_U32_ACT={0x258, 0x7, [@m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x401, 0x5, 0x4, 0x7ff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x800}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x3a, 0x6, "0e07bb6dca77e55470753de3f22a0fb818351eabb44ef58a1db1342f3b221e7f2656928c1469777e47b500c22ccfaecd4236e48ce047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x108, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0xdd, 0x6, "7b62c5d7e53804b0278ff4e75b823d0ea4febbe599930f98fb7985f5c60d9d31e179bf021a325ab5d798479020aae755ded973c8de7bfa43572f5b327fc5f341a9b7728472b9d90a4574a4411d484276658d886667e6c8e96773d16503e8c7e996b61966333c30c61905f261255425c7444d3fbf481ecd3e9d243a5d9ac44148a030bd3539e0dded7a4883c4c680ee3e69bf01df39673a7c8c0bf8e2ac95af5259a641f8daa980cbd429d07e75a0ce7793f2c47e61d3ea64d413e2807f2eabad2b24867f027cfff05df6cf66d6d03176bafdbc54192700bbdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x9c, 0x19, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0xe}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "900aaca7ce0906dc76d98ce963a3820a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8db4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xa}}]}, {0x19, 0x6, "f960cbb1cb533e1a92ec4d35d14c52bdc9e062bd14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_U32_SEL={0x414, 0x5, {0x0, 0x3, 0x4, 0xffff, 0x9, 0x1, 0x1, 0x80, [{0x1f62, 0x8, 0x1, 0x400}, {0x1, 0x1, 0x7b4a806c, 0x1}, {0x400, 0x531, 0x80, 0x7ff}, {0x0, 0x3, 0x1, 0x853b}, {0x7f, 0xd, 0xfffff8fc, 0x1}, {0x9, 0x111, 0x2, 0xd}, {0x0, 0x9, 0x8, 0x7}, {0xcb26, 0xa6fb, 0x5, 0x4}, {0x2, 0x286, 0x8, 0x8}, {0xda1, 0x2, 0x1, 0x2}, {0x0, 0x9, 0x3, 0x5}, {0x9, 0x1, 0x5, 0xaf}, {0xf618, 0xffff, 0xa, 0x3}, {0x3ff, 0x8a40, 0x8001, 0x1d3}, {0xfffffff9, 0x401, 0x5, 0x6}, {0x1, 0x2, 0x6, 0x3}, {0x0, 0x80, 0x8001, 0xffffffff}, {0x3ff, 0x4, 0x4, 0x1}, {0x38, 0x2, 0x9, 0x465c}, {0x7f8b, 0xe, 0xfffffffb, 0x1000}, {0x8, 0x36, 0x10001, 0x5}, {0x1, 0x2e9, 0x80000000, 0x7}, {0x401, 0x80000001, 0x5, 0xf571}, {0x13, 0x80, 0xd5, 0xa}, {0x5, 0x6, 0x4, 0x398d80ce}, {0x0, 0x0, 0x4, 0x5fa3}, {0x9, 0xffffffff, 0x8, 0x985}, {0x8, 0x1, 0x8723, 0xaf}, {0x0, 0x7, 0x3, 0x9}, {0x7ff, 0x80000000, 0x2, 0x4}, {0x8, 0x7, 0x29e9, 0x10}, {0x3, 0x0, 0x7, 0xffff}, {0x7, 0x5, 0x9}, {0x1, 0x476ac628, 0xc, 0x5}, {0x8, 0x53, 0x70b6, 0x3}, {0x766c, 0x7, 0x4, 0x5}, {0x0, 0x7, 0x23, 0x5}, {0x8, 0x3, 0xd351}, {0xfffffffd, 0x80000000, 0xfffffffe, 0x7}, {0x4, 0xe7, 0x8, 0xc}, {0x8, 0xffff, 0x40, 0x9}, {0x3, 0x7fff, 0x3, 0x4}, {0x101, 0x6b, 0xc871, 0x80}, {0x0, 0xa2, 0x10000, 0x7ff}, {0xbca, 0x4, 0xd956, 0x304}, {0x7, 0x2, 0x7c8, 0x1}, {0x4, 0x2, 0x1, 0x8}, {0x800, 0x0, 0x7fffffff, 0x5}, {0x9, 0x8, 0x1, 0x7}, {0x401, 0x8, 0x3, 0x800}, {0x1, 0x4, 0x7ff, 0xffffffff}, {0xfffffffd, 0x21, 0x10000, 0x7}, {0x80000001, 0x5, 0x0, 0x4}, {0x5, 0x1b, 0x40, 0x3}, {0x9, 0x0, 0x7, 0x7}, {0x0, 0x3, 0xc305, 0x7}, {0x7, 0x8, 0x6, 0x8}, {0x61f9, 0x6, 0x5, 0xfffffffc}, {0x7, 0x58, 0x1, 0x3}, {0x6, 0x4, 0x7, 0x8ef}, {0xaf99, 0x10001, 0x9}, {0xf7bf, 0xfffff801, 0x6, 0x59c5}, {0x1, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x40, 0xe}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x2e0, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e1cde38e17a99b0631ceb203eca163b3fdf9061a9210f"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1ac, 0x6, [@m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x25, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4d"}, {0xc}, {0xc}}}, @m_connmark={0x44, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x11, 0x6, "25e3c0c965c7f29e5a6b228b0c"}, {0xc}, {0xc}}}, @m_simple={0xd4, 0x0, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}, @TCA_DEF_DATA={0x7e, 0x3, 'mcastSui[>\xea]S]\x9c-n\x8f\x8aT\xbf0\xc3]\x183\xc3\xfa\x02R\xa8\xab\x84\xd6\xf2y\xc4\xd4\xcc\x83\xe3\x18\xeaj\xc2\xcd\xfe\x01\x8d\xbe\x05\xdd*d\n\x80aU_\x96N\xc4$\x88b\xc8\x80u%\xa9r1\xff>\xaa\x06\xb4\x004\xce\xc9:\xbf.q\xa0\vCI\"R/\x00\x18&x\x10\xd9l\xf0\xffL\xb5\x91hE\xde\xf5\x82d7#\xb4U;\xb0\xca\x80u*\xd0n'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xa00}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.187330493s ago: executing program 4 (id=4491): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x25c, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x1c8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e1cde38e17a99b0631ceb203eca163b3fdf9061a9210f"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x25, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4d"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x25c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.186931493s ago: executing program 0 (id=4492): dup(0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2214806, &(0x7f00000004c0)=ANY=[], 0x0, 0x6ac, &(0x7f0000001480)="$eJzs3d1v29YZx/Ef5TfZHYJiG4ogSJOTZAUcLFMkuXFgZEDL0ZTNTRIFUh5sYECRNXYRRE63JAMW37S+2QvQAbveXW92sbv9AwN63f9idxtQbHcDdsOBpKgXS5Ts+qXN+v0YrajDh+c8JBU9oC0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHLWy+WKpbrX3No2+Zz1wG9MWJ/2Nqfb6cLtqeNKVvyfikVdTpsuf7e/+o34fzd1NX12VcX4oaiD1954/cF3ZgvZ9hMS+jJ00g6fvzx48rDT2X12jNgZnbj7r5IKxwjacJte6HsNe8M1XuibtdXV8t3NWmhqXt0Nd8K22zBO4BbafmCWndumsra2YtzSjr/V3Fi3627WeP8H1XJ51fx4IT3Rkkqhs+nV615zI4mJV8cx980nP0sDXLthzN7jzu7KtCTjoMpxgqrTgqrlarVSqVYrq/fW7t0vl2dHGsoxq9yjkYgzf9HiFXN2b97AKRXi+v93S6qrqKa2tC0z9sfRugL5auSs78rq/1t33YnjDtb/rMpflt7prr6ipP5fS59dy6v/ObkYmWSDcWusnPaT/cwlGRk910sd6IkeqqOOdvXsDPo2MtfPpJcL+NmQq6Y8hfLlqSE7aTHdFqM1rWpVZb2nTdUUyqgmT3W5CrWjUG25ySvKUSBXttryFchoWY5uy6iiNa1pRUauStqRry01taF12fpPFEV7epwc95UJOSoLquQELAwGVSf0lFf/f/5R+jrt1v8y9f+bKn0dLKQPn0+KAb4Gou71/wldP59sAAAAAADAebCS375byd/u35QUqebV3XL+BvMXmR0AAAAAADgLlqIFXZUVX/9LelPWlOt/AAAAAADwyrGSe+wsSUvJh/qt/p1Qx/klwMwFpAgAAAAAAE4pufP/2rwUJZNWXJd1out/AAAAAADwCvjdwBz7s9kcu1H2Z/2CpLC1YP3tXwsK5qzD1vb3rH07XmPvzxSSkJFPALRrV6zwj+lEvcl8vfOSkmeOe9XqjtadBLM37+AXe9Pm+reCIwnMzwx2cCSBS92trXjk1dnuM32iG+8MxT46KChZk46yVPPqbsnx6w8qsu1Lhba73f7V08e/loLefu497uyW3v+w8yjJ5TBuOtyP8/goS+ev891DN5xL8tDP5UUy30Jyz8W4PV5ULRvy983GkpWMW872f0b2fqF/jnL3/8iYv9HN9JzdXEpjlw56M+7H+1+M979SSk7Z0N4Hc1Y/i8rRPR93InKyKCZZ3Epjbi3fSh+y/OJ+Clbx+zNStTR6DoayqA5mMf1YWP8eORaTsugei5U4i8/ijnKyWDlZFiNnBAC+Knv9KpRMYj5Sd7PykL2pfam6M726vztc3V/8KYqSDWak2e7fJoZH6aatrK4ofkdftpI6NK/kjXX2ysg7erY39qWict7Ry6eobvFYf+l/B1I37ZEs/htF0YNKMu4fjlTVT+MNPs0dN6ynh/3ui/1fJBPgxz7Y/WD3abW6slp+u1y+V9VcshvdhxlRewAAI6Z/x87UCOtt3Ugjbjz651vp0lDF+3bvIwUlva8P1dEj3cm+QuC6ih+P6XVp4GMId9KrVg1ctZo3Xn+wKB2NrehO7lVdUksHYqu92DllmwxX6n7synmfBgAALtTNgTqsY9f/4lD9v6PlNGL5ytjr7uFa3r067l3S58VWpif/7lkfDQAAvhnc4Atrqf1bKwi81nuVtbWK3d50TeA7PzGBZW24xmu23cDZtJsbrmkFftt3/LppBVrw1t3QhFutlh+0Tc0PTMsPve3km99N96vfQ7dhN9ueE7bqrh26xvGbbdtpm3UvdExr60d1L9x0g2TjsOU6Xs1z7LbnN03obwWOWzImdN2BQG/dbba9mhcvNk0r8Bp2sGN+6te3Gq5Zd0Mn8FptP+0wG8tr1vygkXRbUnTiLzoEAOD/0fOXB08edjq7z44uLMaX5mnLoXJiRhfmx3TIHEEAAHzN9Mv1CTYq9pY+i84lKwAAAAAAAAAAAAAAAAAAAAAAMGj6LX1TFqThlrlxNwtKvZZfXuq26GP1bzEc6dnSaRM7zULhpFtlt0QcPPl8QvBiryU7/IMxh8lCNi/See7gP74lvZa0KG2ZHRdczO/HGmmZO3q+Fiec3GMuzMQH6LjBP9xLj1tuTLxy7KqF3rmYPf0/h3ELT/+csyqKomjy5gvDx3B+0g4OL8xKejZ/ilNwse9DAC7e/wIAAP//3ZwvoA==") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(0xffffffffffffffff, 0x43, 0x2, 0x401) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0xc1, 0x80, 0x2, 0x5, {{0x1c, 0x4, 0x1, 0x33, 0x70, 0x65, 0x0, 0x1f, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xe, 0x3, 0x8, [{@multicast2, 0x5}]}, @end, @generic={0x94, 0x6, "f1758b2d"}, @timestamp={0x44, 0x28, 0xa7, 0x0, 0xf, [0x8000, 0x46b7, 0xffffff01, 0x4, 0x7, 0xff, 0x8, 0x4cd, 0x80]}, @timestamp={0x44, 0x1c, 0xb8, 0x0, 0x1, [0xfffffff7, 0x1, 0x4, 0xfff, 0x1f, 0x55c7]}, @rr={0x7, 0x3, 0xfe}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x9, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='1', 0x1) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg$alg(r4, &(0x7f0000007980)=[{0x0, 0x0, 0x0}], 0x1, 0x800) io_submit(r5, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x6, 0x0, 0x0, r4, &(0x7f0000000080)="95", 0x1}]) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) unshare(0x8000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xe, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18200000", @ANYRES32=r9, @ANYBLOB="00000000006d0f009500000000001a00"], &(0x7f0000000000)='GPL\x00', 0x3, 0xb, &(0x7f0000000240)=""/229, 0x0, 0x17}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001900010a000000000000000004"], 0x14}}, 0x0) 2.147719716s ago: executing program 1 (id=4493): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000006580)={@map, 0xffffffffffffffff, 0x14, 0x2008, 0x0, @prog_fd}, 0x20) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000380)={'U-', 0x5}, 0x16, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000100)={'bond0\x00', @ifru_names='caif0\x00'}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000180)=0x80) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0xffffffffffffff0a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xa4, r6, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004014) dup3(0xffffffffffffffff, r1, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESHEX=r2, @ANYRESHEX=0x0], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000000)=""/161, 0x28, 0xa1, 0x1}, 0x20) 2.047590995s ago: executing program 4 (id=4494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f000000c940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000180)=""/8, 0x8}], 0x2}}], 0x1, 0x0, 0x0) 1.512203441s ago: executing program 4 (id=4495): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x33c, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x2a8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xf4, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x44, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x1b, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x18c, 0x6, [@m_mpls={0x58, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x23, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0xc8, 0x0, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']$\x00'}, @TCA_DEF_DATA={0x7e, 0x3, 'mcastSui[>\xea]S]\x9c-n\x8f\x8aT\xbf0\xc3]\x183\xc3\xfa\x02R\xa8\xab\x84\xd6\xf2y\xc4\xd4\xcc\x83\xe3\x18\xeaj\xc2\xcd\xfe\x01\x8d\xbe\x05\xdd*d\n\x80aU_\x96N\xc4$\x88b\xc8\x80u%\xa9r1\xff>\xaa\x06\xb4\x004\xce\xc9:\xbf.q\xa0\vCI\"R/\x00\x18&x\x10\xd9l\xf0\xffL\xb5\x91hE\xde\xf5\x82d7#\xb4U;\xb0\xca\x80u*\xd0n'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x33c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.457541186s ago: executing program 2 (id=4496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) 1.434388837s ago: executing program 3 (id=4497): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f000000c940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000180)=""/8, 0x8}], 0x2}}], 0x1, 0x0, 0x0) (fail_nth: 1) 1.364964593s ago: executing program 4 (id=4498): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x9d8, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x6a0, 0x2, [@TCA_U32_ACT={0x258, 0x7, [@m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x401, 0x5, 0x4, 0x7ff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x800}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x3a, 0x6, "0e07bb6dca77e55470753de3f22a0fb818351eabb44ef58a1db1342f3b221e7f2656928c1469777e47b500c22ccfaecd4236e48ce047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x108, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0xdd, 0x6, "7b62c5d7e53804b0278ff4e75b823d0ea4febbe599930f98fb7985f5c60d9d31e179bf021a325ab5d798479020aae755ded973c8de7bfa43572f5b327fc5f341a9b7728472b9d90a4574a4411d484276658d886667e6c8e96773d16503e8c7e996b61966333c30c61905f261255425c7444d3fbf481ecd3e9d243a5d9ac44148a030bd3539e0dded7a4883c4c680ee3e69bf01df39673a7c8c0bf8e2ac95af5259a641f8daa980cbd429d07e75a0ce7793f2c47e61d3ea64d413e2807f2eabad2b24867f027cfff05df6cf66d6d03176bafdbc54192700bbdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x9c, 0x19, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0xe}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "900aaca7ce0906dc76d98ce963a3820a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8db4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xa}}]}, {0x19, 0x6, "f960cbb1cb533e1a92ec4d35d14c52bdc9e062bd14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_U32_SEL={0x424, 0x5, {0x0, 0x3, 0x4, 0xffff, 0x9, 0x1, 0x1, 0x80, [{0x1f62, 0x8, 0x1, 0x400}, {0x1, 0x1, 0x7b4a806c, 0x1}, {0x400, 0x531, 0x80, 0x7ff}, {0x0, 0x3, 0x1, 0x853b}, {0x7f, 0xd, 0xfffff8fc, 0x1}, {0x9, 0x111, 0x2, 0xd}, {0x0, 0x9, 0x8, 0x7}, {0xcb26, 0xa6fb, 0x5, 0x4}, {0x2, 0x286, 0x8, 0x8}, {0xda1, 0x2, 0x1, 0x2}, {0x0, 0x9, 0x3, 0x5}, {0x9, 0x1, 0x5, 0xaf}, {0xf618, 0xffff, 0xa, 0x3}, {0x3ff, 0x8a40, 0x8001, 0x1d3}, {0xfffffff9, 0x401, 0x5, 0x6}, {0x1, 0x2, 0x6, 0x3}, {0x0, 0x80, 0x8001, 0xffffffff}, {0x3ff, 0x4, 0x4, 0x1}, {0x38, 0x2, 0x9, 0x465c}, {0x7f8b, 0xe, 0xfffffffb, 0x1000}, {0x8, 0x36, 0x10001, 0x5}, {0x1, 0x2e9, 0x80000000, 0x7}, {0x401, 0x80000001, 0x5, 0xf571}, {0x13, 0x80, 0xd5, 0xa}, {0x5, 0x6, 0x4, 0x398d80ce}, {0x0, 0x0, 0x4, 0x5fa3}, {0x9, 0xffffffff, 0x8, 0x985}, {0x8, 0x1, 0x8723, 0xaf}, {0x0, 0x7, 0x3, 0x9}, {0x7ff, 0x80000000, 0x2, 0x4}, {0x8, 0x7, 0x29e9, 0x10}, {0x3, 0x0, 0x7, 0xffff}, {0x7, 0x5, 0x9}, {0x1, 0x476ac628, 0xc, 0x5}, {0x8, 0x53, 0x70b6, 0x3}, {0x766c, 0x7, 0x4, 0x5}, {0x0, 0x7, 0x23, 0x5}, {0x8, 0x3, 0xd351}, {0xfffffffd, 0x80000000, 0xfffffffe, 0x7}, {0x6, 0x1, 0xdd7d, 0x193f72a9}, {0x4, 0xe7, 0x8, 0xc}, {0x8, 0xffff, 0x40, 0x9}, {0x3, 0x7fff, 0x3, 0x4}, {0x101, 0x6b, 0xc871, 0x80}, {0x0, 0xa2, 0x10000, 0x7ff}, {0xbca, 0x4, 0xd956, 0x304}, {0x7, 0x2, 0x7c8, 0x1}, {0x4, 0x2, 0x1, 0x8}, {0x800, 0x0, 0x7fffffff, 0x5}, {0x9, 0x8, 0x1, 0x7}, {0x401, 0x8, 0x3, 0x800}, {0x1, 0x4, 0x7ff, 0xffffffff}, {0xfffffffd, 0x21, 0x10000, 0x7}, {0x80000001, 0x5, 0x0, 0x4}, {0x5, 0x1b, 0x40, 0x3}, {0x9, 0x0, 0x7, 0x7}, {0x0, 0x3, 0xc305, 0x7}, {0x7, 0x8, 0x6, 0x8}, {0x61f9, 0x6, 0x5, 0xfffffffc}, {0x7, 0x58, 0x1, 0x3}, {0x6, 0x4, 0x7, 0x8ef}, {0xaf99, 0x10001, 0x9}, {0xf7bf, 0xfffff801, 0x6, 0x59c5}, {0x1, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x40, 0xe}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x2a8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e1cde38e17a99b0631ceb203eca163b3fdf9061a9210f"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_mpls={0x38, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x44, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x11, 0x6, "25e3c0c965c7f29e5a6b228b0c"}, {0xc}, {0xc}}}, @m_simple={0xc0, 0x0, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x7e, 0x3, 'mcastSui[>\xea]S]\x9c-n\x8f\x8aT\xbf0\xc3]\x183\xc3\xfa\x02R\xa8\xab\x84\xd6\xf2y\xc4\xd4\xcc\x83\xe3\x18\xeaj\xc2\xcd\xfe\x01\x8d\xbe\x05\xdd*d\n\x80aU_\x96N\xc4$\x88b\xc8\x80u%\xa9r1\xff>\xaa\x06\xb4\x004\xce\xc9:\xbf.q\xa0\vCI\"R/\x00\x18&x\x10\xd9l\xf0\xffL\xb5\x91hE\xde\xf5\x82d7#\xb4U;\xb0\xca\x80u*\xd0n'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x9d8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.236540104s ago: executing program 4 (id=4499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000640)=ANY=[], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c3cf8, &(0x7f0000000580)=ANY=[], 0x1, 0x4e1, &(0x7f0000001040)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) execve(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000500)={0x0, 0x18a, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) read$FUSE(r6, &(0x7f0000003600)={0x2020}, 0x2020) r7 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000001a00)={'team0\x00', {0x2, 0x0, @remote}}) sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 974.103777ms ago: executing program 0 (id=4500): msgrcv(0x0, 0x0, 0x0, 0x4cfab3f176228cef, 0x1000) msgrcv(0x0, &(0x7f0000001500)={0x0, ""/4096}, 0x1008, 0x2, 0x800) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/228}, 0xec, 0x1, 0x2000) msgsnd(0x0, 0x0, 0xe8, 0x800) 815.96181ms ago: executing program 3 (id=4501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x7f, 0xfff, 0x87, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x48) 716.894019ms ago: executing program 2 (id=4503): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xa00, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x690, 0x2, [@TCA_U32_ACT={0x258, 0x7, [@m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x401, 0x5, 0x4, 0x7ff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x800}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x3a, 0x6, "0e07bb6dca77e55470753de3f22a0fb818351eabb44ef58a1db1342f3b221e7f2656928c1469777e47b500c22ccfaecd4236e48ce047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x108, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0xdd, 0x6, "7b62c5d7e53804b0278ff4e75b823d0ea4febbe599930f98fb7985f5c60d9d31e179bf021a325ab5d798479020aae755ded973c8de7bfa43572f5b327fc5f341a9b7728472b9d90a4574a4411d484276658d886667e6c8e96773d16503e8c7e996b61966333c30c61905f261255425c7444d3fbf481ecd3e9d243a5d9ac44148a030bd3539e0dded7a4883c4c680ee3e69bf01df39673a7c8c0bf8e2ac95af5259a641f8daa980cbd429d07e75a0ce7793f2c47e61d3ea64d413e2807f2eabad2b24867f027cfff05df6cf66d6d03176bafdbc54192700bbdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x9c, 0x19, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0xe}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "900aaca7ce0906dc76d98ce963a3820a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8db4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xa}}]}, {0x19, 0x6, "f960cbb1cb533e1a92ec4d35d14c52bdc9e062bd14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_U32_SEL={0x414, 0x5, {0x0, 0x3, 0x4, 0xffff, 0x9, 0x1, 0x1, 0x80, [{0x1f62, 0x8, 0x1, 0x400}, {0x1, 0x1, 0x7b4a806c, 0x1}, {0x400, 0x531, 0x80, 0x7ff}, {0x0, 0x3, 0x1, 0x853b}, {0x7f, 0xd, 0xfffff8fc, 0x1}, {0x9, 0x111, 0x2, 0xd}, {0x0, 0x9, 0x8, 0x7}, {0xcb26, 0xa6fb, 0x5, 0x4}, {0x2, 0x286, 0x8, 0x8}, {0xda1, 0x2, 0x1, 0x2}, {0x0, 0x9, 0x3, 0x5}, {0x9, 0x1, 0x5, 0xaf}, {0xf618, 0xffff, 0xa, 0x3}, {0x3ff, 0x8a40, 0x8001, 0x1d3}, {0xfffffff9, 0x401, 0x5, 0x6}, {0x1, 0x2, 0x6, 0x3}, {0x0, 0x80, 0x8001, 0xffffffff}, {0x3ff, 0x4, 0x4, 0x1}, {0x38, 0x2, 0x9, 0x465c}, {0x7f8b, 0xe, 0xfffffffb, 0x1000}, {0x8, 0x36, 0x10001, 0x5}, {0x1, 0x2e9, 0x80000000, 0x7}, {0x401, 0x80000001, 0x5, 0xf571}, {0x13, 0x80, 0xd5, 0xa}, {0x5, 0x6, 0x4, 0x398d80ce}, {0x0, 0x0, 0x4, 0x5fa3}, {0x9, 0xffffffff, 0x8, 0x985}, {0x8, 0x1, 0x8723, 0xaf}, {0x0, 0x7, 0x3, 0x9}, {0x7ff, 0x80000000, 0x2, 0x4}, {0x8, 0x7, 0x29e9, 0x10}, {0x3, 0x0, 0x7, 0xffff}, {0x7, 0x5, 0x9}, {0x1, 0x476ac628, 0xc, 0x5}, {0x8, 0x53, 0x70b6, 0x3}, {0x766c, 0x7, 0x4, 0x5}, {0x0, 0x7, 0x23, 0x5}, {0x8, 0x3, 0xd351}, {0xfffffffd, 0x80000000, 0xfffffffe, 0x7}, {0x4, 0xe7, 0x8, 0xc}, {0x8, 0xffff, 0x40, 0x9}, {0x3, 0x7fff, 0x3, 0x4}, {0x101, 0x6b, 0xc871, 0x80}, {0x0, 0xa2, 0x10000, 0x7ff}, {0xbca, 0x4, 0xd956, 0x304}, {0x7, 0x2, 0x7c8, 0x1}, {0x4, 0x2, 0x1, 0x8}, {0x800, 0x0, 0x7fffffff, 0x5}, {0x9, 0x8, 0x1, 0x7}, {0x401, 0x8, 0x3, 0x800}, {0x1, 0x4, 0x7ff, 0xffffffff}, {0xfffffffd, 0x21, 0x10000, 0x7}, {0x80000001, 0x5, 0x0, 0x4}, {0x5, 0x1b, 0x40, 0x3}, {0x9, 0x0, 0x7, 0x7}, {0x0, 0x3, 0xc305, 0x7}, {0x7, 0x8, 0x6, 0x8}, {0x61f9, 0x6, 0x5, 0xfffffffc}, {0x7, 0x58, 0x1, 0x3}, {0x6, 0x4, 0x7, 0x8ef}, {0xaf99, 0x10001, 0x9}, {0xf7bf, 0xfffff801, 0x6, 0x59c5}, {0x1, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x40, 0xe}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x2e0, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e1cde38e17a99b0631ceb203eca163b3fdf9061a9210f"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1ac, 0x6, [@m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x25, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4d"}, {0xc}, {0xc}}}, @m_connmark={0x44, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x11, 0x6, "25e3c0c965c7f29e5a6b228b0c"}, {0xc}, {0xc}}}, @m_simple={0xd4, 0x0, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}, @TCA_DEF_DATA={0x7e, 0x3, 'mcastSui[>\xea]S]\x9c-n\x8f\x8aT\xbf0\xc3]\x183\xc3\xfa\x02R\xa8\xab\x84\xd6\xf2y\xc4\xd4\xcc\x83\xe3\x18\xeaj\xc2\xcd\xfe\x01\x8d\xbe\x05\xdd*d\n\x80aU_\x96N\xc4$\x88b\xc8\x80u%\xa9r1\xff>\xaa\x06\xb4\x004\xce\xc9:\xbf.q\xa0\vCI\"R/\x00\x18&x\x10\xd9l\xf0\xffL\xb5\x91hE\xde\xf5\x82d7#\xb4U;\xb0\xca\x80u*\xd0n'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xa00}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 214.758382ms ago: executing program 1 (id=4505): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x95c, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x6a0, 0x2, [@TCA_U32_ACT={0x258, 0x7, [@m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x401, 0x5, 0x4, 0x7ff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x800}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x3a, 0x6, "0e07bb6dca77e55470753de3f22a0fb818351eabb44ef58a1db1342f3b221e7f2656928c1469777e47b500c22ccfaecd4236e48ce047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x108, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0xdd, 0x6, "7b62c5d7e53804b0278ff4e75b823d0ea4febbe599930f98fb7985f5c60d9d31e179bf021a325ab5d798479020aae755ded973c8de7bfa43572f5b327fc5f341a9b7728472b9d90a4574a4411d484276658d886667e6c8e96773d16503e8c7e996b61966333c30c61905f261255425c7444d3fbf481ecd3e9d243a5d9ac44148a030bd3539e0dded7a4883c4c680ee3e69bf01df39673a7c8c0bf8e2ac95af5259a641f8daa980cbd429d07e75a0ce7793f2c47e61d3ea64d413e2807f2eabad2b24867f027cfff05df6cf66d6d03176bafdbc54192700bbdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x9c, 0x19, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0xe}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "900aaca7ce0906dc76d98ce963a3820a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8db4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xa}}]}, {0x19, 0x6, "f960cbb1cb533e1a92ec4d35d14c52bdc9e062bd14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_FLAGS={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_U32_SEL={0x424, 0x5, {0x0, 0x3, 0x4, 0xffff, 0x9, 0x1, 0x1, 0x80, [{0x1f62, 0x8, 0x1, 0x400}, {0x1, 0x1, 0x7b4a806c, 0x1}, {0x400, 0x531, 0x80, 0x7ff}, {0x0, 0x3, 0x1, 0x853b}, {0x7f, 0xd, 0xfffff8fc, 0x1}, {0x9, 0x111, 0x2, 0xd}, {0x0, 0x9, 0x8, 0x7}, {0xcb26, 0xa6fb, 0x5, 0x4}, {0x2, 0x286, 0x8, 0x8}, {0xda1, 0x2, 0x1, 0x2}, {0x0, 0x9, 0x3, 0x5}, {0x9, 0x1, 0x5, 0xaf}, {0xf618, 0xffff, 0xa, 0x3}, {0x3ff, 0x8a40, 0x8001, 0x1d3}, {0xfffffff9, 0x401, 0x5, 0x6}, {0x1, 0x2, 0x6, 0x3}, {0x0, 0x80, 0x8001, 0xffffffff}, {0x3ff, 0x4, 0x4, 0x1}, {0x38, 0x2, 0x9, 0x465c}, {0x7f8b, 0xe, 0xfffffffb, 0x1000}, {0x8, 0x36, 0x10001, 0x5}, {0x1, 0x2e9, 0x80000000, 0x7}, {0x401, 0x80000001, 0x5, 0xf571}, {0x13, 0x80, 0xd5, 0xa}, {0x5, 0x6, 0x4, 0x398d80ce}, {0x0, 0x0, 0x4, 0x5fa3}, {0x9, 0xffffffff, 0x8, 0x985}, {0x8, 0x1, 0x8723, 0xaf}, {0x0, 0x7, 0x3, 0x9}, {0x7ff, 0x80000000, 0x2, 0x4}, {0x8, 0x7, 0x29e9, 0x10}, {0x3, 0x0, 0x7, 0xffff}, {0x7, 0x5, 0x9}, {0x1, 0x476ac628, 0xc, 0x5}, {0x8, 0x53, 0x70b6, 0x3}, {0x766c, 0x7, 0x4, 0x5}, {0x0, 0x7, 0x23, 0x5}, {0x8, 0x3, 0xd351}, {0xfffffffd, 0x80000000, 0xfffffffe, 0x7}, {0x6, 0x1, 0xdd7d, 0x193f72a9}, {0x4, 0xe7, 0x8, 0xc}, {0x8, 0xffff, 0x40, 0x9}, {0x3, 0x7fff, 0x3, 0x4}, {0x101, 0x6b, 0xc871, 0x80}, {0x0, 0xa2, 0x10000, 0x7ff}, {0xbca, 0x4, 0xd956, 0x304}, {0x7, 0x2, 0x7c8, 0x1}, {0x4, 0x2, 0x1, 0x8}, {0x800, 0x0, 0x7fffffff, 0x5}, {0x9, 0x8, 0x1, 0x7}, {0x401, 0x8, 0x3, 0x800}, {0x1, 0x4, 0x7ff, 0xffffffff}, {0xfffffffd, 0x21, 0x10000, 0x7}, {0x80000001, 0x5, 0x0, 0x4}, {0x5, 0x1b, 0x40, 0x3}, {0x9, 0x0, 0x7, 0x7}, {0x0, 0x3, 0xc305, 0x7}, {0x7, 0x8, 0x6, 0x8}, {0x61f9, 0x6, 0x5, 0xfffffffc}, {0x7, 0x58, 0x1, 0x3}, {0x6, 0x4, 0x7, 0x8ef}, {0xaf99, 0x10001, 0x9}, {0xf7bf, 0xfffff801, 0x6, 0x59c5}, {0x1, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x40, 0xe}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x22c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e1cde38e17a99b0631ceb203eca163b3fdf9061a9210f"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xf8, 0x6, [@m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x25, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4d"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x95c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.31085ms ago: executing program 4 (id=4506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x7f, 0xfff, 0x87, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x48) (fail_nth: 1) 821.39µs ago: executing program 0 (id=4507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40002004}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x2888, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fcntl$setown(r2, 0x8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f0000000680), &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1bf, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408006c7192835a6665000000000000030000000000000000000000020000fe19023de5d047960000000002000000000000000000000004000000000000"], 0x0, 0x56}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) waitid(0x1, r6, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=4508): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x33c, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x2a8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xf4, 0x6, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x59, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee"}, {0xc}, {0xc}}}, @m_nat={0x44, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x1b, 0x6, "23e2d34ec25b3ff6082e79a7b62059856cb2909250619e"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x18c, 0x6, [@m_mpls={0x58, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x23, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0xc8, 0x0, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']$\x00'}, @TCA_DEF_DATA={0x7e, 0x3, 'mcastSui[>\xea]S]\x9c-n\x8f\x8aT\xbf0\xc3]\x183\xc3\xfa\x02R\xa8\xab\x84\xd6\xf2y\xc4\xd4\xcc\x83\xe3\x18\xeaj\xc2\xcd\xfe\x01\x8d\xbe\x05\xdd*d\n\x80aU_\x96N\xc4$\x88b\xc8\x80u%\xa9r1\xff>\xaa\x06\xb4\x004\xce\xc9:\xbf.q\xa0\vCI\"R/\x00\x18&x\x10\xd9l\xf0\xffL\xb5\x91hE\xde\xf5\x82d7#\xb4U;\xb0\xca\x80u*\xd0n'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x33c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 2128.812578][T25267] FAT-fs (loop4): Directory bread(block 64) failed [ 2128.845439][T25244] BTRFS info (device loop0): has skinny extents [ 2128.849834][T25267] FAT-fs (loop4): Directory bread(block 65) failed [ 2128.936464][T25267] FAT-fs (loop4): Directory bread(block 66) failed [ 2128.956909][T25267] FAT-fs (loop4): Directory bread(block 67) failed [ 2128.975221][T25267] FAT-fs (loop4): Directory bread(block 68) failed [ 2129.000747][T25267] FAT-fs (loop4): Directory bread(block 69) failed [ 2129.030021][T25267] FAT-fs (loop4): Directory bread(block 70) failed [ 2129.054203][T25267] FAT-fs (loop4): Directory bread(block 71) failed [ 2129.072617][T25267] FAT-fs (loop4): Directory bread(block 72) failed [ 2129.080034][T25267] FAT-fs (loop4): Directory bread(block 73) failed [ 2129.082206][T25244] BTRFS info (device loop0): enabling ssd optimizations [ 2129.192953][T25267] attempt to access beyond end of device [ 2129.192953][T25267] loop4: rw=524288, want=1820, limit=256 [ 2129.263520][T10736] usb 4-1: USB disconnect, device number 33 [ 2129.381549][T25267] attempt to access beyond end of device [ 2129.381549][T25267] loop4: rw=0, want=1808, limit=256 [ 2129.415991][T25293] FAULT_INJECTION: forcing a failure. [ 2129.415991][T25293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2129.465831][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 2129.465845][ T26] audit: type=1800 audit(1724931627.613:100): pid=25267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4255" name="file2" dev="loop4" ino=1048972 res=0 errno=0 [ 2129.498664][T25295] loop2: detected capacity change from 0 to 128 [ 2129.540272][T25297] FAULT_INJECTION: forcing a failure. [ 2129.540272][T25297] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.553432][T25293] CPU: 0 PID: 25293 Comm: syz.4.4255 Not tainted 5.15.165-syzkaller #0 [ 2129.561702][T25293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2129.571775][T25293] Call Trace: [ 2129.575073][T25293] [ 2129.578014][T25293] dump_stack_lvl+0x1e3/0x2d0 [ 2129.582721][T25293] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2129.588372][T25293] ? panic+0x860/0x860 [ 2129.592468][T25293] ? snprintf+0xd6/0x120 [ 2129.596730][T25293] should_fail+0x38a/0x4c0 [ 2129.601174][T25293] _copy_to_user+0x2d/0x130 [ 2129.605710][T25293] simple_read_from_buffer+0xc6/0x150 [ 2129.611114][T25293] proc_fail_nth_read+0x1a3/0x210 [ 2129.616156][T25293] ? proc_fault_inject_write+0x390/0x390 [ 2129.621806][T25293] ? fsnotify_perm+0x442/0x590 [ 2129.626585][T25293] ? proc_fault_inject_write+0x390/0x390 [ 2129.632230][T25293] vfs_read+0x2fc/0xe10 [ 2129.636437][T25293] ? kernel_read+0x1f0/0x1f0 [ 2129.641053][T25293] ? __fget_files+0x413/0x480 [ 2129.645753][T25293] ? mutex_lock_nested+0x17/0x20 [ 2129.650704][T25293] ? __fdget_pos+0x2cb/0x380 [ 2129.655315][T25293] ? ksys_read+0x77/0x2c0 [ 2129.659663][T25293] ksys_read+0x1a2/0x2c0 [ 2129.663918][T25293] ? print_irqtrace_events+0x210/0x210 [ 2129.669410][T25293] ? vfs_write+0xe50/0xe50 [ 2129.673839][T25293] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2129.679837][T25293] ? lockdep_hardirqs_on+0x94/0x130 [ 2129.685054][T25293] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2129.691051][T25293] do_syscall_64+0x3b/0xb0 [ 2129.695467][T25293] ? clear_bhb_loop+0x15/0x70 [ 2129.700151][T25293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2129.706047][T25293] RIP: 0033:0x7f752eee293c [ 2129.710478][T25293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2129.730116][T25293] RSP: 002b:00007f752d33f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2129.738663][T25293] RAX: ffffffffffffffda RBX: 00007f752f080058 RCX: 00007f752eee293c [ 2129.746641][T25293] RDX: 000000000000000f RSI: 00007f752d33f0a0 RDI: 0000000000000005 [ 2129.754620][T25293] RBP: 00007f752d33f090 R08: 0000000000000000 R09: 0000000000000000 [ 2129.762713][T25293] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000001 [ 2129.770692][T25293] R13: 0000000000000001 R14: 00007f752f080058 R15: 00007ffd2050e018 [ 2129.778704][T25293] [ 2129.781727][T25297] CPU: 1 PID: 25297 Comm: syz.3.4258 Not tainted 5.15.165-syzkaller #0 [ 2129.789990][T25297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2129.800057][T25297] Call Trace: [ 2129.803368][T25297] [ 2129.806314][T25297] dump_stack_lvl+0x1e3/0x2d0 [ 2129.811032][T25297] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2129.816682][T25297] ? panic+0x860/0x860 [ 2129.820755][T25297] ? __might_sleep+0xc0/0xc0 [ 2129.825350][T25297] should_fail+0x38a/0x4c0 [ 2129.829801][T25297] should_failslab+0x5/0x20 [ 2129.834330][T25297] slab_pre_alloc_hook+0x53/0xc0 [ 2129.839266][T25297] __kmalloc+0x6e/0x300 [ 2129.843433][T25297] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 2129.849148][T25297] tomoyo_realpath_from_path+0xd8/0x5e0 [ 2129.854694][T25297] tomoyo_path_number_perm+0x225/0x810 [ 2129.860417][T25297] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2129.865897][T25297] ? __fget_files+0x413/0x480 [ 2129.870578][T25297] security_file_ioctl+0x6d/0xa0 [ 2129.875625][T25297] __se_sys_ioctl+0x47/0x160 [ 2129.880241][T25297] do_syscall_64+0x3b/0xb0 [ 2129.884674][T25297] ? clear_bhb_loop+0x15/0x70 [ 2129.889366][T25297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2129.895261][T25297] RIP: 0033:0x7f832e98cef9 [ 2129.899683][T25297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2129.919303][T25297] RSP: 002b:00007f832ce09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2129.927723][T25297] RAX: ffffffffffffffda RBX: 00007f832eb28f80 RCX: 00007f832e98cef9 [ 2129.935705][T25297] RDX: 0000000020003680 RSI: 000000004080aebf RDI: 0000000000000005 [ 2129.943671][T25297] RBP: 00007f832ce09090 R08: 0000000000000000 R09: 0000000000000000 [ 2129.951646][T25297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2129.959631][T25297] R13: 0000000000000000 R14: 00007f832eb28f80 R15: 00007ffe3e1eb528 [ 2129.967705][T25297] [ 2130.578414][T25300] loop1: detected capacity change from 0 to 1024 [ 2130.617128][T25297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2130.801213][T25306] loop4: detected capacity change from 0 to 128 [ 2130.875167][T25306] FAULT_INJECTION: forcing a failure. [ 2130.875167][T25306] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.918603][T25300] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 2130.927489][T25306] CPU: 1 PID: 25306 Comm: syz.4.4260 Not tainted 5.15.165-syzkaller #0 [ 2130.949746][T25306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2130.959991][T25306] Call Trace: [ 2130.963298][T25306] [ 2130.966565][T25306] dump_stack_lvl+0x1e3/0x2d0 [ 2130.971280][T25306] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2130.976939][T25306] ? panic+0x860/0x860 [ 2130.981034][T25306] ? __might_sleep+0xc0/0xc0 [ 2130.985655][T25306] should_fail+0x38a/0x4c0 [ 2130.990110][T25306] should_failslab+0x5/0x20 [ 2130.994639][T25306] slab_pre_alloc_hook+0x53/0xc0 [ 2130.999607][T25306] __kmalloc+0x6e/0x300 [ 2131.003781][T25306] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 2131.009529][T25306] tomoyo_realpath_from_path+0xd8/0x5e0 [ 2131.015207][T25306] tomoyo_path_number_perm+0x225/0x810 [ 2131.020697][T25306] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2131.026223][T25306] ? __fget_files+0x413/0x480 [ 2131.030942][T25306] security_file_ioctl+0x6d/0xa0 [ 2131.035906][T25306] __se_sys_ioctl+0x47/0x160 [ 2131.040526][T25306] do_syscall_64+0x3b/0xb0 [ 2131.044964][T25306] ? clear_bhb_loop+0x15/0x70 [ 2131.049666][T25306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2131.055587][T25306] RIP: 0033:0x7f752eee3ef9 [ 2131.060017][T25306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2131.079731][T25306] RSP: 002b:00007f752d360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2131.088174][T25306] RAX: ffffffffffffffda RBX: 00007f752f07ff80 RCX: 00007f752eee3ef9 [ 2131.096175][T25306] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000003 [ 2131.104176][T25306] RBP: 00007f752d360090 R08: 0000000000000000 R09: 0000000000000000 [ 2131.112175][T25306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2131.120168][T25306] R13: 0000000000000000 R14: 00007f752f07ff80 R15: 00007ffd2050e018 [ 2131.128190][T25306] [ 2131.134075][T25321] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4266'. [ 2131.177066][T25315] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4266'. [ 2131.197346][T25306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2131.257760][T25320] loop2: detected capacity change from 0 to 1024 [ 2131.542414][T25320] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 2131.608273][T25338] loop1: detected capacity change from 0 to 512 [ 2131.633733][T25333] process 'syz.4.4268' launched './file0/file0' with NULL argv: empty string added [ 2131.685282][T10736] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2131.737676][T25338] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 2131.934159][T10736] usb 4-1: Using ep0 maxpacket: 32 [ 2131.941495][T25340] loop0: detected capacity change from 0 to 1024 [ 2132.069205][T25340] EXT4-fs (loop0): can't mount with commit=12, fs mounted w/o journal [ 2132.250375][T25123] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2132.435648][T25346] loop0: detected capacity change from 0 to 16 [ 2132.563761][T25123] usb 3-1: Using ep0 maxpacket: 32 [ 2132.624491][T25343] FAULT_INJECTION: forcing a failure. [ 2132.624491][T25343] name failslab, interval 1, probability 0, space 0, times 0 [ 2132.632641][T25346] erofs: (device loop0): mounted with root inode @ nid 36. [ 2132.684505][T25343] CPU: 0 PID: 25343 Comm: syz.2.4271 Not tainted 5.15.165-syzkaller #0 [ 2132.692800][T25343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2132.702869][T25343] Call Trace: [ 2132.706163][T25343] [ 2132.709112][T25343] dump_stack_lvl+0x1e3/0x2d0 [ 2132.713816][T25343] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2132.719478][T25343] ? panic+0x860/0x860 [ 2132.723570][T25343] ? __might_sleep+0xc0/0xc0 [ 2132.728182][T25343] should_fail+0x38a/0x4c0 [ 2132.733056][T25343] should_failslab+0x5/0x20 [ 2132.737582][T25343] slab_pre_alloc_hook+0x53/0xc0 [ 2132.742552][T25343] __kmalloc+0x6e/0x300 [ 2132.746727][T25343] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 2132.752476][T25343] tomoyo_realpath_from_path+0xd8/0x5e0 [ 2132.758051][T25343] tomoyo_path_number_perm+0x225/0x810 [ 2132.763543][T25343] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2132.769166][T25343] ? __fget_files+0x413/0x480 [ 2132.773882][T25343] security_file_ioctl+0x6d/0xa0 [ 2132.778843][T25343] __se_sys_ioctl+0x47/0x160 [ 2132.783461][T25343] do_syscall_64+0x3b/0xb0 [ 2132.787892][T25343] ? clear_bhb_loop+0x15/0x70 [ 2132.792593][T25343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2132.798507][T25343] RIP: 0033:0x7f0d8e454ef9 [ 2132.802937][T25343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2132.822555][T25343] RSP: 002b:00007f0d8c8b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2132.830993][T25343] RAX: ffffffffffffffda RBX: 00007f0d8e5f1058 RCX: 00007f0d8e454ef9 [ 2132.838976][T25343] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 2132.846963][T25343] RBP: 00007f0d8c8b0090 R08: 0000000000000000 R09: 0000000000000000 [ 2132.854960][T25343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2132.862949][T25343] R13: 0000000000000000 R14: 00007f0d8e5f1058 R15: 00007ffe2e955298 [ 2132.870953][T25343] [ 2132.892638][T25343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2132.999617][T25358] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 2133.009132][T25358] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 2133.018419][T25358] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 2133.027945][T25358] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 2133.037782][T25358] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 2133.047838][T25358] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 2133.058202][T25358] attempt to access beyond end of device [ 2133.058202][T25358] loop0: rw=524288, want=6536, limit=16 [ 2133.069716][T25358] attempt to access beyond end of device [ 2133.069716][T25358] loop0: rw=524288, want=34359736344, limit=16 [ 2133.081960][T25358] attempt to access beyond end of device [ 2133.081960][T25358] loop0: rw=524288, want=736, limit=16 [ 2133.093749][T25358] attempt to access beyond end of device [ 2133.093749][T25358] loop0: rw=524288, want=536576872, limit=16 [ 2133.105817][T25358] attempt to access beyond end of device [ 2133.105817][T25358] loop0: rw=524288, want=24, limit=16 [ 2133.117070][T25358] attempt to access beyond end of device [ 2133.117070][T25358] loop0: rw=524288, want=13478624040, limit=16 [ 2133.547953][T25360] loop4: detected capacity change from 0 to 128 [ 2133.583295][ T8223] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2133.677723][T25360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2133.717460][T25360] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038 (0x7fffffff) [ 2133.803263][ T8223] usb 2-1: device descriptor read/64, error -71 [ 2134.093470][T25372] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4279'. [ 2134.102969][ T8223] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2134.124193][T25371] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4279'. [ 2134.292847][ T8223] usb 2-1: device descriptor read/64, error -71 [ 2134.428724][T25328] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2134.518197][ T8223] usb usb2-port1: attempt power cycle [ 2134.612209][T10736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2134.621309][T10736] usb 4-1: no configurations [ 2134.626706][T10736] usb 4-1: can't read configurations, error -22 [ 2134.657889][T25381] FAULT_INJECTION: forcing a failure. [ 2134.657889][T25381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2134.671352][T25381] CPU: 1 PID: 25381 Comm: syz.3.4283 Not tainted 5.15.165-syzkaller #0 [ 2134.679616][T25381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2134.689691][T25381] Call Trace: [ 2134.692986][T25381] [ 2134.695961][T25381] dump_stack_lvl+0x1e3/0x2d0 [ 2134.700656][T25381] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2134.706300][T25381] ? panic+0x860/0x860 [ 2134.710382][T25381] ? __lock_acquire+0x1295/0x1ff0 [ 2134.715445][T25381] should_fail+0x38a/0x4c0 [ 2134.719899][T25381] _copy_from_user+0x2d/0x170 [ 2134.724590][T25381] ___sys_recvmsg+0x150/0x690 [ 2134.724740][T25328] usb 5-1: Using ep0 maxpacket: 16 [ 2134.729285][T25381] ? __sys_recvmsg+0x260/0x260 [ 2134.739162][T25381] ? __fdget+0x191/0x220 [ 2134.743418][T25381] __x64_sys_recvmsg+0x1dc/0x2b0 [ 2134.748368][T25381] ? ___sys_recvmsg+0x690/0x690 [ 2134.753244][T25381] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2134.759260][T25381] ? lockdep_hardirqs_on+0x94/0x130 [ 2134.764479][T25381] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2134.770484][T25381] do_syscall_64+0x3b/0xb0 [ 2134.774914][T25381] ? clear_bhb_loop+0x15/0x70 [ 2134.779608][T25381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2134.785533][T25381] RIP: 0033:0x7f832e98cef9 [ 2134.789959][T25381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2134.809577][T25381] RSP: 002b:00007f832ce09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2134.818020][T25381] RAX: ffffffffffffffda RBX: 00007f832eb28f80 RCX: 00007f832e98cef9 [ 2134.826023][T25381] RDX: 0000000000002000 RSI: 0000000020001180 RDI: 0000000000000003 [ 2134.834011][T25381] RBP: 00007f832ce09090 R08: 0000000000000000 R09: 0000000000000000 [ 2134.841998][T25381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2134.849979][T25381] R13: 0000000000000000 R14: 00007f832eb28f80 R15: 00007ffe3e1eb528 [ 2134.857980][T25381] [ 2134.922944][T25328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.937944][T25383] Bluetooth: hci3: service_discovery: too big uuid_count value 10432 [ 2134.952642][T25123] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2134.962612][T25328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.972391][T25328] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 2134.975324][T25123] usb 3-1: no configurations [ 2135.002009][T25385] loop3: detected capacity change from 0 to 128 [ 2135.009480][T25328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.022444][T25123] usb 3-1: can't read configurations, error -22 [ 2135.056022][T25328] usb 5-1: config 0 descriptor?? [ 2135.127036][T25387] loop2: detected capacity change from 0 to 1024 [ 2135.144821][T25385] fuse: Unknown parameter 'f' [ 2135.170555][T25385] SET target dimension over the limit! [ 2135.190546][T25387] EXT4-fs (loop2): Ignoring removed bh option [ 2135.306879][T25387] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,errors=remount-ro,norecovery,debug_want_extra_isize=0x0000000000000080,bh,stripe=0x000000000000003a,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 2135.411139][T25387] FAULT_INJECTION: forcing a failure. [ 2135.411139][T25387] name failslab, interval 1, probability 0, space 0, times 0 [ 2135.426678][T25387] CPU: 1 PID: 25387 Comm: syz.2.4286 Not tainted 5.15.165-syzkaller #0 [ 2135.434964][T25387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2135.445122][T25387] Call Trace: [ 2135.448412][T25387] [ 2135.451353][T25387] dump_stack_lvl+0x1e3/0x2d0 [ 2135.456053][T25387] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2135.461711][T25387] ? panic+0x860/0x860 [ 2135.462823][T25400] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4290'. [ 2135.465802][T25387] ? __might_sleep+0xc0/0xc0 [ 2135.465844][T25387] should_fail+0x38a/0x4c0 [ 2135.484020][T25387] should_failslab+0x5/0x20 [ 2135.488548][T25387] slab_pre_alloc_hook+0x53/0xc0 [ 2135.493511][T25387] ? getname_flags+0xb8/0x4e0 [ 2135.498211][T25387] kmem_cache_alloc+0x3f/0x280 [ 2135.503003][T25387] getname_flags+0xb8/0x4e0 [ 2135.507543][T25387] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2135.513197][T25399] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4290'. [ 2135.513546][T25387] __x64_sys_unlinkat+0xaf/0xf0 [ 2135.527574][T25387] do_syscall_64+0x3b/0xb0 [ 2135.529452][T25374] loop4: detected capacity change from 0 to 512 [ 2135.532008][T25387] ? clear_bhb_loop+0x15/0x70 [ 2135.542913][T25387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2135.548835][T25387] RIP: 0033:0x7f0d8e454ef9 [ 2135.553268][T25387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2135.572895][T25387] RSP: 002b:00007f0d8c8d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 2135.581332][T25387] RAX: ffffffffffffffda RBX: 00007f0d8e5f0f80 RCX: 00007f0d8e454ef9 [ 2135.589311][T25387] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2135.597299][T25387] RBP: 00007f0d8c8d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.605279][T25387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2135.613244][T25387] R13: 0000000000000000 R14: 00007f0d8e5f0f80 R15: 00007ffe2e955298 [ 2135.621225][T25387] [ 2135.910615][T25379] loop0: detected capacity change from 0 to 40427 [ 2135.940505][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2135.959120][T25408] FAULT_INJECTION: forcing a failure. [ 2135.959120][T25408] name failslab, interval 1, probability 0, space 0, times 0 [ 2135.972969][T25408] CPU: 1 PID: 25408 Comm: syz.1.4292 Not tainted 5.15.165-syzkaller #0 [ 2135.981239][T25408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2135.991310][T25408] Call Trace: [ 2135.994603][T25408] [ 2135.997549][T25408] dump_stack_lvl+0x1e3/0x2d0 [ 2136.002252][T25408] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2136.007910][T25408] ? panic+0x860/0x860 [ 2136.012003][T25408] ? __might_sleep+0xc0/0xc0 [ 2136.015405][T25374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2136.016708][T25408] should_fail+0x38a/0x4c0 [ 2136.032126][T25408] should_failslab+0x5/0x20 [ 2136.036650][T25408] slab_pre_alloc_hook+0x53/0xc0 [ 2136.041650][T25408] __kmalloc+0x6e/0x300 [ 2136.045822][T25408] ? sock_kmalloc+0x93/0xf0 [ 2136.046277][T25374] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038 (0x7fffffff) [ 2136.050350][T25408] sock_kmalloc+0x93/0xf0 [ 2136.050379][T25408] hash_sendpage+0x268/0x940 [ 2136.050415][T25408] kernel_sendpage+0x2e0/0x390 [ 2136.060618][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 0 [ 2136.064533][T25408] sock_sendpage+0x7f/0xb0 [ 2136.064567][T25408] pipe_to_sendpage+0x260/0x350 [ 2136.069646][T22008] EXT4-fs (loop2): Remounting filesystem read-only [ 2136.073887][T25408] ? sock_fasync+0xf0/0xf0 [ 2136.073917][T25408] ? generic_splice_sendpage+0x220/0x220 [ 2136.073954][T25408] __splice_from_pipe+0x33b/0x890 [ 2136.073996][T25408] ? generic_splice_sendpage+0x220/0x220 [ 2136.125114][T25408] generic_splice_sendpage+0x195/0x220 [ 2136.130672][T25408] ? iter_file_splice_write+0xfa0/0xfa0 [ 2136.136224][T25408] ? common_file_perm+0x17d/0x1d0 [ 2136.141249][T25408] ? fsnotify_perm+0x64/0x590 [ 2136.145921][T25408] ? security_file_permission+0x75/0xa0 [ 2136.151463][T25408] ? iter_file_splice_write+0xfa0/0xfa0 [ 2136.157005][T25408] do_splice+0xfe6/0x1790 [ 2136.161345][T25408] ? __fget_files+0x413/0x480 [ 2136.166023][T25408] ? wait_for_space+0x2d0/0x2d0 [ 2136.170874][T25408] ? __fdget+0x191/0x220 [ 2136.175112][T25408] __se_sys_splice+0x340/0x420 [ 2136.179878][T25408] ? __x64_sys_splice+0xf0/0xf0 [ 2136.184723][T25408] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2136.190699][T25408] ? lockdep_hardirqs_on+0x94/0x130 [ 2136.195898][T25408] ? __x64_sys_splice+0x1d/0xf0 [ 2136.200747][T25408] do_syscall_64+0x3b/0xb0 [ 2136.205156][T25408] ? clear_bhb_loop+0x15/0x70 [ 2136.209829][T25408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2136.215722][T25408] RIP: 0033:0x7faf73e65ef9 [ 2136.220134][T25408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2136.239748][T25408] RSP: 002b:00007faf722c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2136.248156][T25408] RAX: ffffffffffffffda RBX: 00007faf74002058 RCX: 00007faf73e65ef9 [ 2136.256120][T25408] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000008 [ 2136.264083][T25408] RBP: 00007faf722c1090 R08: 2000000000000005 R09: 0000000000000000 [ 2136.272046][T25408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2136.280013][T25408] R13: 0000000000000000 R14: 00007faf74002058 R15: 00007ffeb853bee8 [ 2136.287999][T25408] [ 2136.352425][T25379] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 2136.360394][T25379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2136.363441][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2136.404945][T25379] F2FS-fs (loop0): invalid crc value [ 2136.406208][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 1024 [ 2136.443345][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2136.445135][T25379] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2136.464603][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 2048 [ 2136.498421][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2136.621301][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 3072 [ 2136.707093][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2136.839361][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 4096 [ 2136.864403][T25328] ntrig 0003:1B96:0008.0020: unknown main item tag 0x0 [ 2136.871346][T25328] ntrig 0003:1B96:0008.0020: unknown main item tag 0x0 [ 2136.886148][T25420] loop1: detected capacity change from 0 to 2048 [ 2136.894296][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2136.920825][T25328] ntrig 0003:1B96:0008.0020: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 2136.947263][T25423] loop3: detected capacity change from 0 to 164 [ 2136.951788][T25379] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2136.956573][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 5120 [ 2136.960560][T25379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 2136.998404][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2137.024416][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 6144 [ 2137.049522][T25379] attempt to access beyond end of device [ 2137.049522][T25379] loop0: rw=2051, want=45064, limit=40427 [ 2137.063943][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2137.074436][T25420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2137.094174][T25328] ntrig 0003:1B96:0008.0020: Firmware version: 4.0.5.6.1 (8089 d9a8) [ 2137.112087][T25379] attempt to access beyond end of device [ 2137.112087][T25379] loop0: rw=2051, want=131072, limit=40427 [ 2137.133104][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 7168 [ 2137.156156][T25423] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 2137.226138][T25379] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 2137.226186][T25379] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 2137.274467][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2137.335852][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 8192 [ 2137.358606][T22008] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 2137.375581][T22008] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /156/file1/lost+found: directory fails checksum at offset 9216 [ 2137.776715][T25430] loop2: detected capacity change from 0 to 512 [ 2137.888675][T25430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2138.045267][T25430] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 2138.194751][T25430] EXT4-fs (loop2): 1 truncate cleaned up [ 2138.200434][T25430] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 2138.335154][T25439] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4302'. [ 2138.365602][T25436] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4302'. [ 2138.448907][T25438] loop0: detected capacity change from 0 to 2048 [ 2138.463968][T25395] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 2138.721229][T24765] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 2138.780404][T24765] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 2139.337309][T24583] usb 5-1: USB disconnect, device number 41 [ 2139.886467][T25464] loop2: detected capacity change from 0 to 8 [ 2139.922404][T25465] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4314'. [ 2140.847584][T25443] loop3: detected capacity change from 0 to 32768 [ 2140.937129][T25464] SQUASHFS error: Failed to read block 0x4e8: -5 [ 2140.967527][T25443] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.4304 (25443) [ 2140.980697][T25470] loop0: detected capacity change from 0 to 2048 [ 2141.007716][T25464] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 2141.079819][ T26] audit: type=1800 audit(1724931639.228:101): pid=25464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4312" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 2141.127131][T25468] sp0: Synchronizing with TNC [ 2141.154168][T25470] UDF-fs: bad mount option "i [ 2141.154168][T25470] –ê>§á‘†OGocharset=isstriCt" or missing value [ 2141.175655][T25443] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 2141.211583][T25443] BTRFS info (device loop3): using free space tree [ 2141.220414][T25443] BTRFS info (device loop3): has skinny extents [ 2141.325393][T25474] loop4: detected capacity change from 0 to 2048 [ 2141.490358][T25474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2141.662696][T25487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4316'. [ 2141.674199][T25487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4316'. [ 2142.075303][T25443] BTRFS error (device loop3): open_ctree failed [ 2142.203308][T25468] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 2142.379203][T25498] device syzkaller0 entered promiscuous mode [ 2142.497811][T25504] FAULT_INJECTION: forcing a failure. [ 2142.497811][T25504] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.511909][T25504] CPU: 0 PID: 25504 Comm: syz.2.4317 Not tainted 5.15.165-syzkaller #0 [ 2142.520181][T25504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2142.530255][T25504] Call Trace: [ 2142.533551][T25504] [ 2142.536491][T25504] dump_stack_lvl+0x1e3/0x2d0 [ 2142.541272][T25504] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2142.546923][T25504] ? panic+0x860/0x860 [ 2142.551018][T25504] should_fail+0x38a/0x4c0 [ 2142.555630][T25504] should_failslab+0x5/0x20 [ 2142.560150][T25504] slab_pre_alloc_hook+0x53/0xc0 [ 2142.565115][T25504] ? __sigqueue_alloc+0x3be/0x4d0 [ 2142.570158][T25504] kmem_cache_alloc+0x3f/0x280 [ 2142.574953][T25504] __sigqueue_alloc+0x3be/0x4d0 [ 2142.579835][T25504] __send_signal+0x21f/0xd40 [ 2142.584459][T25504] force_sig_info_to_task+0x327/0x470 [ 2142.589972][T25504] force_sig+0x114/0x1d0 [ 2142.594257][T25504] ? send_sig+0x1a0/0x1a0 [ 2142.598612][T25504] ? exc_general_protection+0x62/0x4f0 [ 2142.604090][T25504] exc_general_protection+0x122/0x4f0 [ 2142.609479][T25504] ? account_other_time+0x64/0x280 [ 2142.614610][T25504] ? vtime_user_enter+0x1eb/0x2d0 [ 2142.619659][T25504] ? syscall_exit_to_user_mode+0x7b/0x240 [ 2142.625401][T25504] asm_exc_general_protection+0x22/0x30 [ 2142.630963][T25504] RIP: 0033:0x7f0d8e42d779 [ 2142.635418][T25504] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 2142.655042][T25504] RSP: 002b:00007f0d8c8d07c8 EFLAGS: 00010283 [ 2142.661135][T25504] RAX: 0000000000000999 RBX: 00007f0d8c8d0d30 RCX: 00007f0d8e5b7160 [ 2142.669129][T25504] RDX: 9999999999999999 RSI: 00007f0d8e4c26fc RDI: 9999999999999999 [ 2142.677122][T25504] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 2142.685104][T25504] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 2142.693085][T25504] R13: 00007f0d8c8d0eb0 R14: 9999999999999999 R15: 0000000000000000 [ 2142.701081][T25504] [ 2142.790714][T25471] chnl_net:caif_netlink_parms(): no params data found [ 2143.057559][T10736] Bluetooth: hci0: command 0x0409 tx timeout [ 2143.072010][T25513] device syzkaller0 entered promiscuous mode [ 2143.149719][T25522] loop4: detected capacity change from 0 to 1024 [ 2143.235799][T25522] JBD2: no valid journal superblock found [ 2143.280262][T25522] EXT4-fs (loop4): error loading journal [ 2143.301731][T25471] bridge0: port 1(bridge_slave_0) entered blocking state [ 2143.340533][T25471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2143.409731][T25471] device bridge_slave_0 entered promiscuous mode [ 2143.447508][T25471] bridge0: port 2(bridge_slave_1) entered blocking state [ 2143.475163][T25471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2143.517797][T25471] device bridge_slave_1 entered promiscuous mode [ 2143.532765][T25527] loop2: detected capacity change from 0 to 2048 [ 2143.625798][T25527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2143.664103][T25471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2143.694908][T25471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2143.850410][ T4112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2143.904092][T25519] loop0: detected capacity change from 0 to 32768 [ 2143.913468][T25471] team0: Port device team_slave_0 added [ 2143.986073][ T4112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.047175][T25471] team0: Port device team_slave_1 added [ 2144.093154][T25519] XFS (loop0): Mounting V5 Filesystem [ 2144.183397][T25530] loop4: detected capacity change from 0 to 32768 [ 2144.204745][ T4112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.251539][T25530] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.4328 (25530) [ 2144.296449][T25519] XFS (loop0): Ending clean mount [ 2144.307073][T25530] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 2144.307173][T25471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2144.354647][T25519] FAULT_INJECTION: forcing a failure. [ 2144.354647][T25519] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.356928][T25530] BTRFS info (device loop4): using free space tree [ 2144.374399][T25471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2144.405714][T25530] BTRFS info (device loop4): has skinny extents [ 2144.414410][T25519] CPU: 0 PID: 25519 Comm: syz.0.4325 Not tainted 5.15.165-syzkaller #0 [ 2144.422691][T25519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2144.432765][T25519] Call Trace: [ 2144.436062][T25519] [ 2144.439009][T25519] dump_stack_lvl+0x1e3/0x2d0 [ 2144.443715][T25519] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2144.449375][T25519] ? panic+0x860/0x860 [ 2144.453475][T25519] ? __might_sleep+0xc0/0xc0 [ 2144.458103][T25519] should_fail+0x38a/0x4c0 [ 2144.462553][T25519] should_failslab+0x5/0x20 [ 2144.467081][T25519] slab_pre_alloc_hook+0x53/0xc0 [ 2144.472044][T25519] __kmalloc+0x6e/0x300 [ 2144.476226][T25519] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 2144.481975][T25519] tomoyo_realpath_from_path+0xd8/0x5e0 [ 2144.487559][T25519] tomoyo_path_number_perm+0x225/0x810 [ 2144.493057][T25519] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2144.498590][T25519] ? __fget_files+0x413/0x480 [ 2144.503308][T25519] security_file_ioctl+0x6d/0xa0 [ 2144.508273][T25519] __se_sys_ioctl+0x47/0x160 [ 2144.512888][T25519] do_syscall_64+0x3b/0xb0 [ 2144.517323][T25519] ? clear_bhb_loop+0x15/0x70 [ 2144.522033][T25519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2144.527952][T25519] RIP: 0033:0x7f76b19f2ef9 [ 2144.532389][T25519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2144.552099][T25519] RSP: 002b:00007f76afe6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2144.560545][T25519] RAX: ffffffffffffffda RBX: 00007f76b1b8ef80 RCX: 00007f76b19f2ef9 [ 2144.568545][T25519] RDX: 0000000020000180 RSI: 00000000c0385868 RDI: 0000000000000004 [ 2144.576539][T25519] RBP: 00007f76afe6f090 R08: 0000000000000000 R09: 0000000000000000 [ 2144.584562][T25519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2144.592557][T25519] R13: 0000000000000000 R14: 00007f76b1b8ef80 R15: 00007ffc9efd0508 [ 2144.600569][T25519] [ 2144.607657][T25528] loop3: detected capacity change from 0 to 32768 [ 2144.665500][T10198] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (10198) [ 2144.695215][T25471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2144.725654][T25528] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 2144.748709][T25528] BTRFS info (device loop3): use zlib compression, level 3 [ 2144.764200][T25528] BTRFS info (device loop3): using free space tree [ 2144.772259][T25528] BTRFS info (device loop3): has skinny extents [ 2144.787038][ T4112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.798105][T25519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2144.836673][ T8711] BTRFS error (device loop4): bad fsid on block 5341184 [ 2144.847771][T25530] BTRFS warning (device loop4): failed to read root (objectid=10): -5 [ 2144.881203][T25471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2144.896685][T21868] XFS (loop0): Unmounting Filesystem [ 2144.908637][T25471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2144.935849][T25471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2144.998511][T25530] BTRFS error (device loop4): open_ctree failed [ 2145.129823][T25528] BTRFS info (device loop3): enabling ssd optimizations [ 2145.228003][T10736] Bluetooth: hci0: command 0x041b tx timeout [ 2145.370268][T25471] device hsr_slave_0 entered promiscuous mode [ 2145.457843][T25471] device hsr_slave_1 entered promiscuous mode [ 2145.852287][T25584] FAULT_INJECTION: forcing a failure. [ 2145.852287][T25584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2145.903168][T25584] CPU: 1 PID: 25584 Comm: syz.0.4329 Not tainted 5.15.165-syzkaller #0 [ 2145.911564][T25584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2145.921641][T25584] Call Trace: [ 2145.924960][T25584] [ 2145.927907][T25584] dump_stack_lvl+0x1e3/0x2d0 [ 2145.929335][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 2145.932619][T25584] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2145.932653][T25584] ? panic+0x860/0x860 [ 2145.951177][T25584] ? snprintf+0xd6/0x120 [ 2145.955681][T25584] should_fail+0x38a/0x4c0 [ 2145.960122][T25584] _copy_to_user+0x2d/0x130 [ 2145.964639][T25584] simple_read_from_buffer+0xc6/0x150 [ 2145.970024][T25584] proc_fail_nth_read+0x1a3/0x210 [ 2145.975058][T25584] ? proc_fault_inject_write+0x390/0x390 [ 2145.980693][T25584] ? fsnotify_perm+0x442/0x590 [ 2145.985469][T25584] ? proc_fault_inject_write+0x390/0x390 [ 2145.991118][T25584] vfs_read+0x2fc/0xe10 [ 2145.995286][T25584] ? kernel_read+0x1f0/0x1f0 [ 2145.999884][T25584] ? __fget_files+0x413/0x480 [ 2146.004578][T25584] ? mutex_lock_nested+0x17/0x20 [ 2146.009525][T25584] ? __fdget_pos+0x2cb/0x380 [ 2146.014110][T25584] ? ksys_read+0x77/0x2c0 [ 2146.018441][T25584] ksys_read+0x1a2/0x2c0 [ 2146.022692][T25584] ? print_irqtrace_events+0x210/0x210 [ 2146.028152][T25584] ? vfs_write+0xe50/0xe50 [ 2146.032596][T25584] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2146.038684][T25584] ? lockdep_hardirqs_on+0x94/0x130 [ 2146.043889][T25584] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2146.049888][T25584] do_syscall_64+0x3b/0xb0 [ 2146.054304][T25584] ? clear_bhb_loop+0x15/0x70 [ 2146.058987][T25584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2146.064881][T25584] RIP: 0033:0x7f76b19f193c [ 2146.069295][T25584] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2146.088898][T25584] RSP: 002b:00007f76afe6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2146.097313][T25584] RAX: ffffffffffffffda RBX: 00007f76b1b8ef80 RCX: 00007f76b19f193c [ 2146.105280][T25584] RDX: 000000000000000f RSI: 00007f76afe6f0a0 RDI: 0000000000000006 [ 2146.113242][T25584] RBP: 00007f76afe6f090 R08: 0000000000000000 R09: 0000000000000000 [ 2146.121292][T25584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2146.129256][T25584] R13: 0000000000000000 R14: 00007f76b1b8ef80 R15: 00007ffc9efd0508 [ 2146.137238][T25584] [ 2146.248016][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 2146.312300][T22008] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 2146.352289][T22008] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 2146.915086][T25607] loop0: detected capacity change from 0 to 4096 [ 2146.980952][T25607] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2146.992235][T25612] loop4: detected capacity change from 0 to 4096 [ 2147.061742][T25612] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2147.095646][T25607] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 2147.195055][T25612] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 2147.264300][T25607] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #15: comm syz.0.4336: corrupted inode contents [ 2147.281531][T24581] Bluetooth: hci0: command 0x040f tx timeout [ 2147.344063][T25607] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #15: comm syz.0.4336: mark_inode_dirty error [ 2147.347642][T25612] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #15: comm syz.4.4337: corrupted inode contents [ 2147.400143][T25622] FAULT_INJECTION: forcing a failure. [ 2147.400143][T25622] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.401586][T25612] EXT4-fs error (device loop4): ext4_dirty_inode:6004: inode #15: comm syz.4.4337: mark_inode_dirty error [ 2147.435306][T25623] loop3: detected capacity change from 0 to 8 [ 2147.464217][T25607] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #15: comm syz.0.4336: corrupted inode contents [ 2147.494195][T25607] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.4336: mark_inode_dirty error [ 2147.504862][T25622] CPU: 1 PID: 25622 Comm: syz.4.4337 Not tainted 5.15.165-syzkaller #0 [ 2147.513889][T25622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2147.523974][T25622] Call Trace: [ 2147.527277][T25622] [ 2147.530227][T25622] dump_stack_lvl+0x1e3/0x2d0 [ 2147.534944][T25622] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2147.540615][T25622] ? panic+0x860/0x860 [ 2147.544768][T25622] ? __might_sleep+0xc0/0xc0 [ 2147.549394][T25622] should_fail+0x38a/0x4c0 [ 2147.553875][T25622] should_failslab+0x5/0x20 [ 2147.558414][T25622] slab_pre_alloc_hook+0x53/0xc0 [ 2147.563381][T25622] ? getname_flags+0xb8/0x4e0 [ 2147.568089][T25622] kmem_cache_alloc+0x3f/0x280 [ 2147.572891][T25622] getname_flags+0xb8/0x4e0 [ 2147.577428][T25622] __x64_sys_linkat+0xb6/0xf0 [ 2147.582139][T25622] do_syscall_64+0x3b/0xb0 [ 2147.586590][T25622] ? clear_bhb_loop+0x15/0x70 [ 2147.591306][T25622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2147.597233][T25622] RIP: 0033:0x7f752eee3ef9 [ 2147.601675][T25622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2147.621306][T25622] RSP: 002b:00007f752d33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 2147.629757][T25622] RAX: ffffffffffffffda RBX: 00007f752f080058 RCX: 00007f752eee3ef9 [ 2147.637934][T25622] RDX: 0000000000000004 RSI: 0000000020000180 RDI: 0000000000000004 [ 2147.646038][T25622] RBP: 00007f752d33f090 R08: 0000000000000400 R09: 0000000000000000 [ 2147.654143][T25622] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000001 [ 2147.662315][T25622] R13: 0000000000000000 R14: 00007f752f080058 R15: 00007ffd2050e018 [ 2147.670332][T25622] [ 2147.686351][T25607] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #15: comm syz.0.4336: corrupted inode contents [ 2147.698936][T25612] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #15: comm syz.4.4337: corrupted inode contents [ 2147.750166][T25607] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.4336: mark_inode_dirty error [ 2147.792344][T25612] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.4337: mark_inode_dirty error [ 2147.804019][T25607] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #15: comm syz.0.4336: corrupted inode contents [ 2147.829051][T25471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2147.864444][T25607] EXT4-fs error (device loop0): ext4_truncate:4272: inode #15: comm syz.0.4336: mark_inode_dirty error [ 2147.898056][T25471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2147.918161][T25612] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #15: comm syz.4.4337: corrupted inode contents [ 2147.930369][T25607] EXT4-fs error (device loop0) in ext4_setattr:5572: Corrupt filesystem [ 2147.936334][T25623] SQUASHFS error: Unable to read directory block [631:26] [ 2147.942286][T25471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2147.969921][T25471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2148.013930][T25619] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #15: comm syz.0.4336: corrupted inode contents [ 2148.016378][T25612] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.4337: mark_inode_dirty error [ 2148.125608][T25612] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #15: comm syz.4.4337: corrupted inode contents [ 2148.156275][T25612] EXT4-fs error (device loop4): ext4_truncate:4272: inode #15: comm syz.4.4337: mark_inode_dirty error [ 2148.186336][T25612] EXT4-fs error (device loop4) in ext4_setattr:5572: Corrupt filesystem [ 2148.329014][T25471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2148.353453][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2148.381302][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2148.419807][T25471] 8021q: adding VLAN 0 to HW filter on device team0 [ 2148.446706][T25633] chnl_net:caif_netlink_parms(): no params data found [ 2148.500279][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2148.519239][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2148.534340][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.541518][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.561735][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2148.573194][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2148.587982][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.595119][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.623520][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2148.778413][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2148.798607][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2148.815004][ T4112] device hsr_slave_0 left promiscuous mode [ 2148.823961][ T4112] device hsr_slave_1 left promiscuous mode [ 2148.830898][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2148.839930][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2148.928381][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2148.936816][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2148.945336][T25647] loop4: detected capacity change from 0 to 8 [ 2148.952929][ T4112] device bridge_slave_1 left promiscuous mode [ 2148.971497][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.989650][ T4112] device bridge_slave_0 left promiscuous mode [ 2149.001046][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.029424][ T4112] device veth1_macvtap left promiscuous mode [ 2149.041637][ T4112] device veth0_macvtap left promiscuous mode [ 2149.051621][ T4112] device veth1_vlan left promiscuous mode [ 2149.062570][ T4112] device veth0_vlan left promiscuous mode [ 2149.283007][T25643] loop0: detected capacity change from 0 to 32768 [ 2149.311332][T25643] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.4340 (25643) [ 2149.347716][T24582] Bluetooth: hci0: command 0x0419 tx timeout [ 2149.369478][T25643] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 2150.210974][T10736] Bluetooth: hci1: command 0x0409 tx timeout [ 2150.259160][T25643] BTRFS info (device loop0): using free space tree [ 2150.275358][T25643] BTRFS info (device loop0): has skinny extents [ 2150.303924][T25656] tmpfs: Unknown parameter 'hge' [ 2150.374493][ T3683] BTRFS error (device loop0): bad fsid on block 5341184 [ 2150.392879][T25643] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 2150.624468][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 2150.653696][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 2150.665426][T25643] BTRFS error (device loop0): open_ctree failed [ 2150.672010][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2150.693052][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2150.873678][ T4112] bond0 (unregistering): Released all slaves [ 2150.951674][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2150.964225][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2151.044209][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2151.052844][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2151.062745][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2151.072048][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2151.085779][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2151.099136][T25471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2151.123450][T25691] loop3: detected capacity change from 0 to 256 [ 2151.175862][T25471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2151.206131][T25691] FAT-fs (loop3): Unrecognized mount option "uni_xlate=" or missing value [ 2151.234802][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2151.253690][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2151.282294][T25633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.292385][T25633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.316740][T25633] device bridge_slave_0 entered promiscuous mode [ 2151.359220][T25633] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.414306][T25633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.432855][T25633] device bridge_slave_1 entered promiscuous mode [ 2151.504584][T25633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2151.536533][T25633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2151.655915][T25703] loop3: detected capacity change from 0 to 4096 [ 2151.673316][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2151.703171][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2151.733472][T25633] team0: Port device team_slave_0 added [ 2151.738676][T25703] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2151.764722][T25703] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 2151.775326][T25633] team0: Port device team_slave_1 added [ 2151.827376][T25471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2151.881459][T25690] loop4: detected capacity change from 0 to 32768 [ 2151.911522][T25633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2151.923482][T25633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2151.949648][T25633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2152.024054][T25633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2152.037723][T25703] loop3: detected capacity change from 0 to 1024 [ 2152.055006][T25633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2152.096870][T25633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2152.131282][T25690] XFS (loop4): Mounting V5 Filesystem [ 2152.161741][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2152.236976][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2152.277279][T25471] device veth0_vlan entered promiscuous mode [ 2152.285339][T25690] XFS (loop4): Ending clean mount [ 2152.304700][T25123] Bluetooth: hci1: command 0x041b tx timeout [ 2152.358329][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2152.385452][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2152.454402][T25633] device hsr_slave_0 entered promiscuous mode [ 2152.471834][T25633] device hsr_slave_1 entered promiscuous mode [ 2152.483055][T25633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2152.493158][T25633] Cannot create hsr debugfs directory [ 2152.510464][T25471] device veth1_vlan entered promiscuous mode [ 2152.524667][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2152.533389][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2152.549716][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2152.651663][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2152.664108][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2152.688678][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2152.739373][T25471] device veth0_macvtap entered promiscuous mode [ 2152.754492][T25123] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2152.771624][T25471] device veth1_macvtap entered promiscuous mode [ 2152.929654][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.959217][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.983830][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.003492][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.024236][T25123] usb 5-1: Using ep0 maxpacket: 16 [ 2153.029495][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.053740][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.073775][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.093589][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.115074][T25471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2153.140844][T25633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.167362][T25123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 2153.209691][T25123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 2153.233463][T25123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2153.263577][T25123] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 2153.272712][T25123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.311242][T25123] usb 5-1: config 0 descriptor?? [ 2153.321066][T19237] hfsplus: b-tree write err: -5, ino 4 [ 2153.331311][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2153.349927][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2153.368663][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2153.384166][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2153.416186][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.442039][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.462384][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.493232][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.514608][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.543258][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.558078][T25471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.573741][T25471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.595602][T25471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2153.615907][T25633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.644638][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2153.660949][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2153.672817][T25471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.682195][T25471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.690971][T25471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.700170][T25471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.719247][T25633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.795513][T24586] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2153.813155][T19506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.816488][T25123] hid-multitouch 0003:045E:9994.0021: unknown main item tag 0x2 [ 2153.834780][T25123] hid-multitouch 0003:045E:9994.0021: unknown main item tag 0x0 [ 2153.855261][T19506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.863722][T25123] hid-multitouch 0003:045E:9994.0021: unknown main item tag 0x0 [ 2153.871417][T25123] hid-multitouch 0003:045E:9994.0021: unknown main item tag 0x6 [ 2153.891161][T25123] hid-multitouch 0003:045E:9994.0021: unknown main item tag 0x6 [ 2153.906040][T25123] hid-multitouch 0003:045E:9994.0021: unknown main item tag 0x6 [ 2153.923670][T25123] hid-multitouch 0003:045E:9994.0021: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.4-1/input0 [ 2153.955523][T25633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.981871][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2153.999564][T19506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2154.017081][T19506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2154.041466][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2154.071788][T10736] usb 5-1: USB disconnect, device number 42 [ 2154.183216][T24586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2154.207818][T25633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2154.214621][T24586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2154.233180][T24586] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 2154.245935][T24586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.259511][T25633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2154.275066][T24586] usb 4-1: config 0 descriptor?? [ 2154.291708][T25633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2154.322257][T25633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2154.383130][T25327] Bluetooth: hci1: command 0x040f tx timeout [ 2154.494173][T25633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2154.550420][T25633] 8021q: adding VLAN 0 to HW filter on device team0 [ 2154.563121][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2154.574024][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2154.644167][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2154.655164][T24463] XFS (loop4): Unmounting Filesystem [ 2154.685627][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2154.736850][T19506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2154.744012][T19506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2154.777456][T24586] wacom 0003:056A:0059.0022: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.3-1/input0 [ 2154.782543][T25726] loop1: detected capacity change from 0 to 32768 [ 2154.796315][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2154.819835][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2154.828533][T19506] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.835696][T19506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2154.846504][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2154.858766][T25726] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4309 (25726) [ 2154.918092][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2154.964395][T25726] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2154.973957][T19506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2155.002584][T25726] BTRFS error (device loop1): unrecognized mount option 'defcontext=unconfined_u' [ 2155.037999][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2155.048581][T25726] BTRFS error (device loop1): open_ctree failed [ 2155.078537][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2155.116601][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2155.165068][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2155.192930][T25722] loop3: detected capacity change from 0 to 4096 [ 2155.206600][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2155.251650][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2155.290351][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2155.349726][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4309'. [ 2155.377648][T25633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2155.390756][T25722] ntfs3: loop3: failed to convert "0080" to cp864 [ 2155.441163][T25633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2155.464153][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2155.490779][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2155.849845][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2155.876856][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2155.900799][T25633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2156.034236][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2156.070188][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2156.099831][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2156.110654][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2156.129874][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2156.142924][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2156.166913][T25633] device veth0_vlan entered promiscuous mode [ 2156.212423][T25633] device veth1_vlan entered promiscuous mode [ 2156.436400][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2156.448377][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2156.462894][T25327] Bluetooth: hci1: command 0x0419 tx timeout [ 2156.487277][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2156.522237][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2156.554126][T25633] device veth0_macvtap entered promiscuous mode [ 2156.590900][T25633] device veth1_macvtap entered promiscuous mode [ 2156.615892][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2156.642924][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2156.659654][T25123] usb 4-1: USB disconnect, device number 36 [ 2156.699581][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.751556][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.761455][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.820463][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.836518][T25743] loop4: detected capacity change from 0 to 32768 [ 2156.840893][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.871537][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.891652][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.911478][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.931490][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.962153][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.983284][T25633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2156.999941][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2157.013306][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2157.025637][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2157.037278][T25743] XFS: ikeep mount option is deprecated. [ 2157.045151][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.056001][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2157.068776][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.079952][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2157.090792][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.101083][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2157.112412][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.129570][T25633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2157.140697][T25633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.150438][T25753] loop1: detected capacity change from 0 to 32768 [ 2157.159042][T25633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2157.171753][T25633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.181560][T25633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.190715][T25633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.206286][T25753] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4362 (25753) [ 2157.214198][T25633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.230093][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2157.259514][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2157.335620][T25753] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2157.346166][T25753] BTRFS info (device loop1): use zlib compression, level 3 [ 2157.353882][T25753] BTRFS info (device loop1): using free space tree [ 2157.360541][T25753] BTRFS info (device loop1): has skinny extents [ 2157.376090][T25743] XFS (loop4): Mounting V5 Filesystem [ 2157.484744][T19237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2157.518479][T19237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2157.612979][T25753] BTRFS info (device loop1): enabling ssd optimizations [ 2157.623714][T25743] XFS (loop4): Ending clean mount [ 2157.624557][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2157.634205][T25743] XFS (loop4): Quotacheck needed: Please wait. [ 2157.703727][T19237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2157.734119][T19237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2157.750004][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2157.946652][T25743] XFS (loop4): Quotacheck: Done. [ 2157.955714][ C1] eth0: bad gso: type: 1, size: 1408 [ 2158.108427][T25789] FAULT_INJECTION: forcing a failure. [ 2158.108427][T25789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2158.227205][T25789] CPU: 1 PID: 25789 Comm: syz.4.4358 Not tainted 5.15.165-syzkaller #0 [ 2158.235506][T25789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2158.245593][T25789] Call Trace: [ 2158.248891][T25789] [ 2158.251831][T25789] dump_stack_lvl+0x1e3/0x2d0 [ 2158.256539][T25789] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2158.262189][T25789] ? panic+0x860/0x860 [ 2158.266276][T25789] ? snprintf+0xd6/0x120 [ 2158.270539][T25789] should_fail+0x38a/0x4c0 [ 2158.274976][T25789] _copy_to_user+0x2d/0x130 [ 2158.279502][T25789] simple_read_from_buffer+0xc6/0x150 [ 2158.284898][T25789] proc_fail_nth_read+0x1a3/0x210 [ 2158.290373][T25789] ? proc_fault_inject_write+0x390/0x390 [ 2158.296032][T25789] ? fsnotify_perm+0x442/0x590 [ 2158.300822][T25789] ? proc_fault_inject_write+0x390/0x390 [ 2158.306475][T25789] vfs_read+0x2fc/0xe10 [ 2158.310653][T25789] ? kernel_read+0x1f0/0x1f0 [ 2158.315267][T25789] ? __fget_files+0x413/0x480 [ 2158.319971][T25789] ? mutex_lock_nested+0x17/0x20 [ 2158.324930][T25789] ? __fdget_pos+0x2cb/0x380 [ 2158.329540][T25789] ? ksys_read+0x77/0x2c0 [ 2158.333895][T25789] ksys_read+0x1a2/0x2c0 [ 2158.338160][T25789] ? print_irqtrace_events+0x210/0x210 [ 2158.343646][T25789] ? vfs_write+0xe50/0xe50 [ 2158.348268][T25789] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2158.354271][T25789] ? lockdep_hardirqs_on+0x94/0x130 [ 2158.359500][T25789] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2158.365502][T25789] do_syscall_64+0x3b/0xb0 [ 2158.369926][T25789] ? clear_bhb_loop+0x15/0x70 [ 2158.374619][T25789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2158.380568][T25789] RIP: 0033:0x7f752eee293c [ 2158.385003][T25789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2158.404681][T25789] RSP: 002b:00007f752d33f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2158.413123][T25789] RAX: ffffffffffffffda RBX: 00007f752f080058 RCX: 00007f752eee293c [ 2158.421109][T25789] RDX: 000000000000000f RSI: 00007f752d33f0a0 RDI: 0000000000000007 [ 2158.429096][T25789] RBP: 00007f752d33f090 R08: 0000000000000000 R09: 0000000000000000 [ 2158.437177][T25789] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 2158.445161][T25789] R13: 0000000000000001 R14: 00007f752f080058 R15: 00007ffd2050e018 [ 2158.453164][T25789] [ 2158.790551][ T4112] device hsr_slave_0 left promiscuous mode [ 2158.840017][ T4112] device hsr_slave_1 left promiscuous mode [ 2158.855187][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2158.883870][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2158.897853][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2158.903237][T25791] loop3: detected capacity change from 0 to 40427 [ 2158.906243][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2158.920308][ T4112] device bridge_slave_1 left promiscuous mode [ 2158.926966][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.948501][ T4112] device bridge_slave_0 left promiscuous mode [ 2158.955467][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.971167][T25791] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 2158.998721][T25791] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2159.036802][ T4112] device veth1_macvtap left promiscuous mode [ 2159.037153][T25791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2159.043442][ T4112] device veth0_macvtap left promiscuous mode [ 2159.056839][ T4112] device veth1_vlan left promiscuous mode [ 2159.063555][ T4112] device veth0_vlan left promiscuous mode [ 2159.101938][T25791] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2159.109111][T25791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2159.506962][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 2159.532461][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 2159.564743][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2159.607386][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2159.619668][T22156] attempt to access beyond end of device [ 2159.619668][T22156] loop3: rw=2049, want=40968, limit=40427 [ 2159.723407][ T4112] bond0 (unregistering): Released all slaves [ 2160.127534][T24463] XFS (loop4): Unmounting Filesystem [ 2160.196984][T25826] loop0: detected capacity change from 0 to 512 [ 2160.233450][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.241096][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.357127][T25826] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2160.400344][T25826] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 2160.440620][T25829] loop2: detected capacity change from 0 to 4096 [ 2160.729942][T25829] ntfs: (device loop2): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 2160.934547][T25829] ntfs: volume version 3.1. [ 2160.949875][T25829] ntfs: (device loop2): ntfs_read_locked_inode(): Index block size (8192) > PAGE_SIZE (4096) is not supported. Sorry. [ 2160.978331][T25829] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 2160.981192][T25846] FAULT_INJECTION: forcing a failure. [ 2160.981192][T25846] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.010708][T25829] ntfs: (device loop2): load_system_files(): Failed to load root directory. [ 2161.040319][T25829] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 2161.074231][T25846] CPU: 0 PID: 25846 Comm: syz.1.4378 Not tainted 5.15.165-syzkaller #0 [ 2161.082521][T25846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2161.092581][T25846] Call Trace: [ 2161.096310][T25846] [ 2161.099267][T25846] dump_stack_lvl+0x1e3/0x2d0 [ 2161.103970][T25846] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2161.109626][T25846] ? panic+0x860/0x860 [ 2161.113724][T25846] should_fail+0x38a/0x4c0 [ 2161.118167][T25846] should_failslab+0x5/0x20 [ 2161.122688][T25846] slab_pre_alloc_hook+0x53/0xc0 [ 2161.127647][T25846] ? create_new_namespaces+0x34/0x7a0 [ 2161.133039][T25846] kmem_cache_alloc+0x3f/0x280 [ 2161.137836][T25846] create_new_namespaces+0x34/0x7a0 [ 2161.143056][T25846] ? bpf_lsm_capable+0x5/0x10 [ 2161.147810][T25846] ? security_capable+0x86/0xb0 [ 2161.152693][T25846] unshare_nsproxy_namespaces+0x11e/0x170 [ 2161.158438][T25846] ksys_unshare+0x580/0xb20 [ 2161.162973][T25846] ? unshare_fd+0x240/0x240 [ 2161.167513][T25846] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2161.173520][T25846] ? lockdep_hardirqs_on+0x94/0x130 [ 2161.178748][T25846] __x64_sys_unshare+0x34/0x40 [ 2161.183533][T25846] do_syscall_64+0x3b/0xb0 [ 2161.187965][T25846] ? clear_bhb_loop+0x15/0x70 [ 2161.192663][T25846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2161.198674][T25846] RIP: 0033:0x7f27d32f6ef9 [ 2161.203109][T25846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2161.222734][T25846] RSP: 002b:00007f27d1752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2161.231177][T25846] RAX: ffffffffffffffda RBX: 00007f27d3493058 RCX: 00007f27d32f6ef9 [ 2161.239164][T25846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 2161.247324][T25846] RBP: 00007f27d1752090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.255310][T25846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2161.263296][T25846] R13: 0000000000000000 R14: 00007f27d3493058 R15: 00007ffdd5e922c8 [ 2161.271276][T25846] [ 2161.639298][T25329] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2161.929048][T25329] usb 3-1: Using ep0 maxpacket: 32 [ 2162.059283][T25329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.070794][T25329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.084160][T25864] chnl_net:caif_netlink_parms(): no params data found [ 2162.098897][T25329] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 2162.107966][T25329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.130910][T25329] usb 3-1: config 0 descriptor?? [ 2162.225304][T25864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2162.247820][T25864] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.271353][T25864] device bridge_slave_0 entered promiscuous mode [ 2162.297204][T25864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2162.324729][T25864] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.372587][T25864] device bridge_slave_1 entered promiscuous mode [ 2162.467618][T25864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2162.495083][T25869] loop1: detected capacity change from 0 to 32768 [ 2162.504406][T25864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2162.576476][T25864] team0: Port device team_slave_0 added [ 2162.606842][T25864] team0: Port device team_slave_1 added [ 2162.635293][T25329] hid_mf 0003:0079:1801.0023: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.2-1/input0 [ 2162.676560][T25882] FAULT_INJECTION: forcing a failure. [ 2162.676560][T25882] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2162.712646][T25329] hid_mf 0003:0079:1801.0023: Invalid report, this should never happen! [ 2162.732897][T25329] hid_mf 0003:0079:1801.0023: Force feedback init failed. [ 2162.826123][T25882] CPU: 0 PID: 25882 Comm: syz.3.4391 Not tainted 5.15.165-syzkaller #0 [ 2162.834419][T25882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2162.844492][T25882] Call Trace: [ 2162.847790][T25882] [ 2162.850731][T25882] dump_stack_lvl+0x1e3/0x2d0 [ 2162.855439][T25882] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2162.861084][T25882] ? panic+0x860/0x860 [ 2162.865173][T25882] ? __lock_acquire+0x1295/0x1ff0 [ 2162.870225][T25882] should_fail+0x38a/0x4c0 [ 2162.874674][T25882] prepare_alloc_pages+0x1db/0x5b0 [ 2162.879814][T25882] __alloc_pages+0x14f/0x700 [ 2162.884418][T25882] ? __rmqueue_pcplist+0x2030/0x2030 [ 2162.889714][T25882] ? do_raw_spin_lock+0x14a/0x370 [ 2162.894781][T25882] ? do_raw_spin_unlock+0x137/0x8b0 [ 2162.900071][T25882] ? alloc_pages+0x458/0x570 [ 2162.904682][T25882] fuse_readdir+0x18f1/0x3540 [ 2162.909377][T25882] ? reacquire_held_locks+0x660/0x660 [ 2162.914785][T25882] ? register_lock_class+0x100/0x9a0 [ 2162.920117][T25882] ? is_dynamic_key+0x1f0/0x1f0 [ 2162.924979][T25882] ? fuse_set_acl+0x370/0x370 [ 2162.929664][T25882] ? mark_lock+0x98/0x340 [ 2162.934012][T25882] ? __lock_acquire+0x1295/0x1ff0 [ 2162.939065][T25882] ? fuse_set_acl+0x370/0x370 [ 2162.943775][T25882] ? mutex_lock_io_nested+0x60/0x60 [ 2162.948978][T25882] ? end_current_label_crit_section+0x147/0x170 [ 2162.955233][T25882] ? fuse_set_acl+0x370/0x370 [ 2162.959922][T25882] ? iterate_dir+0x10a/0x570 [ 2162.964612][T25882] ? iterate_dir+0x10a/0x570 [ 2162.969207][T25882] ? fsnotify_perm+0x442/0x590 [ 2162.973991][T25882] iterate_dir+0x224/0x570 [ 2162.978497][T25882] ? fuse_set_acl+0x370/0x370 [ 2162.983190][T25882] __se_sys_getdents64+0x209/0x4f0 [ 2162.988297][T25882] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2162.994292][T25882] ? __x64_sys_getdents64+0x80/0x80 [ 2162.999496][T25882] ? filldir+0x720/0x720 [ 2163.003850][T25882] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2163.009847][T25882] ? lockdep_hardirqs_on+0x94/0x130 [ 2163.015076][T25882] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2163.021074][T25882] do_syscall_64+0x3b/0xb0 [ 2163.025517][T25882] ? clear_bhb_loop+0x15/0x70 [ 2163.030223][T25882] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2163.036144][T25882] RIP: 0033:0x7f832e98cef9 [ 2163.040572][T25882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.060199][T25882] RSP: 002b:00007f832ce09038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 2163.068643][T25882] RAX: ffffffffffffffda RBX: 00007f832eb28f80 RCX: 00007f832e98cef9 [ 2163.076648][T25882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2163.084632][T25882] RBP: 00007f832ce09090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.092637][T25882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.100613][T25882] R13: 0000000000000000 R14: 00007f832eb28f80 R15: 00007ffe3e1eb528 [ 2163.108621][T25882] [ 2163.114010][T25329] usb 3-1: USB disconnect, device number 41 [ 2163.143901][T25869] XFS (loop1): Mounting V5 Filesystem [ 2163.205158][T25864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2163.215139][T25864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.241940][T25864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2163.261289][T25864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2163.284270][T25869] XFS (loop1): Ending clean mount [ 2163.289927][T25864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.317102][T25864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2163.392562][T25864] device hsr_slave_0 entered promiscuous mode [ 2163.400079][T25864] device hsr_slave_1 entered promiscuous mode [ 2163.411891][T25864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2163.429267][T25864] Cannot create hsr debugfs directory [ 2163.622743][T18741] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2163.632906][ T4112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.763481][ T4112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.818099][T25327] Bluetooth: hci2: command 0x0409 tx timeout [ 2163.855295][ T4112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.867408][T25916] loop0: detected capacity change from 0 to 512 [ 2163.888086][T18741] usb 2-1: Using ep0 maxpacket: 8 [ 2163.943365][ T4112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.977320][T25916] EXT4-fs (loop0): 1 truncate cleaned up [ 2163.993659][T25916] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 2164.018357][T18741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.038821][T18741] usb 2-1: config 0 interface 0 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2164.078891][T25916] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.4401: Directory hole found for htree leaf block 0 [ 2164.092442][T18741] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2164.097220][T25916] EXT4-fs (loop0): Remounting filesystem read-only [ 2164.102160][T18741] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 2164.115173][T18741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.133305][T18741] usb 2-1: config 0 descriptor?? [ 2164.146832][T25916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2164.199052][T18741] cdc_acm 2-1:0.0: Zero length descriptor references [ 2164.205805][T18741] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 2164.399116][T18741] usb 2-1: USB disconnect, device number 41 [ 2164.727359][T25929] FAULT_INJECTION: forcing a failure. [ 2164.727359][T25929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.773557][T25929] CPU: 1 PID: 25929 Comm: syz.2.4402 Not tainted 5.15.165-syzkaller #0 [ 2164.781852][T25929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2164.791927][T25929] Call Trace: [ 2164.795229][T25929] [ 2164.798211][T25929] dump_stack_lvl+0x1e3/0x2d0 [ 2164.802918][T25929] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2164.808575][T25929] ? panic+0x860/0x860 [ 2164.812676][T25929] ? validate_chain+0x112/0x5930 [ 2164.817648][T25929] ? validate_chain+0x112/0x5930 [ 2164.822617][T25929] should_fail+0x38a/0x4c0 [ 2164.827186][T25929] _copy_from_user+0x2d/0x170 [ 2164.831897][T25929] __copy_msghdr_from_user+0xaf/0x7c0 [ 2164.837303][T25929] ? __ia32_sys_shutdown+0x60/0x60 [ 2164.842454][T25929] ___sys_sendmsg+0x166/0x2e0 [ 2164.847164][T25929] ? __sys_sendmsg+0x260/0x260 [ 2164.851978][T25929] ? __fdget+0x191/0x220 [ 2164.856242][T25929] __se_sys_sendmsg+0x19a/0x260 [ 2164.861104][T25929] ? __x64_sys_sendmsg+0x80/0x80 [ 2164.866058][T25929] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2164.872044][T25929] ? lockdep_hardirqs_on+0x94/0x130 [ 2164.877248][T25929] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2164.883231][T25929] do_syscall_64+0x3b/0xb0 [ 2164.887654][T25929] ? clear_bhb_loop+0x15/0x70 [ 2164.892337][T25929] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2164.898768][T25929] RIP: 0033:0x7f46b7e05ef9 [ 2164.903271][T25929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2164.922892][T25929] RSP: 002b:00007f46b6282038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2164.931391][T25929] RAX: ffffffffffffffda RBX: 00007f46b7fa1f80 RCX: 00007f46b7e05ef9 [ 2164.939357][T25929] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000006 [ 2164.947322][T25929] RBP: 00007f46b6282090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.955374][T25929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.963370][T25929] R13: 0000000000000000 R14: 00007f46b7fa1f80 R15: 00007ffe019d92b8 [ 2164.971371][T25929] [ 2165.038100][T25471] XFS (loop1): Unmounting Filesystem [ 2165.465993][T25954] ptrace attach of "./syz-executor exec"[25955] was attempted by "./syz-executor exec"[25954] [ 2166.117086][T25329] Bluetooth: hci2: command 0x041b tx timeout [ 2166.364494][T25864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2166.401441][T25864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2166.465898][T25864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2166.491680][T25864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2166.759016][ T4112] device hsr_slave_0 left promiscuous mode [ 2166.776100][ T4112] device hsr_slave_1 left promiscuous mode [ 2166.801961][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2166.822048][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2166.949411][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2166.982906][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2167.044573][ T4112] device bridge_slave_1 left promiscuous mode [ 2167.058921][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2167.113895][T25957] loop2: detected capacity change from 0 to 32768 [ 2167.542066][T25991] ptrace attach of "./syz-executor exec"[25992] was attempted by "./syz-executor exec"[25991] [ 2167.844079][ T4112] device bridge_slave_0 left promiscuous mode [ 2167.857585][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2167.898643][ C0] Illegal XDP return value 16128, expect packet loss! [ 2167.949078][T25997] loop3: detected capacity change from 0 to 512 [ 2167.999639][T25997] EXT4-fs (loop3): 1 truncate cleaned up [ 2168.005337][T25997] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 2168.069749][T25957] XFS (loop2): Mounting V5 Filesystem [ 2168.095322][T25997] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.4414: Directory hole found for htree leaf block 0 [ 2168.117519][T25997] EXT4-fs (loop3): Remounting filesystem read-only [ 2168.126164][ T4112] device veth1_macvtap left promiscuous mode [ 2168.133495][ T4112] device veth0_macvtap left promiscuous mode [ 2168.146983][ T4112] device veth1_vlan left promiscuous mode [ 2168.147461][T18741] Bluetooth: hci2: command 0x040f tx timeout [ 2168.153152][ T4112] device veth0_vlan left promiscuous mode [ 2168.161413][T25957] XFS (loop2): log mount failed [ 2168.499190][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 2168.512778][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 2168.526515][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2168.543631][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2168.623418][ T4112] bond0 (unregistering): Released all slaves [ 2168.736842][T25864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2168.823872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2168.835359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2168.859589][T25864] 8021q: adding VLAN 0 to HW filter on device team0 [ 2168.981356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2168.991410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2169.014941][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2169.022105][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2169.079922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2169.111269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2169.140218][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2169.147374][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2169.268782][T26022] FAULT_INJECTION: forcing a failure. [ 2169.268782][T26022] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.283076][T26022] CPU: 1 PID: 26022 Comm: syz.0.4415 Not tainted 5.15.165-syzkaller #0 [ 2169.291351][T26022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2169.301425][T26022] Call Trace: [ 2169.304718][T26022] [ 2169.307653][T26022] dump_stack_lvl+0x1e3/0x2d0 [ 2169.312346][T26022] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2169.317992][T26022] ? panic+0x860/0x860 [ 2169.322076][T26022] ? __lock_acquire+0x1295/0x1ff0 [ 2169.327123][T26022] should_fail+0x38a/0x4c0 [ 2169.331556][T26022] should_failslab+0x5/0x20 [ 2169.336069][T26022] slab_pre_alloc_hook+0x53/0xc0 [ 2169.341027][T26022] kmem_cache_alloc_trace+0x49/0x290 [ 2169.346321][T26022] ? report_access+0x146/0x5b0 [ 2169.351106][T26022] report_access+0x146/0x5b0 [ 2169.355713][T26022] ? task_is_descendant+0x4d0/0x4d0 [ 2169.360936][T26022] yama_ptrace_access_check+0x7f4/0xa50 [ 2169.366499][T26022] security_ptrace_access_check+0x65/0x90 [ 2169.372232][T26022] ptrace_attach+0x1f9/0x6d0 [ 2169.376839][T26022] __se_sys_ptrace+0xc8/0x3f0 [ 2169.381529][T26022] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2169.387524][T26022] do_syscall_64+0x3b/0xb0 [ 2169.391951][T26022] ? clear_bhb_loop+0x15/0x70 [ 2169.396642][T26022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2169.402550][T26022] RIP: 0033:0x7f76b19f2ef9 [ 2169.406972][T26022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2169.426589][T26022] RSP: 002b:00007f76afe2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 2169.435020][T26022] RAX: ffffffffffffffda RBX: 00007f76b1b8f130 RCX: 00007f76b19f2ef9 [ 2169.443002][T26022] RDX: 0000000000000000 RSI: 0000000000000282 RDI: 0000000000000010 [ 2169.450989][T26022] RBP: 00007f76afe2d090 R08: 0000000000000000 R09: 0000000000000000 [ 2169.459052][T26022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2169.467028][T26022] R13: 0000000000000000 R14: 00007f76b1b8f130 R15: 00007ffc9efd0508 [ 2169.475027][T26022] [ 2169.754303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2169.798011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2169.807310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2169.817813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2169.857500][T25864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2169.881509][T25864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2169.947038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2169.984354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2170.832077][T18741] Bluetooth: hci2: command 0x0419 tx timeout [ 2170.850815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2170.906678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2170.971411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2170.977701][T26033] loop3: detected capacity change from 0 to 32768 [ 2171.022763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2171.045195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2171.054995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2171.067452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2171.082249][T26033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4419 (26033) [ 2171.197814][T26033] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 2171.206962][T26033] BTRFS info (device loop3): using free space tree [ 2171.213518][T26033] BTRFS info (device loop3): has skinny extents [ 2171.263817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2171.273057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2171.287974][T25864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2176.010028][T26073] loop0: detected capacity change from 0 to 8 [ 2176.012178][T26033] BTRFS error (device loop3): open_ctree failed [ 2176.026099][T26077] loop1: detected capacity change from 0 to 8 [ 2176.143253][T26077] FAULT_INJECTION: forcing a failure. [ 2176.143253][T26077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2176.181897][T26077] CPU: 1 PID: 26077 Comm: syz.1.4429 Not tainted 5.15.165-syzkaller #0 [ 2176.190188][T26077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2176.200259][T26077] Call Trace: [ 2176.203563][T26077] [ 2176.206506][T26077] dump_stack_lvl+0x1e3/0x2d0 [ 2176.211211][T26077] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2176.216873][T26077] ? panic+0x860/0x860 [ 2176.220989][T26077] ? snprintf+0xd6/0x120 [ 2176.225260][T26077] should_fail+0x38a/0x4c0 [ 2176.229706][T26077] _copy_to_user+0x2d/0x130 [ 2176.234234][T26077] simple_read_from_buffer+0xc6/0x150 [ 2176.239645][T26077] proc_fail_nth_read+0x1a3/0x210 [ 2176.244701][T26077] ? proc_fault_inject_write+0x390/0x390 [ 2176.250360][T26077] ? fsnotify_perm+0x442/0x590 [ 2176.255152][T26077] ? proc_fault_inject_write+0x390/0x390 [ 2176.260819][T26077] vfs_read+0x2fc/0xe10 [ 2176.265014][T26077] ? kernel_read+0x1f0/0x1f0 [ 2176.269639][T26077] ? __fget_files+0x413/0x480 [ 2176.274357][T26077] ? mutex_lock_nested+0x17/0x20 [ 2176.279314][T26077] ? __fdget_pos+0x2cb/0x380 [ 2176.283926][T26077] ? ksys_read+0x77/0x2c0 [ 2176.288283][T26077] ksys_read+0x1a2/0x2c0 [ 2176.292550][T26077] ? print_irqtrace_events+0x210/0x210 [ 2176.298035][T26077] ? vfs_write+0xe50/0xe50 [ 2176.302486][T26077] ? rcu_is_watching+0x11/0xa0 [ 2176.307283][T26077] ? syscall_enter_from_user_mode+0x14b/0x240 [ 2176.313371][T26077] do_syscall_64+0x3b/0xb0 [ 2176.317805][T26077] ? clear_bhb_loop+0x15/0x70 [ 2176.322506][T26077] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2176.328422][T26077] RIP: 0033:0x7f27d32f593c [ 2176.332854][T26077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2176.352480][T26077] RSP: 002b:00007f27d1773030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2176.360922][T26077] RAX: ffffffffffffffda RBX: 00007f27d3492f80 RCX: 00007f27d32f593c [ 2176.368918][T26077] RDX: 000000000000000f RSI: 00007f27d17730a0 RDI: 0000000000000005 [ 2176.376923][T26077] RBP: 00007f27d1773090 R08: 0000000000000000 R09: 0000000000000000 [ 2176.384921][T26077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2176.393066][T26077] R13: 0000000000000000 R14: 00007f27d3492f80 R15: 00007ffdd5e922c8 [ 2176.401087][T26077] [ 2176.651858][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2176.675535][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2176.743052][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2176.752785][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2176.788174][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2176.813272][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2176.840714][T25864] device veth0_vlan entered promiscuous mode [ 2176.869510][T25864] device veth1_vlan entered promiscuous mode [ 2176.997379][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2177.016327][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2177.050245][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2177.070941][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2177.099256][T25864] device veth0_macvtap entered promiscuous mode [ 2177.121199][T25864] device veth1_macvtap entered promiscuous mode [ 2177.219772][T26117] FAULT_INJECTION: forcing a failure. [ 2177.219772][T26117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.233112][T26117] CPU: 1 PID: 26117 Comm: syz.3.4440 Not tainted 5.15.165-syzkaller #0 [ 2177.241371][T26117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2177.251420][T26117] Call Trace: [ 2177.254693][T26117] [ 2177.257706][T26117] dump_stack_lvl+0x1e3/0x2d0 [ 2177.262385][T26117] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2177.268022][T26117] ? panic+0x860/0x860 [ 2177.272095][T26117] ? validate_chain+0x112/0x5930 [ 2177.277036][T26117] should_fail+0x38a/0x4c0 [ 2177.281454][T26117] _copy_from_user+0x2d/0x170 [ 2177.286564][T26117] __copy_msghdr_from_user+0xaf/0x7c0 [ 2177.291940][T26117] ? __ia32_sys_shutdown+0x60/0x60 [ 2177.297062][T26117] ___sys_sendmsg+0x166/0x2e0 [ 2177.301809][T26117] ? __sys_sendmsg+0x260/0x260 [ 2177.306602][T26117] ? __fdget+0x191/0x220 [ 2177.310844][T26117] __se_sys_sendmsg+0x19a/0x260 [ 2177.315692][T26117] ? __x64_sys_sendmsg+0x80/0x80 [ 2177.320634][T26117] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2177.326608][T26117] ? lockdep_hardirqs_on+0x94/0x130 [ 2177.331800][T26117] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2177.337778][T26117] do_syscall_64+0x3b/0xb0 [ 2177.342188][T26117] ? clear_bhb_loop+0x15/0x70 [ 2177.346869][T26117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2177.352758][T26117] RIP: 0033:0x7f832e98cef9 [ 2177.357171][T26117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2177.376778][T26117] RSP: 002b:00007f832cdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2177.385195][T26117] RAX: ffffffffffffffda RBX: 00007f832eb29130 RCX: 00007f832e98cef9 [ 2177.393165][T26117] RDX: 0000000000000000 RSI: 0000000020002d80 RDI: 0000000000000006 [ 2177.401134][T26117] RBP: 00007f832cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 2177.409098][T26117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2177.417146][T26117] R13: 0000000000000000 R14: 00007f832eb29130 R15: 00007ffe3e1eb528 [ 2177.425125][T26117] [ 2177.510326][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.551342][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.573595][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.599860][T26123] loop0: detected capacity change from 0 to 512 [ 2177.643127][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.679482][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.717439][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.750548][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.786579][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.824670][T25864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2177.861388][T26123] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2177.881078][T26123] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 2177.906216][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2177.925656][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2177.945852][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2177.969690][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2177.996890][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.017809][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.029049][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.040704][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.051612][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.064044][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.074443][T25864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.085451][T25864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.097777][T25864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2178.304874][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2178.313833][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2178.361116][T25864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.396934][T26136] FAULT_INJECTION: forcing a failure. [ 2178.396934][T26136] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.411779][T26136] CPU: 0 PID: 26136 Comm: syz.0.4442 Not tainted 5.15.165-syzkaller #0 [ 2178.420330][T26136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2178.430410][T26136] Call Trace: [ 2178.433703][T26136] [ 2178.436650][T26136] dump_stack_lvl+0x1e3/0x2d0 [ 2178.441355][T26136] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2178.447005][T26136] ? panic+0x860/0x860 [ 2178.451096][T26136] ? __might_sleep+0xc0/0xc0 [ 2178.455716][T26136] ? __mutex_lock_common+0x444/0x25a0 [ 2178.461203][T26136] should_fail+0x38a/0x4c0 [ 2178.465648][T26136] should_failslab+0x5/0x20 [ 2178.470170][T26136] slab_pre_alloc_hook+0x53/0xc0 [ 2178.475146][T26136] __kmalloc_node+0x71/0x390 [ 2178.479758][T26136] ? kvmalloc_node+0x80/0x140 [ 2178.484456][T26136] ? reacquire_held_locks+0x660/0x660 [ 2178.489856][T26136] kvmalloc_node+0x80/0x140 [ 2178.494391][T26136] seq_read_iter+0x1fe/0xd10 [ 2178.499024][T26136] seq_read+0x452/0x5c0 [ 2178.503204][T26136] ? aa_path_link+0xea0/0xea0 [ 2178.507910][T26136] ? seq_open+0x140/0x140 [ 2178.512263][T26136] ? read_lock_is_recursive+0x10/0x10 [ 2178.517663][T26136] ? __might_sleep+0xc0/0xc0 [ 2178.522283][T26136] ? end_current_label_crit_section+0x147/0x170 [ 2178.528552][T26136] ? seq_open+0x140/0x140 [ 2178.532903][T26136] proc_reg_read+0x1f9/0x2e0 [ 2178.537521][T26136] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 2178.543439][T26136] vfs_read+0x2fc/0xe10 [ 2178.546737][T25864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.547620][T26136] ? kernel_read+0x1f0/0x1f0 [ 2178.560897][T26136] ? __fget_files+0x413/0x480 [ 2178.565605][T26136] ? mutex_lock_nested+0x17/0x20 [ 2178.570564][T26136] ? __fdget_pos+0x2cb/0x380 [ 2178.575186][T26136] ? ksys_read+0x77/0x2c0 [ 2178.579545][T26136] ksys_read+0x1a2/0x2c0 [ 2178.583812][T26136] ? print_irqtrace_events+0x210/0x210 [ 2178.589294][T26136] ? vfs_write+0xe50/0xe50 [ 2178.593739][T26136] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2178.599743][T26136] ? lockdep_hardirqs_on+0x94/0x130 [ 2178.604966][T26136] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2178.610975][T26136] do_syscall_64+0x3b/0xb0 [ 2178.612735][T25864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.615409][T26136] ? clear_bhb_loop+0x15/0x70 [ 2178.615443][T26136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2178.634679][T26136] RIP: 0033:0x7f76b19f2ef9 [ 2178.639117][T26136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2178.658827][T26136] RSP: 002b:00007f76afe2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2178.667267][T26136] RAX: ffffffffffffffda RBX: 00007f76b1b8f130 RCX: 00007f76b19f2ef9 [ 2178.675359][T26136] RDX: 0000000000000fe4 RSI: 00000000200001c0 RDI: 0000000000000009 [ 2178.683351][T26136] RBP: 00007f76afe2d090 R08: 0000000000000000 R09: 0000000000000000 [ 2178.691345][T26136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.693078][T25864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.699346][T26136] R13: 0000000000000000 R14: 00007f76b1b8f130 R15: 00007ffc9efd0508 [ 2178.699383][T26136] [ 2178.920907][ T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2178.944407][ T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2178.986490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2179.048184][T19463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2179.076451][T19463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2179.129813][T19237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2179.188317][T26151] FAULT_INJECTION: forcing a failure. [ 2179.188317][T26151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2179.226926][T26151] CPU: 1 PID: 26151 Comm: syz.1.4452 Not tainted 5.15.165-syzkaller #0 [ 2179.235215][T26151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2179.245286][T26151] Call Trace: [ 2179.248579][T26151] [ 2179.251528][T26151] dump_stack_lvl+0x1e3/0x2d0 [ 2179.256240][T26151] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2179.262049][T26151] ? panic+0x860/0x860 [ 2179.266160][T26151] should_fail+0x38a/0x4c0 [ 2179.270599][T26151] _copy_from_user+0x2d/0x170 [ 2179.275298][T26151] __sys_bpf+0x1d5/0x670 [ 2179.279565][T26151] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 2179.284967][T26151] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2179.291050][T26151] ? lockdep_hardirqs_on+0x94/0x130 [ 2179.296354][T26151] __x64_sys_bpf+0x78/0x90 [ 2179.300785][T26151] do_syscall_64+0x3b/0xb0 [ 2179.305218][T26151] ? clear_bhb_loop+0x15/0x70 [ 2179.309909][T26151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2179.315819][T26151] RIP: 0033:0x7f27d32f6ef9 [ 2179.320272][T26151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.339892][T26151] RSP: 002b:00007f27d1773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2179.348330][T26151] RAX: ffffffffffffffda RBX: 00007f27d3492f80 RCX: 00007f27d32f6ef9 [ 2179.356313][T26151] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a [ 2179.364296][T26151] RBP: 00007f27d1773090 R08: 0000000000000000 R09: 0000000000000000 [ 2179.372283][T26151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2179.380271][T26151] R13: 0000000000000000 R14: 00007f27d3492f80 R15: 00007ffdd5e922c8 [ 2179.388264][T26151] [ 2179.393329][T26079] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2179.578403][T26153] loop4: detected capacity change from 0 to 8192 [ 2179.636609][T26155] loop1: detected capacity change from 0 to 64 [ 2179.650311][T26079] usb 3-1: Using ep0 maxpacket: 16 [ 2179.663462][T26153] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 2179.680949][T26153] REISERFS (device loop4): using ordered data mode [ 2179.687738][T26153] reiserfs: using flush barriers [ 2179.730849][T26153] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2179.770747][T26153] REISERFS (device loop4): checking transaction log (loop4) [ 2179.819742][T26153] REISERFS (device loop4): Using r5 hash to sort names [ 2179.950384][T26079] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 2179.980037][T26079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.998453][T26079] usb 3-1: Product: syz [ 2180.014151][T26079] usb 3-1: Manufacturer: syz [ 2180.020771][T26079] usb 3-1: SerialNumber: syz [ 2180.068170][T26079] usb 3-1: config 0 descriptor?? [ 2180.128158][T26079] pwc: Philips SPC 880NC USB webcam detected. [ 2180.358007][T26148] udc-core: couldn't find an available UDC or it's busy [ 2180.379847][T26148] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2180.459871][T26079] pwc: Failed to set LED on/off time (-71) [ 2180.483530][T26079] pwc: send_video_command error -71 [ 2180.488873][T26079] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2180.524291][T26079] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2180.562717][T26079] usb 3-1: USB disconnect, device number 42 [ 2180.693371][T26182] FAULT_INJECTION: forcing a failure. [ 2180.693371][T26182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2180.735873][T26182] CPU: 0 PID: 26182 Comm: syz.3.4463 Not tainted 5.15.165-syzkaller #0 [ 2180.744171][T26182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2180.754241][T26182] Call Trace: [ 2180.757528][T26182] [ 2180.760462][T26182] dump_stack_lvl+0x1e3/0x2d0 [ 2180.765164][T26182] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2180.770824][T26182] ? panic+0x860/0x860 [ 2180.774922][T26182] ? __lock_acquire+0x1295/0x1ff0 [ 2180.779972][T26182] should_fail+0x38a/0x4c0 [ 2180.784414][T26182] prepare_alloc_pages+0x1db/0x5b0 [ 2180.789631][T26182] __alloc_pages+0x14f/0x700 [ 2180.794236][T26182] ? __rmqueue_pcplist+0x2030/0x2030 [ 2180.799533][T26182] ? __lock_acquire+0x1ff0/0x1ff0 [ 2180.804570][T26182] ? alloc_pages+0x458/0x570 [ 2180.809186][T26182] skb_page_frag_refill+0x220/0x4b0 [ 2180.814398][T26182] tun_get_user+0x1bd7/0x40f0 [ 2180.819108][T26182] ? tun_ring_recv+0xcc0/0xcc0 [ 2180.823904][T26182] ? rcu_lock_release+0x5/0x20 [ 2180.828701][T26182] tun_chr_write_iter+0x10c/0x1e0 [ 2180.833758][T26182] vfs_write+0xacd/0xe50 [ 2180.838044][T26182] ? file_end_write+0x250/0x250 [ 2180.842933][T26182] ? __fget_files+0x413/0x480 [ 2180.847737][T26182] ? __fdget_pos+0x1e9/0x380 [ 2180.852350][T26182] ? ksys_write+0x77/0x2c0 [ 2180.856895][T26182] ksys_write+0x1a2/0x2c0 [ 2180.861246][T26182] ? print_irqtrace_events+0x210/0x210 [ 2180.866844][T26182] ? __ia32_sys_read+0x80/0x80 [ 2180.871639][T26182] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2180.877652][T26182] ? lockdep_hardirqs_on+0x94/0x130 [ 2180.882885][T26182] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2180.889038][T26182] do_syscall_64+0x3b/0xb0 [ 2180.893488][T26182] ? clear_bhb_loop+0x15/0x70 [ 2180.898198][T26182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2180.904131][T26182] RIP: 0033:0x7f832e98b9df [ 2180.908687][T26182] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 2180.928355][T26182] RSP: 002b:00007f832ce09000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2180.936801][T26182] RAX: ffffffffffffffda RBX: 00007f832eb28f80 RCX: 00007f832e98b9df [ 2180.944792][T26182] RDX: 000000000000003a RSI: 0000000020000300 RDI: 00000000000000c8 [ 2180.952898][T26182] RBP: 00007f832ce09090 R08: 0000000000000000 R09: 0000000000000000 [ 2180.960998][T26182] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 2180.968984][T26182] R13: 0000000000000000 R14: 00007f832eb28f80 R15: 00007ffe3e1eb528 [ 2180.977002][T26182] [ 2181.036561][T26179] loop4: detected capacity change from 0 to 2048 [ 2181.114817][T26179] loop4: p2 < > p4 [ 2181.145691][T26179] loop4: partition table partially beyond EOD, truncated [ 2181.160869][T26188] loop0: detected capacity change from 0 to 2048 [ 2181.190120][T26179] loop4: p4 start 1929379840 is beyond EOD, truncated [ 2181.320311][T26192] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2182.222285][ T26] audit: type=1800 audit(1724931680.349:102): pid=26199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4464" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 2182.243207][ T26] audit: type=1800 audit(1724931680.389:103): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4464" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 2182.641323][T26236] tmpfs: Unknown parameter 'usrquota' [ 2182.956165][T26079] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2185.744631][T26252] loop3: detected capacity change from 0 to 512 [ 2186.286101][T26261] loop2: detected capacity change from 0 to 512 [ 2186.335234][T26265] loop0: detected capacity change from 0 to 164 [ 2186.418945][T26265] "syz.0.4492" (26265) uses obsolete ecb(arc4) skcipher [ 2186.470871][T26252] EXT4-fs (loop3): 1 truncate cleaned up [ 2186.478030][T26261] EXT4-fs (loop2): 1 truncate cleaned up [ 2186.506506][T26252] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,journal_dev=0x000000000000000a,lazytime,delalloc,grpjquota=,,errors=continue. Quota mode: writeback. [ 2186.543537][T26261] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,journal_dev=0x000000000000000a,lazytime,delalloc,grpjquota=,,errors=continue. Quota mode: writeback. [ 2186.591883][T26274] syz.4.4494 sent an empty control message without MSG_MORE. [ 2186.623004][T26261] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #18: comm syz.2.4489: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 2186.625220][T26252] EXT4-fs error (device loop3): ext4_ind_map_blocks:604: inode #18: comm syz.3.4486: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 2186.681023][T26277] FAULT_INJECTION: forcing a failure. [ 2186.681023][T26277] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.710321][T26276] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4486: invalid indirect mapped block 234881024 (level 0) [ 2186.737134][T26277] CPU: 1 PID: 26277 Comm: syz.2.4489 Not tainted 5.15.165-syzkaller #0 [ 2186.745590][T26277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2186.755644][T26277] Call Trace: [ 2186.758922][T26277] [ 2186.761843][T26277] dump_stack_lvl+0x1e3/0x2d0 [ 2186.766527][T26277] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2186.772185][T26277] ? panic+0x860/0x860 [ 2186.776250][T26277] ? __might_sleep+0xc0/0xc0 [ 2186.780955][T26277] should_fail+0x38a/0x4c0 [ 2186.785469][T26277] should_failslab+0x5/0x20 [ 2186.789990][T26277] slab_pre_alloc_hook+0x53/0xc0 [ 2186.794922][T26277] ? getname_flags+0xb8/0x4e0 [ 2186.799599][T26277] kmem_cache_alloc+0x3f/0x280 [ 2186.804390][T26277] getname_flags+0xb8/0x4e0 [ 2186.808911][T26277] ? build_open_flags+0x41a/0x590 [ 2186.813976][T26277] do_sys_openat2+0xd2/0x4f0 [ 2186.818678][T26277] ? read_lock_is_recursive+0x10/0x10 [ 2186.824507][T26277] ? do_sys_open+0x220/0x220 [ 2186.829118][T26277] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2186.835135][T26277] __x64_sys_creat+0x11f/0x160 [ 2186.839926][T26277] ? __x64_compat_sys_openat+0x290/0x290 [ 2186.845574][T26277] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2186.851574][T26277] ? lockdep_hardirqs_on+0x94/0x130 [ 2186.856970][T26277] ? syscall_enter_from_user_mode+0x2e/0x240 [ 2186.863022][T26277] do_syscall_64+0x3b/0xb0 [ 2186.867583][T26277] ? clear_bhb_loop+0x15/0x70 [ 2186.872282][T26277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2186.878296][T26277] RIP: 0033:0x7f46b7e05ef9 [ 2186.882749][T26277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2186.896654][ T1078] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2186.902450][T26277] RSP: 002b:00007f46b6261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 2186.918434][T26277] RAX: ffffffffffffffda RBX: 00007f46b7fa2058 RCX: 00007f46b7e05ef9 [ 2186.926423][T26277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 2186.934409][T26277] RBP: 00007f46b6261090 R08: 0000000000000000 R09: 0000000000000000 [ 2186.942416][T26277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2186.950405][T26277] R13: 0000000000000001 R14: 00007f46b7fa2058 R15: 00007ffe019d92b8 [ 2186.958413][T26277] [ 2187.006849][T25633] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /27/file2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 2187.049125][T25633] EXT4-fs error (device loop2): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 2187.064998][T22156] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /224/file2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 2187.114488][T22156] EXT4-fs error (device loop3): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 2187.147093][T22156] EXT4-fs error (device loop3): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 2187.200904][T25633] EXT4-fs error (device loop2): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 2187.396583][ T1078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.426445][ T1078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.450898][ T1078] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2187.466080][ T1078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.485259][ T1078] usb 2-1: config 0 descriptor?? [ 2187.554195][T26287] loop4: detected capacity change from 0 to 8192 [ 2187.600396][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.653805][T26287] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 2187.688307][T26287] REISERFS (device loop4): using ordered data mode [ 2187.694864][T26287] reiserfs: using flush barriers [ 2187.703334][T26287] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2187.722388][T26287] REISERFS (device loop4): checking transaction log (loop4) [ 2187.744215][T26287] REISERFS (device loop4): Using r5 hash to sort names [ 2187.789086][T26283] reiserfs: enabling write barrier flush mode [ 2187.829118][T26283] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 2187.844427][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.856227][ T1078] usbhid 2-1:0.0: can't add hid device: -71 [ 2187.865419][ T1078] usbhid: probe of 2-1:0.0 failed with error -71 [ 2187.880997][ T26] audit: type=1800 audit(1724931686.052:104): pid=26283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4499" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 2187.917017][ T1078] usb 2-1: USB disconnect, device number 42 [ 2187.965131][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.017675][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.419619][T26294] chnl_net:caif_netlink_parms(): no params data found [ 2188.486196][T25864] REISERFS warning: reiserfs-5090 is_tree_node: node level 8483 does not match to the expected one -1 [ 2188.506414][T25864] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 0. Fsck? [ 2188.517000][T25864] REISERFS (device loop4): Remounting filesystem read-only [ 2188.595249][T25864] REISERFS panic (device loop4): journal-003 check_journal_end: j_start (3) is too high [ 2188.626126][T25864] ------------[ cut here ]------------ [ 2188.631992][T25864] kernel BUG at fs/reiserfs/prints.c:390! [ 2188.637863][T25864] invalid opcode: 0000 [#1] PREEMPT SMP KASAN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2188.643943][T25864] CPU: 0 PID: 25864 Comm: syz-executor Not tainted 5.15.165-syzkaller #0 [ 2188.652372][T25864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2188.662438][T25864] RIP: 0010:__reiserfs_panic+0x13a/0x140 [ 2188.668098][T25864] Code: c7 c1 80 61 9b 8a 48 0f 44 c8 48 0f 44 d8 48 c7 c7 40 62 9b 8a 4c 89 fe 48 89 da 4d 89 f0 49 c7 c1 20 e0 58 91 e8 b6 c7 23 08 <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 [ 2188.687719][T25864] RSP: 0018:ffffc90002f47760 EFLAGS: 00010246 [ 2188.693805][T25864] RAX: 0000000000000055 RBX: ffffffff8a9baf20 RCX: cc40e91d7f216100 [ 2188.701792][T25864] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2188.709780][T25864] RBP: ffffc90002f47860 R08: ffffffff816689dc R09: ffffed10173467a8 [ 2188.717771][T25864] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8a9baf40 [ 2188.725759][T25864] R13: ffffc90002f47780 R14: ffffffff8c1c6c49 R15: ffff888068cca6a8 [ 2188.733753][T25864] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2188.742742][T25864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2188.749347][T25864] CR2: 00007f27d32dc6e0 CR3: 0000000066bf4000 CR4: 00000000003506f0 [ 2188.757331][T25864] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2188.765507][T25864] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2188.773493][T25864] Call Trace: [ 2188.776811][T25864] [ 2188.779781][T25864] ? __die_body+0x5e/0xa0 [ 2188.784127][T25864] ? die+0x83/0xb0 [ 2188.787859][T25864] ? do_trap+0x11e/0x350 [ 2188.792121][T25864] ? __reiserfs_panic+0x13a/0x140 [ 2188.797166][T25864] ? __reiserfs_panic+0x13a/0x140 [ 2188.802201][T25864] ? do_error_trap+0x13d/0x1e0 [ 2188.806977][T25864] ? __reiserfs_panic+0x13a/0x140 [ 2188.812012][T25864] ? do_int3+0x30/0x30 [ 2188.816101][T25864] ? rcu_is_watching+0x11/0xa0 [ 2188.820884][T25864] ? handle_invalid_op+0x2c/0x40 [ 2188.825848][T25864] ? __reiserfs_panic+0x13a/0x140 [ 2188.830891][T25864] ? exc_invalid_op+0x2f/0x40 [ 2188.835590][T25864] ? asm_exc_invalid_op+0x16/0x20 [ 2188.840720][T25864] ? __wake_up_klogd+0xcc/0x100 [ 2188.845675][T25864] ? __reiserfs_panic+0x13a/0x140 [ 2188.850716][T25864] ? reiserfs_debug+0x10/0x10 [ 2188.855595][T25864] ? mutex_lock_nested+0x17/0x20 [ 2188.860549][T25864] do_journal_end+0x45b2/0x4650 [ 2188.865468][T25864] ? journal_mark_dirty+0x22b/0xe30 [ 2188.870686][T25864] do_journal_release+0x478/0x4d0 [ 2188.875728][T25864] ? journal_release+0x30/0x30 [ 2188.880512][T25864] journal_release+0x1b/0x30 [ 2188.885118][T25864] reiserfs_put_super+0x237/0x4b0 [ 2188.890167][T25864] ? hook_inode_free_security+0xa0/0xa0 [ 2188.895731][T25864] ? reiserfs_dirty_inode+0x240/0x240 [ 2188.901126][T25864] ? __static_call_return0+0x5/0x10 [ 2188.906345][T25864] ? fscrypt_destroy_keyring+0x282/0x2a0 [ 2188.911996][T25864] ? reiserfs_dirty_inode+0x240/0x240 [ 2188.917392][T25864] generic_shutdown_super+0x136/0x2c0 [ 2188.922785][T25864] kill_block_super+0x7a/0xe0 [ 2188.927483][T25864] deactivate_locked_super+0xa0/0x110 [ 2188.932878][T25864] cleanup_mnt+0x44e/0x500 [ 2188.937317][T25864] ? lockdep_hardirqs_on+0x94/0x130 [ 2188.942536][T25864] task_work_run+0x129/0x1a0 [ 2188.947149][T25864] do_exit+0x6a3/0x2480 [ 2188.951329][T25864] ? put_task_struct+0x80/0x80 [ 2188.956115][T25864] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2188.962237][T25864] ? vtime_user_exit+0x2d1/0x400 [ 2188.967203][T25864] do_group_exit+0x144/0x310 [ 2188.971818][T25864] __x64_sys_exit_group+0x3b/0x40 [ 2188.976894][T25864] do_syscall_64+0x3b/0xb0 [ 2188.981332][T25864] ? clear_bhb_loop+0x15/0x70 [ 2188.986036][T25864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2188.991957][T25864] RIP: 0033:0x7ff7a0eccef9 [ 2188.996386][T25864] Code: Unable to access opcode bytes at RIP 0x7ff7a0eccecf. [ 2189.003924][T25864] RSP: 002b:00007ffd3c2dc5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2189.012355][T25864] RAX: ffffffffffffffda RBX: 00007ff7a0f3a84e RCX: 00007ff7a0eccef9 [ 2189.020328][T25864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2189.028299][T25864] RBP: 0000000000000010 R08: 00007ffd3c2da366 R09: 00007ffd3c2dd880 [ 2189.036276][T25864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c2dd880 [ 2189.044273][T25864] R13: 00007ff7a0f3a7dc R14: 00005555569104a8 R15: 00007ffd3c2de940 [ 2189.052251][T25864] [ 2189.055261][T25864] Modules linked in: [ 2189.064625][T25864] ---[ end trace dabb4b5922db745e ]--- [ 2189.070189][T25864] RIP: 0010:__reiserfs_panic+0x13a/0x140 [ 2189.076015][T25864] Code: c7 c1 80 61 9b 8a 48 0f 44 c8 48 0f 44 d8 48 c7 c7 40 62 9b 8a 4c 89 fe 48 89 da 4d 89 f0 49 c7 c1 20 e0 58 91 e8 b6 c7 23 08 <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 [ 2189.143671][T25864] RSP: 0018:ffffc90002f47760 EFLAGS: 00010246 [ 2189.170355][T25864] RAX: 0000000000000055 RBX: ffffffff8a9baf20 RCX: cc40e91d7f216100 [ 2189.183752][T25864] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2189.218191][T25864] RBP: ffffc90002f47860 R08: ffffffff816689dc R09: ffffed10173467a8 [ 2189.239741][T25864] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8a9baf40 [ 2189.254075][T25864] R13: ffffc90002f47780 R14: ffffffff8c1c6c49 R15: ffff888068cca6a8 [ 2189.275771][T25864] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2189.284774][T25864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2189.294422][T25864] CR2: 00007f55eda0e19c CR3: 00000000630c9000 CR4: 00000000003506f0 [ 2189.311328][T25864] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2189.322640][T25864] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2189.335576][T25864] Kernel panic - not syncing: Fatal exception [ 2189.342032][T25864] Kernel Offset: disabled [ 2189.346356][T25864] Rebooting in 86400 seconds..