last executing test programs: 18m1.721595587s ago: executing program 32 (id=39): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000100)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 14m42.837922578s ago: executing program 4 (id=885): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x2a}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d220906e9a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e8062892d06cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x153f, &(0x7f0000001b80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x10000, &(0x7f0000000200)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000600)="$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") keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000b80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r3 = open(&(0x7f0000001040)='./file1\x00', 0x80242, 0x1df2a23c5997fb46) socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, r3, &(0x7f0000001b40)=0x4, 0x8112) 14m37.160154734s ago: executing program 33 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x318, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000300)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000340)=0x10) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='sour:e', &(0x7f00000003c0)='c:::\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000004c0)=[{r6, 0x80ad}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x64, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e, 0xfffffffc}, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000680)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB="0000009545", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x560c, 0x0) 14m34.43884865s ago: executing program 4 (id=895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r0, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) 14m27.285498847s ago: executing program 4 (id=902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r0, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000009c0)=0x3, 0xac5) syz_clone3(&(0x7f0000000a00)={0x23800000, &(0x7f0000000a80)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000ac0)=0x0) io_submit(r5, 0x1, &(0x7f0000000b00)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 14m24.420695697s ago: executing program 4 (id=905): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800260000000000000000000000005f6880d3009500000086692271e501834537d58fb11d0b42e6531657cb370de6a4c8b833fb02fbe3122dd25963783642d3d01e87a0950313ad577f47a0cf4783d123001984b4f1b63140c836a9e0972783d445c83e4b5dd6bb5bae38ff9b414979cdfd1f4b5e42cc4d36f485dfed4c46cd2e3e203e266fa69c48c5d7d8cd2ea12b147659b7f643537d7b39fa9203f3ed6898869a3c61e55d8a950c5212ff138d9cea6019fb8c6f50e3161521ec408cbf5f76c2ba82ed09ccad9ab74e3b97ee2600243038f6808e4f4705ca94029f94bf81885fb490865ec127aabec342c45a46652a52b5d8507af27528eb328294abc059665d6805a8df7597e7c020782baad148de479cd9ac5b167ae136c7f656fd963cf6d782fe78fbb5c9f88dee345075314f30bb32b26fcbf77b5a27e84aa851e1074be077e1602a1096a1d62d2ed07d1e7e9e365fc00328c9429051c8168ac24f50ee413c2a5ba28d61cb799791fcfffc8bf089343d876932c2312078eaffee02d744643eb8514290d59acb19eeb428a95ab5"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffffff, &(0x7f0000000240)='./cgroup/../file0\x00', 0x43, 0xa) r5 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) close_range(r4, r5, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, 0x0, 0x8080) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001a00)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x64, 0x0, 0x2, 0x2b, 0x0, @multicast2, @empty}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r7, 0x5433, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) 14m22.762503455s ago: executing program 4 (id=908): r0 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r0, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) 14m21.62944751s ago: executing program 4 (id=909): socket$inet6(0xa, 0x3, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x8}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@rodir}]}, 0x1, 0x2a7, &(0x7f0000000340)="$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") sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000004) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001780)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000017c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000001800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001880)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001900), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001940), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x184) r5 = fsopen(&(0x7f0000001980)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000001a40), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000001a80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/_\x7f\xf0R\xf6\xedI\xf3\xf4\x12I\xb1\xeb\x0f\xa9\x13r\xbaS$\x81<\x1b3a\xf7\xb2\x93\x8bw0\xa2m\xb7n3\x80K\x11n`\x7fo\xdd#\x8f3\xdb\xb1\x10$%\x92j\xbf\x11\xf7{\x06z\x83M^\xfb\xa8\x00O\xa7\r8\xc0c\xb6x\xd1\xcaO\xb8\x0fcfj\x1fU\xba', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x8042, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000140), 0x0}, 0x20) 14m6.239059142s ago: executing program 34 (id=909): socket$inet6(0xa, 0x3, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x8}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@rodir}]}, 0x1, 0x2a7, &(0x7f0000000340)="$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") sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000004) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001780)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000017c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000001800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001880)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001900), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001940), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x184) r5 = fsopen(&(0x7f0000001980)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000001a40), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000001a80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/_\x7f\xf0R\xf6\xedI\xf3\xf4\x12I\xb1\xeb\x0f\xa9\x13r\xbaS$\x81<\x1b3a\xf7\xb2\x93\x8bw0\xa2m\xb7n3\x80K\x11n`\x7fo\xdd#\x8f3\xdb\xb1\x10$%\x92j\xbf\x11\xf7{\x06z\x83M^\xfb\xa8\x00O\xa7\r8\xc0c\xb6x\xd1\xcaO\xb8\x0fcfj\x1fU\xba', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x8042, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000140), 0x0}, 0x20) 12m17.317597375s ago: executing program 2 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x100000000e2) r5 = syz_io_uring_setup(0x141c, &(0x7f0000000540)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r6 = io_uring_setup(0x168f, &(0x7f0000000680)={0x0, 0x6319, 0x2, 0x2, 0x202d8, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, 0x0, 0x0) io_uring_enter(r5, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) 12m15.979195191s ago: executing program 2 (id=1105): syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001040)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x40}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0xf000, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x535], 0x4000, 0x20002}) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={"a5040e0b", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8bada1c19c109b198800c200", "90fed6e2ffffff68063b8640", "000000ff0000000000000020", "0000000000000000009700"]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000840)=0x8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f00000009c0)}, {0x0}, {&(0x7f0000000e00)="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", 0x11f}], 0x3) syz_usbip_server_init(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) dup(0xffffffffffffffff) 12m12.23791071s ago: executing program 2 (id=1114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r0, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800), 0x10106, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) 12m9.118908497s ago: executing program 2 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_GET_TARGET(r5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x100000000e2) r6 = syz_io_uring_setup(0x141c, &(0x7f0000000540)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r7 = io_uring_setup(0x168f, &(0x7f0000000680)={0x0, 0x6319, 0x2, 0x2, 0x202d8, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, 0x0, 0x0) io_uring_enter(r6, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) 12m7.580907083s ago: executing program 2 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '@\x00\f', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [{0x2, 0x1, "44de93cdb414"}]}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r3 = syz_create_resource$binfmt(&(0x7f00000005c0)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file1'}, 0xb) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x2008800, &(0x7f0000000780)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002840)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000028c0)={0x28, 0x4, 0x0, {0x1, 0x5874}}, 0x28) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) close(r4) r8 = syz_open_dev$usbfs(&(0x7f0000000640), 0xb, 0x2) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000680)={0xe649, 0x1, [{0x1, 0x1}]}) r9 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r9, &(0x7f00000006c0)={0xa, 0x4e21, 0x7, @remote, 0x9}, 0x1c) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 12m6.351999627s ago: executing program 2 (id=1125): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x4000087, 0x2, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000400)={0x1, &(0x7f0000000580)=[{0x6, 0x4, 0x60, 0x5}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0x2, 0x6, "bfe431", 0x3f6f, 0xff, 0x0, @mcast1, @loopback}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x3864000, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES32], 0x3, 0x1213, &(0x7f0000000780)="$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") r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x8002, 0x0) 11m51.082535817s ago: executing program 35 (id=1125): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x4000087, 0x2, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000400)={0x1, &(0x7f0000000580)=[{0x6, 0x4, 0x60, 0x5}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0x2, 0x6, "bfe431", 0x3f6f, 0xff, 0x0, @mcast1, @loopback}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x3864000, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES32], 0x3, 0x1213, &(0x7f0000000780)="$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") r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x8002, 0x0) 10m41.957051282s ago: executing program 7 (id=1276): mkdir(&(0x7f0000000040)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='dir0/tracing_on\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002ec0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000002f00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000003080), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000030c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000003140)='net/netlink\x00') preadv(r2, &(0x7f0000003180)=[{&(0x7f00000031c0)=""/245, 0xf5}, {0x0}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003380)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, 0x0, 0x9e) mount(0x0, &(0x7f00000034c0)='./sys\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002840)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0x418, 0x348, 0x348, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffc, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 10m40.564510723s ago: executing program 7 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x11c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x144}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 10m40.229116667s ago: executing program 7 (id=1283): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080), 0x1, 0x57c, &(0x7f00000000c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000207c0)={0x0, 0x21, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000020d00)=@bloom_filter={0x1e, 0xe, 0x200, 0xc, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xd}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000020d80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000020dc0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000020e00)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000020e40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000020e80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000020ec0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000020f40), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000020f80), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000233000/0x3000)=nil) r4 = add_key(&(0x7f0000021000)='asymmetric\x00', 0x0, &(0x7f0000021040)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000215c0)='\x00', &(0x7f0000021600)) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000021640)='.\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m35.410934576s ago: executing program 7 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 10m35.035975414s ago: executing program 7 (id=1292): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002640)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002680)='./file0\x00', 0x200010, &(0x7f00000026c0)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000002740)="$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") prlimit64(0x0, 0xe, &(0x7f0000002c40)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002c80)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000002d00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002d80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002e00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002e40), 0x10106, 0x2, 0x0) unshare(0x22020600) open(&(0x7f0000002e80)='./file0\x00', 0x108843, 0x55) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 10m33.551911264s ago: executing program 7 (id=1297): socket$inet6(0xa, 0x3, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x8}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@rodir}]}, 0x1, 0x2a7, &(0x7f0000000340)="$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") sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000004) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001780)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000017c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001940), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x184) r3 = fsopen(&(0x7f0000001980)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x5) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001a80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/_\x7f\xf0R\xf6\xedI\xf3\xf4\x12I\xb1\xeb\x0f\xa9\x13r\xbaS$\x81<\x1b3a\xf7\xb2\x93\x8bw0\xa2m\xb7n3\x80K\x11n`\x7fo\xdd#\x8f3\xdb\xb1\x10$%\x92j\xbf\x11\xf7{\x06z\x83M^\xfb\xa8\x00O\xa7\r8\xc0c\xb6x\xd1\xcaO\xb8\x0fcfj\x1fU\xba', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x8042, 0x0) 10m28.137404624s ago: executing program 3 (id=1310): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x1b, r3, 0x0, 0xe) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000840)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x3000040, &(0x7f0000000900), 0x4, 0x524, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000ec0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f40)) symlink(&(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001000)='.\x02\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000001080)=[{{&(0x7f00000010c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)}}], 0x1, 0x4800) io_submit(0x0, 0x3, &(0x7f0000001140)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0, 0x0, 0x8}, 0x0, 0x0]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 10m26.576942282s ago: executing program 3 (id=1314): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=""/221}, 0x20) 10m24.109399342s ago: executing program 3 (id=1316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 10m23.687197626s ago: executing program 3 (id=1319): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m23.548874409s ago: executing program 3 (id=1320): signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) bind$rds(r3, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000009c0)=0x3, 0xac5) syz_clone3(&(0x7f0000000a00)={0x23800000, &(0x7f0000000a80)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000ac0)=0x0) io_submit(r5, 0x1, &(0x7f0000000b00)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 10m19.837340736s ago: executing program 3 (id=1329): gettid() socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r1, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x2800091, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f00000037c0)='.\x00', &(0x7f0000003800), 0x2208000, 0x0) 10m17.388136305s ago: executing program 36 (id=1297): socket$inet6(0xa, 0x3, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x8}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@rodir}]}, 0x1, 0x2a7, &(0x7f0000000340)="$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") sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000004) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001780)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000017c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001940), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x184) r3 = fsopen(&(0x7f0000001980)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x5) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001a80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/_\x7f\xf0R\xf6\xedI\xf3\xf4\x12I\xb1\xeb\x0f\xa9\x13r\xbaS$\x81<\x1b3a\xf7\xb2\x93\x8bw0\xa2m\xb7n3\x80K\x11n`\x7fo\xdd#\x8f3\xdb\xb1\x10$%\x92j\xbf\x11\xf7{\x06z\x83M^\xfb\xa8\x00O\xa7\r8\xc0c\xb6x\xd1\xcaO\xb8\x0fcfj\x1fU\xba', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x8042, 0x0) 10m4.445712868s ago: executing program 37 (id=1329): gettid() socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r1, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x2800091, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f00000037c0)='.\x00', &(0x7f0000003800), 0x2208000, 0x0) 8m38.840173235s ago: executing program 8 (id=1538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000880), 0xa7c, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f00000009c0)={'wlan0\x00', @random="7cf1e97c9e4f"}) 8m37.770474393s ago: executing program 8 (id=1540): socket$kcm(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000840)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, 0x0, 0x0) 8m37.481395813s ago: executing program 8 (id=1541): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000e00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e40)=0x8) getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000e80)=0x20000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000fc0), 0x651, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = fsopen(&(0x7f0000001100)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001180), 0x12) r4 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0xac08, 0x0, 0x3}, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x3100) 8m33.811253105s ago: executing program 8 (id=1546): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x2, 0x0) ptrace$poke(0x1b, r3, 0x0, 0xe) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000840)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x3000040, &(0x7f0000000900), 0x4, 0x524, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000ec0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f40)) symlink(&(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001000)='.\x02\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000001080)=[{{&(0x7f00000010c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)}}], 0x1, 0x4800) io_submit(0x0, 0x3, &(0x7f0000001140)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0, 0x0, 0x8}, 0x0, 0x0]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 8m26.95832465s ago: executing program 8 (id=1563): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="11223344556677889900aabbccdd", 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m25.396079859s ago: executing program 8 (id=1569): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000300)={&(0x7f0000000000)}, 0x0, &(0x7f00000003c0)}, &(0x7f0000000680)=0x18) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000006c0), 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m9.974114621s ago: executing program 38 (id=1569): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000300)={&(0x7f0000000000)}, 0x0, &(0x7f00000003c0)}, &(0x7f0000000680)=0x18) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000006c0), 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m50.493824389s ago: executing program 1 (id=1852): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018ef0000000000000e00e6ff0d"], 0x0, 0x2a, 0x0, 0x1}, 0x28) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000340)=@can={0x1d, r2}, 0x80, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000640)="6e385e000000000000585c5b8baf46ae", 0x10}], 0x2}, 0x11) 5m49.615983988s ago: executing program 1 (id=1855): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1e, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m49.432341587s ago: executing program 1 (id=1858): syz_emit_ethernet(0x22, &(0x7f0000001a00)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x64, 0x0, 0x2, 0x2b, 0x0, @multicast2, @empty}}}}}, 0x0) 5m49.152548356s ago: executing program 1 (id=1859): r0 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r0, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x40080}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000a00)={0x23800000, &(0x7f0000000a80)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000ac0)=0x0) io_submit(r5, 0x1, &(0x7f0000000b00)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 5m47.665838567s ago: executing program 1 (id=1862): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '@\x00\f', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [{0x2, 0x1, "44de93cdb414"}]}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r3 = syz_create_resource$binfmt(&(0x7f00000005c0)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file1'}, 0xb) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1004, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x2008800, &(0x7f0000000780)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002840)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000028c0)={0x28, 0x4, 0x0, {0x1, 0x5874}}, 0x28) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) close(r4) r8 = syz_open_dev$usbfs(&(0x7f0000000640), 0xb, 0x2) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000680)={0xe649, 0x1, [{0x1, 0x1}]}) r9 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r9, &(0x7f00000006c0)={0xa, 0x4e21, 0x7, @remote, 0x9}, 0x1c) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 5m44.053028106s ago: executing program 1 (id=1872): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000300)={&(0x7f0000000000)}, 0x0, &(0x7f00000003c0)}, &(0x7f0000000680)=0x18) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000006c0), 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000340)=0x2, 0x4) bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfd, 0x410}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000dc0)={r5}, &(0x7f0000000e00)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5(\x00'], 0x0, 0x0) 5m28.25375793s ago: executing program 39 (id=1872): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000300)={&(0x7f0000000000)}, 0x0, &(0x7f00000003c0)}, &(0x7f0000000680)=0x18) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000006c0), 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000340)=0x2, 0x4) bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfd, 0x410}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000dc0)={r5}, &(0x7f0000000e00)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5(\x00'], 0x0, 0x0) 1m45.851273668s ago: executing program 5 (id=2173): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000c40)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c80)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000e40)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000e80)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000f00)={r2, r0, 0x4, r1}, 0x10) 1m39.228021864s ago: executing program 5 (id=2182): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r2, &(0x7f0000001380)={0x900, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 1m37.971566913s ago: executing program 5 (id=2183): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f00000018c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000001cc0)=0xffff, 0x9, 0x0) 1m32.012763852s ago: executing program 5 (id=2187): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002380)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002440)=""/4099, 0x1003}, {0x0}, {&(0x7f0000001740)=""/227, 0xe3}, {&(0x7f0000004600)=""/121, 0x79}, {&(0x7f0000000280)=""/161, 0xa1}], 0x5}, 0x40000000) recvmsg$kcm(r0, &(0x7f0000004840)={0x0, 0xfffffffffffffdce, 0x0}, 0x80) 1m29.231897496s ago: executing program 5 (id=2194): mkdir(&(0x7f0000000040)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='dir0/tracing_on\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002ec0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000002f00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003040), 0x318, 0x0) recvmmsg(r1, &(0x7f0000003080), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000003140)='net/netlink\x00') preadv(r3, &(0x7f0000003180)=[{&(0x7f00000031c0)=""/245, 0xf5}, {0x0}, {0x0}], 0x3, 0x162, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, 0x0, 0x9e) mount(0x0, &(0x7f00000034c0)='./sys\x00', 0x0, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002840)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0x418, 0x348, 0x348, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffc, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1m25.737093922s ago: executing program 5 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f00000018c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000001cc0)=0xffff, 0x9, 0x0) 1m9.798684571s ago: executing program 40 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f00000018c0)="$eJzs3U9rY1UUAPAzsW3aaiddiKAiXsaNbkJbv8AUmQGxoNSJjC6ENzbV0ExTklDJINqdWz/H4NKdIH6BLnTvzl03LmcxzJP8m/6ZWB07Saj+flDeae457blt3uNuwjm6/d3dne1WeTtrR+F6ikJEFB5ELPeiviuDa6EXz8VJB/FW6fZvr3348SfvrW9s3NhM6eb6rbfXUkpXX//py6++v/Zz+/mPfrj6YzEOlz89+mPt98OXDl8+enTri1or1Vppt9FOWbrTaLSzO/Vq2qq1dsopfVCvZq1qqu22qs1T69v1xt5eJ2W7W0uLe81qq5Wy3U7aqXZSu5HazU7KPs9qu6lcLqelxeAceTEiKvc3N7P1/gvz5yRfn1RXjEGzuZ517+HiEyuV+1NpCACYqoue/+ee6fl/NsZ1/i9M5K952Zw8//Nf1T3/z428B5z/AQAAAAAAAAAAAADgMniQ56U8z0vDaz78kPDg+ym3x5g98f8/8zXt/hivEx/cm4+of7tf2a/0r/319e2oRT2qsRKleNh9LAz145vvbtxYSV0HeSzd/aZXf+2XiMpzp+tXoxTLo+tXU9/j+uheZ2PxZP1alOLF0fVrI+vn4s03TtSXoxS/fhaNqMdW7/F2XP/1akrvvL9xpr7YywMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/6Gchl6N/tz7/UrEQuwP5veXjxOWT8/H79c/nq+/EqV4OHo+/8rI+fwz8crMdPcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOtzr2drF6vNicVDGf+916ZGwZ/XXWln35wZmkhTicX/+7nXDAoPFXVwmCTI5Ye5Xk+rlbn/1XVwaDZib4TZiPinJx80NPFf9cLEXFOTjEixr/lwuTur2cWTPpJBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANN3PPR72p0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwTa3OvZ2sXq82/3kw8zTJ3WDaewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhM/gwAAP//EX8L5g==") r3 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000001cc0)=0xffff, 0x9, 0x0) 19.013905727s ago: executing program 6 (id=2281): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_GET_TARGET(r5, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x100000000e2) r6 = syz_io_uring_setup(0x141c, &(0x7f0000000540)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r7 = io_uring_setup(0x168f, &(0x7f0000000680)={0x0, 0x6319, 0x2, 0x2, 0x202d8, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, 0x0, 0x0) io_uring_enter(r6, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) 17.655840306s ago: executing program 6 (id=2282): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) fsync(r1) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000480)={"c25f3c7ad73731977444b923bc28b35da0e3de674988c69cfc43ac0f80cd", 0xffffffff, 0x1, 0x1, 0x7, 0x5, 0x9, 0x8, 0x7, [0xfffffff9, 0x0, 0x7fffffff, 0xd7, 0xe1e8, 0x9, 0x5, 0xfffffffe, 0x0, 0xffff, 0xdc6, 0xfffffffa, 0x92, 0x4, 0x8001, 0x3, 0x2, 0xffffffff, 0x1cc2]}) fchdir(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file4\x00', &(0x7f0000000c80)={0x0, 0x0, 0x20}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='cmdline\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000800)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)="90", 0x34000}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000001680), 0xe) close(r4) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000d80)=@newchain={0x518, 0x64, 0x1, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0xd}}, @filter_kind_options=@f_route={{0xa}, {0x4c0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xad}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x7, 0x5683fc9c, 0x6, 0x0, {0xc, 0x1, 0xac8a, 0x4, 0x6, 0x7}, {0x7f, 0x2, 0x3, 0xd, 0x3, 0x7}, 0x2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x36, 0x8, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x9, 0x1ff, 0x9, 0x0, 0xfffffeff, 0x28, 0x7, 0x5016, 0x200, 0xfffffff7, 0x1, 0x5a99, 0x7f, 0x1, 0x40, 0xb, 0x7, 0x80000001, 0x4, 0x10, 0x6, 0x5, 0x1, 0x2, 0x9178, 0x51, 0x8, 0x1, 0x3, 0xff, 0xa728, 0x9, 0x1000, 0x4, 0x1, 0x39e, 0x8, 0xfffffeff, 0xad6, 0x5, 0x7, 0x6, 0x5, 0x2, 0x4, 0xc, 0x6, 0x8, 0x0, 0x4, 0x800, 0xffff0001, 0x221, 0x9, 0x2, 0x8, 0x8, 0x1, 0x67c, 0xe, 0x7fffffff, 0x7fff, 0x6, 0x0, 0x0, 0x100, 0x1, 0x7, 0x1, 0x1, 0x400, 0x401, 0xb, 0x0, 0x1, 0x6, 0x7, 0x7, 0x10000, 0x1, 0x3, 0x1, 0x73d, 0x6f, 0x5, 0x1b80000, 0x8, 0x0, 0x7, 0x2, 0x5, 0xa10, 0x80, 0x4, 0xcaad, 0x2, 0x4, 0x6, 0x8, 0x7, 0xf92, 0xc0000000, 0x7, 0x6, 0x2, 0x3, 0x6, 0xfec, 0x6, 0x9, 0x4, 0xc, 0xf, 0x50000000, 0x2, 0x2, 0x400000, 0x0, 0x3, 0x8e6, 0x2, 0x0, 0x800, 0x40, 0x810, 0xaf5, 0x7, 0x2, 0x4, 0x1, 0x3, 0x80000000, 0x10001, 0x4, 0x1, 0x1000, 0x14d7, 0x59d, 0x5, 0x1, 0x5, 0x7, 0x10000, 0x1000, 0x793, 0x7f, 0x8, 0x6f4, 0xde2, 0x400, 0x8, 0x7, 0x0, 0x4, 0xffff0000, 0x401a, 0x8, 0x8, 0x8000, 0xbb, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0x4, 0x16f1b895, 0x60, 0xffff, 0x5, 0x58514d94, 0x6, 0x35b9, 0x3, 0xffffa07f, 0x4, 0x9, 0x101, 0x2, 0x8a, 0xfffff36f, 0x7ff, 0x0, 0x7, 0x7, 0x2, 0x0, 0xea, 0x32, 0x8, 0x7, 0x33fdf7b9, 0x7, 0xb, 0x84d, 0x3, 0x3, 0x2c, 0x3, 0x81, 0x14, 0x80008000, 0x4000000, 0x0, 0x2, 0x270e, 0x8, 0x48, 0xff, 0x3, 0xe, 0x6, 0x7, 0x6, 0x1, 0x3a68, 0x6, 0xd, 0x4, 0x4, 0xf, 0x9, 0x7, 0x8, 0x1000, 0x0, 0x4, 0x7f, 0x3, 0x5, 0xb, 0x8000, 0xc, 0x1, 0xa, 0x2, 0x1, 0x7, 0x8, 0xff, 0x4, 0x0, 0xad, 0x8, 0x2, 0x80, 0x7, 0xffffffff]}]}, @TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_ROUTE4_ACT={0x44, 0x6, [@m_gact={0x40, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0x12, 0x6, "5820fded9a2017a0d91738fa5008"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc7}}]}, 0x518}}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xf5d, 0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r2, 0x6f44, 0x4) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x0, r6}, 0x18) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x3c441000) getrandom(&(0x7f0000000540)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$nl_xfrm(0x10, 0x3, 0x6) 14.914560256s ago: executing program 0 (id=2284): r0 = openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x318, 0x0) capset(&(0x7f0000002fc0)={0x19980330}, &(0x7f0000003000)={0x100000, 0x5d0, 0x4, 0x8e, 0x5, 0x4}) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x10, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002e00)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8, @ANYRES8=r1, @ANYRESDEC=r5, @ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYBLOB="fb7a67e75bbc0f115e43f4672297f461170db637e12fcbd4345bb3575f34e905b10e4706c0ccf08e312d1bce938e1e9dcc1308332f7046eae5ae6800d1c4e504e8dbc2071db988f785a6b09c4ccb365868e9efecb6565632c7b3d85a59741151bc4b7888e532063a99980902915bd88f68e1dd5be67bd0db222695d5cbaba6cae81daf6912edf1a8d9946bbaaedee558f4646bdc0cf93a38289e07a573921d4bfa78c1aec30724fb97dd41fc99b7185e7a84ef0f", @ANYRES16], 0x0, 0x17d, &(0x7f00000029c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10000, 0x0) 13.383584623s ago: executing program 0 (id=2285): mkdir(&(0x7f0000000040)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='dir0/tracing_on\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002ec0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003040), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000030c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000003140)='net/netlink\x00') preadv(r3, &(0x7f0000003180)=[{&(0x7f00000031c0)=""/245, 0xf5}, {0x0}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003380)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, 0x0, 0x9e) mount(0x0, &(0x7f00000034c0)='./sys\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002840)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0x418, 0x348, 0x348, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffc, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 13.2185276s ago: executing program 6 (id=2286): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000006c0), 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180100000000000000000000060000008500000023000000850000000800000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r3, 0x0, 0xe40, 0xe40, &(0x7f0000000f00)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000f40)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.997302182s ago: executing program 9 (id=2287): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r3, &(0x7f0000001380)={0x900, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 12.207258753s ago: executing program 0 (id=2288): mkdir(&(0x7f0000000040)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002ec0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000002f00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003040), 0x318, 0x0) recvmmsg(r1, &(0x7f0000003080), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 10.549173292s ago: executing program 6 (id=2289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4008245, 0x0, 0x0) pselect6(0x40, &(0x7f0000000640)={0x0, 0x9, 0xffffffffffffffff}, 0x0, &(0x7f0000000680)={0x1f}, 0x0, 0x0) recvfrom$inet(r3, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) recvfrom$inet(r0, &(0x7f00000003c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 10.4711543s ago: executing program 9 (id=2290): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80080, &(0x7f0000000180)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000bc0)=0x2) syz_open_procfs(0x0, &(0x7f0000000c00)='pagemap\x00') fchdir(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x9, &(0x7f0000000d40)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e40)={r5, &(0x7f0000000e80), &(0x7f0000000ec0)=@tcp=r3}, 0x20) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 9.129803237s ago: executing program 0 (id=2291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r0, 0x0, 0x0, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000009c0)=0x3, 0xac5) syz_clone3(&(0x7f0000000a00)={0x23800000, &(0x7f0000000a80)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000ac0)=0x0) io_submit(r6, 0x1, &(0x7f0000000b00)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 8.857687235s ago: executing program 9 (id=2292): keyctl$set_reqkey_keyring(0xe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, 0x0, 0x0, 0x20}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x28, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e24}, 0x1c) 8.6160144s ago: executing program 6 (id=2293): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) syz_open_dev$usbfs(&(0x7f0000000540), 0x76, 0x160341) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000dffa1000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(0x0) 4.98414463s ago: executing program 0 (id=2294): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80080, &(0x7f0000000180)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000bc0)=0x2) syz_open_procfs(0x0, &(0x7f0000000c00)='pagemap\x00') fchdir(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x9, &(0x7f0000000d40)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e40)={r5, &(0x7f0000000e80), &(0x7f0000000ec0)=@tcp=r3}, 0x20) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 4.98337581s ago: executing program 6 (id=2295): gettid() timer_create(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x1808014, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f0000000d00)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") r0 = openat(0xffffffffffffff9c, &(0x7f00000062c0)='.\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x20002, 0x0) ioctl(r2, 0x400c4d02, 0x0) 4.98298323s ago: executing program 9 (id=2296): mkdir(&(0x7f0000000040)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='dir0/tracing_on\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002ec0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003040), 0x318, 0x0) recvmmsg(r1, &(0x7f0000003080), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000003140)='net/netlink\x00') preadv(r3, &(0x7f0000003180)=[{&(0x7f00000031c0)=""/245, 0xf5}, {0x0}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003380)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, 0x0, 0x9e) mount(0x0, &(0x7f00000034c0)='./sys\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002840)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0x418, 0x348, 0x348, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffc, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 3.261936797s ago: executing program 9 (id=2297): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000300)={&(0x7f0000000000)}, 0x0, &(0x7f00000003c0)}, &(0x7f0000000680)=0x18) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000340)=0x2, 0x4) bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000700)) r4 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000dc0)={r5}, &(0x7f0000000e00)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5(\x00'], 0x0, 0x0) 2.785625115s ago: executing program 0 (id=2298): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000006c0), 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180100000000000000000000060000008500000023000000850000000800000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r3, 0x0, 0xe40, 0xe40, &(0x7f0000000f00)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000f40)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 9 (id=2299): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000300)={&(0x7f0000000000)}, 0x0, &(0x7f00000003c0)}, &(0x7f0000000680)=0x18) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000340)=0x2, 0x4) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000700)) r4 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000dc0)={r5}, &(0x7f0000000e00)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5(\x00'], 0x0, 0x0) kernel console output (not intermixed with test programs): from 0 to 512 [ 683.615015][T10967] EXT4-fs (loop8): 1 orphan inode deleted [ 683.622223][T10967] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 683.632249][T10967] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.673053][T10951] vhci_hcd vhci_hcd.0: Device attached [ 683.697093][ T7] usb 35-2: new high-speed USB device number 2 using vhci_hcd [ 683.717214][T10951] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 683.723800][T10951] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 683.938055][T10951] vhci_hcd vhci_hcd.0: Device attached [ 683.997809][T10953] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 684.004500][T10953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 684.103654][T10953] vhci_hcd vhci_hcd.0: Device attached [ 684.158679][T10951] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 684.165348][T10951] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 684.263301][T10951] vhci_hcd vhci_hcd.0: Device attached [ 684.294369][T10966] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19) [ 684.301047][T10966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 684.396172][T10966] vhci_hcd vhci_hcd.0: Device attached [ 684.423595][T10970] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 684.430301][T10970] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 684.493491][T10970] vhci_hcd vhci_hcd.0: Device attached [ 684.614814][T10949] rxe_eth0 speed is unknown, defaulting to 1000 [ 684.647155][ T4415] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 684.708609][ T22] usb usb34-port1: unable to enumerate USB device [ 684.854259][ T4415] usb 2-1: not running at top speed; connect to a high speed hub [ 684.874891][ T4415] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.927365][ T4415] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 684.957467][ T4415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.133102][ T4415] usb 2-1: Found UVC 1.00 device (046d:0825) [ 685.181585][ T4415] usb 2-1: No streaming interface found for terminal 2. [ 685.401220][ T4415] usb 2-1: USB disconnect, device number 2 [ 685.668740][T10999] xt_SECMARK: invalid mode: 2 [ 685.795860][T10974] vhci_hcd: connection closed [ 685.795891][T10976] vhci_hcd: connection closed [ 685.795919][T10955] vhci_hcd: connection reset by peer [ 685.795948][T10980] vhci_hcd: connection closed [ 685.795974][T10954] vhci_hcd: connection closed [ 685.796004][T10985] vhci_hcd: connection closed [ 685.796089][T10972] vhci_hcd: connection closed [ 685.850965][T10057] vhci_hcd: stop threads [ 686.112416][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.123830][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.287780][T10057] vhci_hcd: release socket [ 686.297725][T10057] vhci_hcd: disconnect device [ 686.357620][T10057] vhci_hcd: stop threads [ 686.375109][T10057] vhci_hcd: release socket [ 686.426610][T10057] vhci_hcd: disconnect device [ 686.477450][T10057] vhci_hcd: stop threads [ 686.481768][T10057] vhci_hcd: release socket [ 686.517121][T10057] vhci_hcd: disconnect device [ 686.567371][T10057] vhci_hcd: stop threads [ 686.571805][T10057] vhci_hcd: release socket [ 686.610286][T10057] vhci_hcd: disconnect device [ 686.657912][T10057] vhci_hcd: stop threads [ 686.668057][T10057] vhci_hcd: release socket [ 686.756657][T10057] vhci_hcd: disconnect device [ 686.761770][T10057] vhci_hcd: stop threads [ 686.766057][T10057] vhci_hcd: release socket [ 686.770607][T10057] vhci_hcd: disconnect device [ 686.775583][T10057] vhci_hcd: stop threads [ 686.780182][T10057] vhci_hcd: release socket [ 686.784700][T10057] vhci_hcd: disconnect device [ 686.874335][ T8875] EXT4-fs (loop8): unmounting filesystem. [ 687.731678][T11019] loop9: detected capacity change from 0 to 1024 [ 688.254571][T11019] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 688.454723][T11050] loop0: detected capacity change from 0 to 512 [ 688.552604][T11050] EXT4-fs (loop0): 1 orphan inode deleted [ 688.560123][T11050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 688.570628][ T4825] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 688.618170][T11050] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.677459][ T4825] EXT4-fs error (device loop0): ext4_release_dquot:6884: comm kworker/u4:17: Failed to release dquot type 1 [ 690.483458][ T7] vhci_hcd: vhci_device speed not set [ 690.784187][T11064] EXT4-fs (loop9): unmounting filesystem. [ 690.907789][T11053] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.102290][T11069] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.277232][T11076] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 691.283832][T11076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 691.357345][T11076] vhci_hcd vhci_hcd.0: Device attached [ 691.387305][T11079] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 691.393913][T11079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.531846][T11079] vhci_hcd vhci_hcd.0: Device attached [ 691.618534][T11076] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 691.625119][T11076] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 691.686655][T11076] vhci_hcd vhci_hcd.0: Device attached [ 691.718248][T11079] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 691.724951][T11079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.747509][T11076] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 691.754196][T11076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.827162][T11076] vhci_hcd vhci_hcd.0: Device attached [ 691.870735][T11079] vhci_hcd vhci_hcd.0: Device attached [ 691.915051][T11083] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19) [ 691.921736][T11083] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.961498][ T9093] usb usb36-port1: attempt power cycle [ 692.577559][T11083] vhci_hcd vhci_hcd.0: Device attached [ 692.715112][ T131] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 692.800764][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 692.845421][T11084] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 692.852103][T11084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 692.977454][ T131] usb 2-1: device descriptor read/64, error -32 [ 693.347374][ T131] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 693.425839][T11084] vhci_hcd vhci_hcd.0: Device attached [ 693.434308][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 693.587708][ T131] usb 2-1: device descriptor read/64, error -32 [ 693.721405][ T131] usb usb2-port1: attempt power cycle [ 694.627396][ T131] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 694.931213][ T131] usb 2-1: device descriptor read/8, error -71 [ 694.969054][T11097] vhci_hcd: connection closed [ 694.975763][T11094] vhci_hcd: connection closed [ 694.996215][ T9967] vhci_hcd: stop threads [ 695.057250][T11077] vhci_hcd: connection closed [ 695.057483][T11080] vhci_hcd: connection closed [ 695.062386][T11086] vhci_hcd: connection closed [ 695.067478][T11090] vhci_hcd: connection closed [ 695.072358][T11092] vhci_hcd: connection closed [ 695.127968][ T9967] vhci_hcd: release socket [ 695.163856][ T9093] usb 36-1: SetAddress Request (4) to port 0 [ 695.170582][ T9093] usb 36-1: new SuperSpeed USB device number 4 using vhci_hcd [ 695.237161][ T9967] vhci_hcd: disconnect device [ 695.247225][ T9967] vhci_hcd: stop threads [ 695.251544][ T9967] vhci_hcd: release socket [ 695.297105][ T9967] vhci_hcd: disconnect device [ 695.302132][ T9967] vhci_hcd: stop threads [ 695.326992][ T9967] vhci_hcd: release socket [ 695.337085][ T9967] vhci_hcd: disconnect device [ 695.367033][ T9967] vhci_hcd: stop threads [ 695.372601][ T9967] vhci_hcd: release socket [ 695.387352][ T9967] vhci_hcd: disconnect device [ 695.407036][ T9967] vhci_hcd: stop threads [ 695.423735][ T9967] vhci_hcd: release socket [ 695.441831][ T9967] vhci_hcd: disconnect device [ 695.462015][ T9967] vhci_hcd: stop threads [ 695.811593][ T9967] vhci_hcd: release socket [ 695.970829][ T9967] vhci_hcd: disconnect device [ 696.247597][ T9967] vhci_hcd: stop threads [ 696.327066][ T9967] vhci_hcd: release socket [ 696.351153][ T9967] vhci_hcd: disconnect device [ 696.546894][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 697.441312][T11140] loop9: detected capacity change from 0 to 512 [ 697.512498][T11137] loop0: detected capacity change from 0 to 16 [ 697.523384][T11137] erofs: (device loop0): mounted with root inode @ nid 36. [ 697.665841][T11140] EXT4-fs (loop9): 1 orphan inode deleted [ 697.677597][ T4841] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 697.690107][T11140] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 697.727354][ T4841] EXT4-fs error (device loop9): ext4_release_dquot:6884: comm kworker/u4:24: Failed to release dquot type 1 [ 697.747631][T11140] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.091893][T11150] rxe_eth0 speed is unknown, defaulting to 1000 [ 700.049261][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 700.568187][ T9093] usb 36-1: device descriptor read/8, error -110 [ 700.764687][T11162] usb usb1: usbfs: process 11162 (syz.6.1584) did not claim interface 0 before use [ 701.562686][T11169] loop9: detected capacity change from 0 to 512 [ 701.593273][T11165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 701.599843][T11165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 701.664415][T11169] ext3: Unknown parameter '.' [ 701.678875][T11170] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 701.685441][T11170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 701.708105][ T9093] usb usb36-port1: unable to enumerate USB device [ 701.788310][ T7] vhci_hcd: vhci_device speed not set [ 701.904740][T11165] vhci_hcd vhci_hcd.0: Device attached [ 702.115792][T11170] vhci_hcd vhci_hcd.0: Device attached [ 702.223499][T11165] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 702.230285][T11165] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 702.254008][T11182] loop9: detected capacity change from 0 to 256 [ 702.316870][T11182] rxe_eth0 speed is unknown, defaulting to 1000 [ 702.665431][T11165] vhci_hcd vhci_hcd.0: Device attached [ 702.688326][T11170] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8) [ 702.694943][T11170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 702.789459][T11174] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 702.796138][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 702.885638][T11170] vhci_hcd vhci_hcd.0: Device attached [ 702.925987][T11174] vhci_hcd vhci_hcd.0: Device attached [ 702.956839][T11178] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 702.963526][T11178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 703.086862][T11165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 703.093575][T11165] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 703.197228][ T7] vhci_hcd: vhci_device speed not set [ 703.245823][T11178] vhci_hcd vhci_hcd.0: Device attached [ 703.277099][ T7] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 703.284953][T11165] vhci_hcd vhci_hcd.0: Device attached [ 703.487104][ T9093] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 703.679410][ T9093] usb 2-1: not running at top speed; connect to a high speed hub [ 703.688889][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 703.701536][ T9093] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.751924][ T9093] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 703.823455][ T9093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.912837][ T9093] usb 2-1: Found UVC 1.00 device (046d:0825) [ 703.954409][ T9093] usb 2-1: No streaming interface found for terminal 2. [ 704.088429][T11192] vhci_hcd: connection closed [ 704.088745][T11188] vhci_hcd: connection closed [ 704.104075][T11184] vhci_hcd: connection closed [ 704.109624][T11183] vhci_hcd: connection closed [ 704.117499][T11180] vhci_hcd: connection closed [ 704.123154][T11172] vhci_hcd: connection closed [ 704.128695][T11166] vhci_hcd: connection reset by peer [ 704.149666][ T9973] vhci_hcd: stop threads [ 704.154727][ T9973] vhci_hcd: release socket [ 704.168795][ T8427] usb 2-1: USB disconnect, device number 7 [ 704.199389][ T9973] vhci_hcd: disconnect device [ 704.242256][ T9973] vhci_hcd: stop threads [ 704.280978][ T9973] vhci_hcd: release socket [ 704.312732][ T9973] vhci_hcd: disconnect device [ 704.343569][ T9973] vhci_hcd: stop threads [ 704.367217][ T9973] vhci_hcd: release socket [ 704.390749][ T9973] vhci_hcd: disconnect device [ 704.421344][ T9973] vhci_hcd: stop threads [ 704.446516][ T9973] vhci_hcd: release socket [ 704.471433][ T9973] vhci_hcd: disconnect device [ 704.502734][ T9973] vhci_hcd: stop threads [ 704.542116][ T9973] vhci_hcd: release socket [ 704.568156][ T9973] vhci_hcd: disconnect device [ 704.595062][ T9973] vhci_hcd: stop threads [ 704.610136][ T9973] vhci_hcd: release socket [ 704.631707][ T9973] vhci_hcd: disconnect device [ 704.687041][ T9973] vhci_hcd: stop threads [ 704.691361][ T9973] vhci_hcd: release socket [ 704.756999][ T9973] vhci_hcd: disconnect device [ 705.525396][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.534822][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.548111][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.560031][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.567643][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 705.575088][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 705.645686][T11209] rxe_eth0 speed is unknown, defaulting to 1000 [ 707.592576][T11227] rxe_eth0 speed is unknown, defaulting to 1000 [ 707.847254][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 708.603601][ T7] vhci_hcd: vhci_device speed not set [ 709.090835][T11249] loop6: detected capacity change from 0 to 512 [ 709.484847][T11249] EXT4-fs (loop6): 1 orphan inode deleted [ 709.495180][T11249] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 709.507339][T11249] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.897470][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 709.944302][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 710.006846][T11209] chnl_net:caif_netlink_parms(): no params data found [ 710.320877][T11261] loop6: detected capacity change from 0 to 16 [ 710.412850][T11261] erofs: (device loop6): mounted with root inode @ nid 36. [ 710.432694][T11261] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 710.444195][T11261] syz.6.1598: attempt to access beyond end of device [ 710.444195][T11261] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 710.563661][T11261] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 710.574108][T11261] syz.6.1598: attempt to access beyond end of device [ 710.574108][T11261] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 710.591697][T11261] syz.6.1598: attempt to access beyond end of device [ 710.591697][T11261] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 710.657461][ T26] audit: type=1800 audit(1794115388.858:32): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1598" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 711.501393][T11209] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.590066][T11209] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.666409][T11209] device bridge_slave_0 entered promiscuous mode [ 711.743374][T11209] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.816146][T11209] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.673907][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 712.698130][ T4415] usb usb36-port1: attempt power cycle [ 713.181560][T11209] device bridge_slave_1 entered promiscuous mode [ 713.414181][T11209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.282931][T11209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.589137][T11282] loop9: detected capacity change from 0 to 1024 [ 714.600275][T11282] journal_path: Lookup failure for './proc' [ 714.606321][T11282] EXT4-fs: error: could not find journal device path [ 714.768723][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 715.172097][T11209] team0: Port device team_slave_0 added [ 715.252071][T11209] team0: Port device team_slave_1 added [ 715.288174][ T4415] usb usb36-port1: unable to enumerate USB device [ 715.465825][T11209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.474333][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.502446][T11209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.557856][T11209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.564867][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.689595][T11209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.865197][T11209] device hsr_slave_0 entered promiscuous mode [ 715.939912][T11209] device hsr_slave_1 entered promiscuous mode [ 716.807863][T11316] loop1: detected capacity change from 0 to 512 [ 716.932007][T11321] loop6: detected capacity change from 0 to 256 [ 717.004699][T11316] EXT4-fs (loop1): 1 orphan inode deleted [ 717.040289][ T4823] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 717.161620][ T4823] EXT4-fs error (device loop1): ext4_release_dquot:6884: comm kworker/u4:16: Failed to release dquot type 1 [ 717.207897][T11316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 717.249914][T11316] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.537211][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 718.650671][T11326] rxe_eth0 speed is unknown, defaulting to 1000 [ 719.721148][T11343] loop6: detected capacity change from 0 to 16 [ 719.851480][T11343] erofs: (device loop6): mounted with root inode @ nid 36. [ 722.004154][ T4374] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.560610][ T4374] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.030382][ T9836] EXT4-fs (loop1): unmounting filesystem. [ 723.046674][T11209] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 723.259850][ T4374] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.279206][T11373] loop6: detected capacity change from 0 to 512 [ 723.341491][T11209] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 723.415457][T11378] loop0: detected capacity change from 0 to 16 [ 725.733562][T11378] erofs: (device loop0): mounted with root inode @ nid 36. [ 725.755528][T11378] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 725.765875][T11378] syz.0.1620: attempt to access beyond end of device [ 725.765875][T11378] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 726.432483][ T26] audit: type=1800 audit(1794115404.538:33): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1620" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 726.729261][ T4374] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.937408][T11209] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 726.963043][T11209] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 727.424228][T11209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.579061][T11401] rxe_eth0 speed is unknown, defaulting to 1000 [ 728.649972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 728.661564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 728.818483][T11209] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.691130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 729.818158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.979054][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.986273][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.144681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 730.239569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 730.550176][T11442] loop1: detected capacity change from 0 to 1024 [ 730.557491][T11442] journal_path: Lookup failure for './proc' [ 730.563458][T11442] EXT4-fs: error: could not find journal device path [ 731.050979][ T26] audit: type=1326 audit(1794115409.268:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 731.635629][T11252] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 731.677392][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.684607][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.723135][ T26] audit: type=1326 audit(1794115409.268:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 731.744376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 731.806423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 731.832476][ T26] audit: type=1326 audit(1794115409.278:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 731.859603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 731.872728][ T26] audit: type=1326 audit(1794115409.278:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 731.904613][ T26] audit: type=1326 audit(1794115409.278:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 731.975947][ T26] audit: type=1326 audit(1794115409.278:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 732.013013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 732.063274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 732.111218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 732.123925][ T26] audit: type=1326 audit(1794115409.278:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 732.148743][ T26] audit: type=1326 audit(1794115409.278:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 732.173443][ T26] audit: type=1326 audit(1794115409.288:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 732.199401][ T26] audit: type=1326 audit(1794115409.288:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 732.242530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 732.481684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 732.879667][ T26] audit: type=1326 audit(1794115409.288:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.9.1631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 732.976758][T11209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.997516][T11209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 733.236891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 733.295237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 733.329097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 733.359052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 733.426785][T11462] loop1: detected capacity change from 0 to 512 [ 736.727460][ T4348] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 736.907776][T11523] loop9: detected capacity change from 0 to 512 [ 737.063909][ T4348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.249964][ T4348] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 737.467749][T11209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.519093][ T4348] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 737.669537][ T4348] usb 2-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 737.682497][T11523] EXT4-fs (loop9): 1 orphan inode deleted [ 737.689288][T11523] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 737.702073][T11523] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.772652][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.792529][ T4348] usb 2-1: Product: syz [ 737.802183][ T4348] usb 2-1: Manufacturer: syz [ 737.814950][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 737.822815][ T4348] usb 2-1: SerialNumber: syz [ 737.833091][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.029126][ T4348] usb-storage 2-1:1.0: USB Mass Storage device detected [ 738.048457][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 738.154663][ T4348] scsi host1: usb-storage 2-1:1.0 [ 738.376702][T11540] usb usb1: usbfs: process 11540 (syz.9.1644) did not claim interface 0 before use [ 740.796808][ T33] usb 2-1: USB disconnect, device number 8 [ 742.362125][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 742.375804][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 742.426310][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 742.462851][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 742.508425][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 742.573600][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 742.623572][T11209] device veth0_vlan entered promiscuous mode [ 742.667582][T11209] device veth1_vlan entered promiscuous mode [ 742.737247][ T4374] device hsr_slave_0 left promiscuous mode [ 742.754513][T11583] loop1: detected capacity change from 0 to 512 [ 742.777469][ T4374] device hsr_slave_1 left promiscuous mode [ 742.792227][T11583] ext3: Unknown parameter '.' [ 742.798537][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.806005][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.848022][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.884616][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.919507][ T4374] device bridge_slave_1 left promiscuous mode [ 742.953003][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.070601][ T4374] device bridge_slave_0 left promiscuous mode [ 743.076972][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.612290][ T4374] device veth1_macvtap left promiscuous mode [ 744.625226][ T4374] device veth0_macvtap left promiscuous mode [ 744.689227][ T4374] device veth1_vlan left promiscuous mode [ 744.695144][ T4374] device veth0_vlan left promiscuous mode [ 745.345032][T11614] usb usb1: usbfs: process 11614 (syz.6.1654) did not claim interface 0 before use [ 746.494251][T11618] loop9: detected capacity change from 0 to 16 [ 746.538160][T11618] erofs: (device loop9): mounted with root inode @ nid 36. [ 747.067085][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 747.192443][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.198856][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.258875][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.279081][ T7] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 747.294104][ T7] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 747.338168][ T7] usb 1-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 747.348361][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.356409][ T7] usb 1-1: Product: syz [ 747.360964][ T7] usb 1-1: Manufacturer: syz [ 747.365604][ T7] usb 1-1: SerialNumber: syz [ 747.382941][ T4374] team0 (unregistering): Port device team_slave_1 removed [ 747.395494][ T7] usb-storage 1-1:1.0: USB Mass Storage device detected [ 747.459287][ T4374] team0 (unregistering): Port device team_slave_0 removed [ 747.466650][ T7] scsi host1: usb-storage 1-1:1.0 [ 747.574761][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.715459][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.936057][T11627] loop9: detected capacity change from 0 to 16 [ 747.997393][T11627] erofs: (device loop9): mounted with root inode @ nid 36. [ 748.021256][T11627] erofs: (device loop9): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 748.031560][T11627] syz.9.1657: attempt to access beyond end of device [ 748.031560][T11627] loop9: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 748.231889][T11627] erofs: (device loop9): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 748.241682][T11627] syz.9.1657: attempt to access beyond end of device [ 748.241682][T11627] loop9: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 748.259984][T11627] syz.9.1657: attempt to access beyond end of device [ 748.259984][T11627] loop9: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 748.304373][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 748.304435][ T26] audit: type=1800 audit(1794115426.518:100): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1657" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 749.446584][T11620] loop0: detected capacity change from 0 to 40427 [ 749.495112][T11620] F2FS-fs (loop0): invalid crc value [ 749.543649][T11620] F2FS-fs (loop0): Found nat_bits in checkpoint [ 749.882265][ T4374] bond0 (unregistering): Released all slaves [ 749.935087][T11620] F2FS-fs (loop0): Start checkpoint disabled! [ 750.094574][T11209] device veth0_macvtap entered promiscuous mode [ 750.129511][T11209] device veth1_macvtap entered promiscuous mode [ 750.192590][ T33] usb 1-1: USB disconnect, device number 3 [ 750.209125][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.243795][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.254162][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.274706][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.286137][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.315617][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.327089][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.340378][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.352127][T11209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.363787][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 750.373241][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 750.391013][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 750.400358][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 750.420611][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 750.438095][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 750.454177][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 750.496161][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 750.516197][T11592] rxe_eth0 speed is unknown, defaulting to 1000 [ 751.009004][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.042163][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.714686][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.757214][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.776843][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.801139][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.819999][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.842874][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.888407][T11209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.938445][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 751.976186][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.085943][T11209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.138075][T11209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.155547][T11209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.175740][T11209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.374628][ T4801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.440318][ T4801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.534057][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 752.569737][ T9967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.635006][ T9967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.596234][T11663] usb usb1: usbfs: process 11663 (syz.0.1664) did not claim interface 0 before use [ 753.636704][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.754731][T11675] loop5: detected capacity change from 0 to 512 [ 754.901740][T11675] EXT4-fs (loop5): 1 orphan inode deleted [ 754.908762][T11675] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 754.920122][T11675] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.969852][ T9700] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 755.016635][ T9700] EXT4-fs error (device loop5): ext4_release_dquot:6884: comm kworker/u4:8: Failed to release dquot type 1 [ 755.375291][T11682] loop6: detected capacity change from 0 to 512 [ 755.411591][T11209] EXT4-fs (loop5): unmounting filesystem. [ 755.514654][T11682] EXT4-fs (loop6): 1 orphan inode deleted [ 755.521626][T11682] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 755.532550][ T9700] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 755.543213][T11682] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.590473][ T9700] EXT4-fs error (device loop6): ext4_release_dquot:6884: comm kworker/u4:8: Failed to release dquot type 1 [ 756.169380][ T26] audit: type=1326 audit(1794115434.058:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 756.561955][ T26] audit: type=1326 audit(1794115434.058:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 756.648113][ T26] audit: type=1326 audit(1794115434.068:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 756.742571][ T26] audit: type=1326 audit(1794115434.068:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 756.776641][T11696] loop0: detected capacity change from 0 to 512 [ 756.805217][T11696] ext3: Unknown parameter '.' [ 756.840065][ T26] audit: type=1326 audit(1794115434.068:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 757.105461][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 757.117251][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 757.227086][T11701] loop0: detected capacity change from 0 to 256 [ 757.380016][T11701] rxe_eth0 speed is unknown, defaulting to 1000 [ 758.741668][ T26] audit: type=1326 audit(1794115434.068:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 758.784413][ T26] audit: type=1326 audit(1794115434.068:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 758.909312][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.951081][ T22] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 758.987021][ T26] audit: type=1326 audit(1794115434.068:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.9.1668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce999fb19 code=0x7ffc0000 [ 759.841718][ T22] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 759.948093][ T22] usb 6-1: string descriptor 0 read error: -71 [ 759.954458][ T22] usb 6-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 759.996968][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.040312][ T22] usb 6-1: can't set config #1, error -71 [ 760.107982][ T22] usb 6-1: USB disconnect, device number 2 [ 760.715354][T11733] loop5: detected capacity change from 0 to 1024 [ 760.726129][T11733] journal_path: Lookup failure for './proc' [ 760.732233][T11733] EXT4-fs: error: could not find journal device path [ 761.439889][T11725] loop1: detected capacity change from 0 to 4096 [ 761.545548][T11725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 761.878568][T11745] loop6: detected capacity change from 0 to 512 [ 762.669019][T11745] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 762.677921][T11745] FAT-fs (loop6): Filesystem has been set read-only [ 762.686558][T11745] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 762.695918][T11745] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 762.849586][T11745] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 764.175116][ T9836] EXT4-fs (loop1): unmounting filesystem. [ 766.752669][T11762] loop9: detected capacity change from 0 to 256 [ 769.514619][T11789] loop9: detected capacity change from 0 to 16 [ 769.543792][T11789] erofs: (device loop9): mounted with root inode @ nid 36. [ 769.566466][T11789] erofs: (device loop9): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 769.576751][T11789] syz.9.1690: attempt to access beyond end of device [ 769.576751][T11789] loop9: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 769.598503][T11789] erofs: (device loop9): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 769.608024][T11789] syz.9.1690: attempt to access beyond end of device [ 769.608024][T11789] loop9: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 769.626310][T11789] syz.9.1690: attempt to access beyond end of device [ 769.626310][T11789] loop9: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 769.670003][T11789] syz.9.1690: attempt to access beyond end of device [ 769.670003][T11789] loop9: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 769.686080][T11789] syz.9.1690: attempt to access beyond end of device [ 769.686080][T11789] loop9: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 769.714826][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 769.714863][ T26] audit: type=1800 audit(1794115447.888:169): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1690" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 771.955552][T11800] rxe_eth0 speed is unknown, defaulting to 1000 [ 772.082769][T11801] loop1: detected capacity change from 0 to 512 [ 773.231323][T11801] ext3: Unknown parameter '.' [ 774.277945][T11272] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 774.323713][T11813] usb usb1: usbfs: process 11813 (syz.9.1696) did not claim interface 0 before use [ 774.825314][T11815] loop1: detected capacity change from 0 to 256 [ 775.412922][T11815] rxe_eth0 speed is unknown, defaulting to 1000 [ 778.386227][T11842] loop0: detected capacity change from 0 to 512 [ 779.312393][T11849] usb usb1: usbfs: process 11849 (syz.5.1705) did not claim interface 0 before use [ 781.788456][ T26] audit: type=1326 audit(1794115460.028:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 781.814445][ T26] audit: type=1326 audit(1794115460.028:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 782.276151][T11857] loop0: detected capacity change from 0 to 16 [ 782.284584][T11857] erofs: (device loop0): mounted with root inode @ nid 36. [ 782.402590][ T26] audit: type=1326 audit(1794115460.028:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 782.491123][ T26] audit: type=1326 audit(1794115460.028:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 782.526987][ T26] audit: type=1326 audit(1794115460.028:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 782.638059][ T26] audit: type=1326 audit(1794115460.028:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 782.674552][ T26] audit: type=1326 audit(1794115460.028:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 782.793557][ T26] audit: type=1326 audit(1794115460.028:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 783.087136][ T26] audit: type=1326 audit(1794115460.028:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 783.142203][ T26] audit: type=1326 audit(1794115460.028:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.1708" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 783.646978][T11897] loop0: detected capacity change from 0 to 256 [ 786.266708][T11911] loop1: detected capacity change from 0 to 512 [ 787.248754][T11911] EXT4-fs (loop1): 1 orphan inode deleted [ 787.255484][T11911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 787.265135][T11911] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.277771][ T4821] __quota_error: 40 callbacks suppressed [ 787.277785][ T4821] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 787.393582][ T4821] EXT4-fs error (device loop1): ext4_release_dquot:6884: comm kworker/u4:15: Failed to release dquot type 1 [ 788.155532][T11932] loop5: detected capacity change from 0 to 512 [ 788.226448][T11932] ext3: Unknown parameter '.' [ 788.734368][T11938] rxe_eth0 speed is unknown, defaulting to 1000 [ 791.221642][T11954] loop6: detected capacity change from 0 to 16 [ 791.232419][T11954] erofs: (device loop6): mounted with root inode @ nid 36. [ 792.218591][T11252] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 792.805641][T11966] xt_SECMARK: invalid mode: 2 [ 793.362424][T11965] loop9: detected capacity change from 0 to 512 [ 794.443915][ T9836] EXT4-fs (loop1): unmounting filesystem. [ 795.042665][T11990] loop1: detected capacity change from 0 to 512 [ 795.280583][T11252] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 795.438896][T12002] loop5: detected capacity change from 0 to 16 [ 796.734087][T12002] erofs: (device loop5): mounted with root inode @ nid 36. [ 800.025043][T12030] loop0: detected capacity change from 0 to 1024 [ 800.087485][T12030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 800.165733][T12036] loop6: detected capacity change from 0 to 16 [ 800.190529][T12036] erofs: (device loop6): mounted with root inode @ nid 36. [ 800.592644][T12030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 802.786142][T12073] loop1: detected capacity change from 0 to 1024 [ 802.849908][T12073] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 803.078008][T12073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 803.335364][T12083] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1766'. [ 804.059137][ T26] audit: type=1800 audit(1794115482.298:220): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1764" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 804.338335][ T9836] EXT4-fs (loop1): unmounting filesystem. [ 804.457863][T12108] loop9: detected capacity change from 0 to 512 [ 806.009636][T12116] loop6: detected capacity change from 0 to 16 [ 806.139871][T12116] erofs: (device loop6): mounted with root inode @ nid 36. [ 806.310083][T12134] loop1: detected capacity change from 0 to 16 [ 806.342446][T12134] erofs: (device loop1): mounted with root inode @ nid 36. [ 806.608092][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 807.612665][T12148] loop9: detected capacity change from 0 to 512 [ 808.711385][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.717850][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.804642][T12156] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1780'. [ 810.135041][T12188] rxe_eth0 speed is unknown, defaulting to 1000 [ 811.134765][T12191] loop5: detected capacity change from 0 to 1024 [ 811.728984][T12191] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 812.939669][T12191] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 813.190241][T12209] loop0: detected capacity change from 0 to 16 [ 813.215661][T12209] erofs: (device loop0): mounted with root inode @ nid 36. [ 813.285584][T11209] EXT4-fs (loop5): unmounting filesystem. [ 814.169902][T12223] loop5: detected capacity change from 0 to 512 [ 815.368810][T12240] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1798'. [ 815.417491][T12238] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 815.424080][T12238] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 815.446787][T12244] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 815.453365][T12244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 815.506205][T12249] loop5: detected capacity change from 0 to 512 [ 815.517107][T12244] vhci_hcd vhci_hcd.0: Device attached [ 815.519516][T12238] vhci_hcd vhci_hcd.0: Device attached [ 815.546062][T12249] ext3: Unknown parameter '.' [ 815.818680][T12244] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(13) [ 815.825356][T12244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 815.833766][T12244] vhci_hcd vhci_hcd.0: Device attached [ 815.840154][T12238] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10) [ 815.846838][T12238] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 815.857161][ T4370] vhci_hcd: vhci_device speed not set [ 815.952954][T12262] loop5: detected capacity change from 0 to 256 [ 815.967627][ T4370] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 815.978048][T12238] vhci_hcd vhci_hcd.0: Device attached [ 816.171814][T12262] rxe_eth0 speed is unknown, defaulting to 1000 [ 817.707170][T12244] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17) [ 817.713953][T12244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 817.818668][T12278] loop1: detected capacity change from 0 to 1024 [ 817.983191][T12278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 818.103074][T12244] vhci_hcd vhci_hcd.0: Device attached [ 818.323530][T12252] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(21) [ 818.330213][T12252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 818.422642][T12278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 818.525515][T12252] vhci_hcd vhci_hcd.0: Device attached [ 818.531186][T12238] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 818.537831][T12238] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 818.545944][T12238] vhci_hcd vhci_hcd.0: Device attached [ 818.847070][ T7] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 819.707353][ T26] audit: type=1800 audit(1794115497.838:221): pid=12302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1802" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 819.783418][ T9836] EXT4-fs (loop1): unmounting filesystem. [ 820.064344][ T7] usb 7-1: device descriptor read/all, error -71 [ 820.096607][T12280] vhci_hcd: connection closed [ 820.097111][ T9700] vhci_hcd: stop threads [ 820.106507][T12290] vhci_hcd: connection closed [ 820.106592][T12279] vhci_hcd: connection closed [ 820.112261][T12259] vhci_hcd: connection closed [ 820.112445][T12256] vhci_hcd: connection closed [ 820.122659][T12245] vhci_hcd: connection closed [ 820.128170][ T9700] vhci_hcd: release socket [ 820.371895][ T9700] vhci_hcd: disconnect device [ 820.380303][ T9700] vhci_hcd: stop threads [ 820.386864][ T9700] vhci_hcd: release socket [ 820.394731][ T9700] vhci_hcd: disconnect device [ 820.449946][ T9700] vhci_hcd: stop threads [ 820.463115][ T9700] vhci_hcd: release socket [ 820.480872][ T9700] vhci_hcd: disconnect device [ 820.495535][ T9700] vhci_hcd: stop threads [ 820.501304][T12239] vhci_hcd: connection reset by peer [ 820.520560][ T9700] vhci_hcd: release socket [ 820.750481][ T9700] vhci_hcd: disconnect device [ 820.815932][ T9700] vhci_hcd: stop threads [ 820.834529][ T9700] vhci_hcd: release socket [ 820.924222][ T9700] vhci_hcd: disconnect device [ 820.931526][ T9700] vhci_hcd: stop threads [ 820.936042][ T9700] vhci_hcd: release socket [ 820.987136][ T9700] vhci_hcd: disconnect device [ 821.177387][ T9700] vhci_hcd: stop threads [ 821.181709][ T9700] vhci_hcd: release socket [ 821.250446][ T9700] vhci_hcd: disconnect device [ 821.469131][T12320] loop6: detected capacity change from 0 to 16 [ 821.487039][ T4370] vhci_hcd: vhci_device speed not set [ 821.526506][T12320] erofs: (device loop6): mounted with root inode @ nid 36. [ 821.638294][T12332] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1814'. [ 821.998718][T12342] loop5: detected capacity change from 0 to 512 [ 822.157990][T12344] rxe_eth0 speed is unknown, defaulting to 1000 [ 824.702316][T11252] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 825.534172][T12368] loop0: detected capacity change from 0 to 1024 [ 825.616665][T12368] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 825.728615][ T8296] usb usb46-port1: attempt power cycle [ 825.787912][T12368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 826.912210][ T8296] usb usb46-port1: unable to enumerate USB device [ 826.927873][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 827.032032][T12385] loop1: detected capacity change from 0 to 512 [ 828.728794][T12385] EXT4-fs (loop1): 1 orphan inode deleted [ 828.921121][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 828.943423][T12385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 828.974746][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6884: comm kworker/u4:1: Failed to release dquot type 1 [ 829.054256][T12385] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.117300][T12401] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 829.123885][T12401] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 829.187241][T12401] vhci_hcd vhci_hcd.0: Device attached [ 829.257253][T12408] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 829.263840][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 829.355506][T12408] vhci_hcd vhci_hcd.0: Device attached [ 829.375296][T12416] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1827'. [ 829.388513][ T14] vhci_hcd: vhci_device speed not set [ 829.414356][T12417] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 829.421025][T12417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 829.467292][ T14] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 829.484471][T12417] vhci_hcd vhci_hcd.0: Device attached [ 829.517793][T12401] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(7) [ 829.524376][T12401] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 829.567176][T12401] vhci_hcd vhci_hcd.0: Device attached [ 829.602054][T12408] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 829.608728][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 829.756105][T12432] rxe_eth0 speed is unknown, defaulting to 1000 [ 829.843639][T12408] vhci_hcd vhci_hcd.0: Device attached [ 829.904942][T12401] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(19) [ 829.911620][T12401] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 830.254741][T12401] vhci_hcd vhci_hcd.0: Device attached [ 830.833833][T12408] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 830.840519][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 831.197083][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 831.366567][T12408] vhci_hcd vhci_hcd.0: Device attached [ 831.767008][ T131] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 831.968267][ T131] usb 1-1: not running at top speed; connect to a high speed hub [ 832.042274][ T131] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.113484][ T131] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 832.154399][ T131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.229213][ T131] usb 1-1: Found UVC 1.00 device (046d:0825) [ 832.244447][ T131] usb 1-1: No streaming interface found for terminal 2. [ 833.207711][T12467] loop5: detected capacity change from 0 to 1024 [ 833.247838][T12467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 833.258566][T12435] vhci_hcd: connection closed [ 833.267535][ T9969] vhci_hcd: stop threads [ 833.276571][ T9969] vhci_hcd: release socket [ 833.281727][ T131] usb 1-1: USB disconnect, device number 4 [ 833.291226][T12433] vhci_hcd: connection closed [ 833.291963][T12423] vhci_hcd: connection closed [ 833.296978][T12428] vhci_hcd: connection closed [ 833.298676][T12418] vhci_hcd: connection closed [ 833.357100][ T9969] vhci_hcd: disconnect device [ 833.388504][ T9969] vhci_hcd: stop threads [ 833.392821][ T9969] vhci_hcd: release socket [ 833.398784][T12467] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 833.407674][ T9969] vhci_hcd: disconnect device [ 833.413449][ T9969] vhci_hcd: stop threads [ 833.418192][ T9969] vhci_hcd: release socket [ 833.427329][ T9969] vhci_hcd: disconnect device [ 833.467551][ T9969] vhci_hcd: stop threads [ 833.471865][ T9969] vhci_hcd: release socket [ 833.537952][ T9969] vhci_hcd: disconnect device [ 833.543037][ T9969] vhci_hcd: stop threads [ 833.551741][ T9969] vhci_hcd: release socket [ 833.556681][ T9969] vhci_hcd: disconnect device [ 834.723243][T12475] rxe_eth0 speed is unknown, defaulting to 1000 [ 835.097037][ T26] audit: type=1800 audit(1794115513.198:222): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1832" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 835.278691][T11209] EXT4-fs (loop5): unmounting filesystem. [ 835.515228][ T9836] EXT4-fs (loop1): unmounting filesystem. [ 835.620242][T12484] loop6: detected capacity change from 0 to 4096 [ 835.724060][T12484] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 835.874975][T12409] vhci_hcd: connection closed [ 835.875178][T12403] vhci_hcd: connection reset by peer [ 835.947313][ T9] vhci_hcd: stop threads [ 835.951663][ T9] vhci_hcd: release socket [ 835.997223][ T9] vhci_hcd: disconnect device [ 836.102571][ T9] vhci_hcd: stop threads [ 836.116993][ T9] vhci_hcd: release socket [ 836.228565][ T9] vhci_hcd: disconnect device [ 836.237071][ T14] vhci_hcd: vhci_device speed not set [ 837.253301][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 837.413732][T12506] loop5: detected capacity change from 0 to 512 [ 838.583579][T12517] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1840'. [ 838.981052][T11829] usb usb34-port1: attempt power cycle [ 839.708132][T11829] usb usb34-port1: unable to enumerate USB device [ 839.722368][T12525] loop5: detected capacity change from 0 to 1024 [ 839.784240][T12539] loop0: detected capacity change from 0 to 512 [ 839.851130][T12525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 840.207952][T12525] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 840.994925][T12553] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 841.001514][T12553] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 841.175441][T12553] vhci_hcd vhci_hcd.0: Device attached [ 841.609480][ T4382] vhci_hcd: vhci_device speed not set [ 841.678314][T12560] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 841.684902][T12560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 841.767032][ T4382] usb 45-1: new full-speed USB device number 6 using vhci_hcd [ 841.898984][T12560] vhci_hcd vhci_hcd.0: Device attached [ 841.973611][T11209] EXT4-fs (loop5): unmounting filesystem. [ 841.994586][T12560] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 842.001169][T12560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 842.089392][T12560] vhci_hcd vhci_hcd.0: Device attached [ 842.110856][T12568] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(12) [ 842.117544][T12568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 842.145912][T12553] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(16) [ 842.152587][T12553] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 842.190330][T12576] loop0: detected capacity change from 0 to 512 [ 842.202666][T12568] vhci_hcd vhci_hcd.0: Device attached [ 842.235495][T12553] vhci_hcd vhci_hcd.0: Device attached [ 843.210823][T12560] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(20) [ 843.217544][T12560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 843.729850][T12560] vhci_hcd vhci_hcd.0: Device attached [ 843.842695][T12553] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 843.849374][T12553] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 843.882039][T12553] vhci_hcd vhci_hcd.0: Device attached [ 844.160406][T11829] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 844.359158][T11829] usb 7-1: not running at top speed; connect to a high speed hub [ 844.375768][T11829] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.390262][T12605] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1857'. [ 844.417169][T11829] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 844.436517][T11829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.474202][T11829] usb 7-1: Found UVC 1.00 device (046d:0825) [ 844.527145][T11829] usb 7-1: No streaming interface found for terminal 2. [ 844.674563][T12460] usb 7-1: USB disconnect, device number 4 [ 844.686207][T12582] vhci_hcd: connection closed [ 844.686590][ T48] vhci_hcd: stop threads [ 844.698278][T12587] vhci_hcd: connection closed [ 844.698453][T12574] vhci_hcd: connection closed [ 844.703479][T12569] vhci_hcd: connection closed [ 844.708375][T12564] vhci_hcd: connection closed [ 844.717335][ T48] vhci_hcd: release socket [ 844.789697][ T48] vhci_hcd: disconnect device [ 844.807124][ T48] vhci_hcd: stop threads [ 844.811439][ T48] vhci_hcd: release socket [ 844.860180][T12554] vhci_hcd: connection reset by peer [ 844.947054][T12561] vhci_hcd: connection closed [ 844.953657][ T48] vhci_hcd: disconnect device [ 845.032254][ T48] vhci_hcd: stop threads [ 845.043715][ T48] vhci_hcd: release socket [ 845.081167][ T48] vhci_hcd: disconnect device [ 845.088722][ T48] vhci_hcd: stop threads [ 845.093097][ T48] vhci_hcd: release socket [ 845.108742][ T48] vhci_hcd: disconnect device [ 845.313433][ T48] vhci_hcd: stop threads [ 845.327506][ T48] vhci_hcd: release socket [ 845.757100][ T48] vhci_hcd: disconnect device [ 845.841981][ T48] vhci_hcd: stop threads [ 845.846299][ T48] vhci_hcd: release socket [ 845.917036][ T48] vhci_hcd: disconnect device [ 845.953082][ T48] vhci_hcd: stop threads [ 846.147165][ T48] vhci_hcd: release socket [ 846.166560][T12634] loop6: detected capacity change from 0 to 1024 [ 846.187015][ T48] vhci_hcd: disconnect device [ 846.732966][T12644] usb usb1: usbfs: process 12644 (syz.1.1862) did not claim interface 0 before use [ 846.782161][T12634] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 846.896341][T12647] loop9: detected capacity change from 0 to 16 [ 846.904382][T12647] erofs: (device loop9): mounted with root inode @ nid 36. [ 846.947025][ T4382] vhci_hcd: vhci_device speed not set [ 846.964428][T12634] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 846.987754][T11272] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 847.364588][T12659] loop0: detected capacity change from 0 to 16 [ 847.811679][T12659] erofs: (device loop0): mounted with root inode @ nid 36. [ 848.083215][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 848.449347][ T22] usb usb46-port1: attempt power cycle [ 849.098333][ T22] usb usb46-port1: unable to enumerate USB device [ 849.511213][T12689] usb usb1: usbfs: process 12689 (syz.9.1870) did not claim interface 0 before use [ 850.737938][T12713] rxe_eth0 speed is unknown, defaulting to 1000 [ 853.692008][T12724] loop5: detected capacity change from 0 to 512 [ 857.237736][T12753] loop9: detected capacity change from 0 to 16 [ 857.643088][T12753] erofs: (device loop9): mounted with root inode @ nid 36. [ 857.837501][T12762] usb usb1: usbfs: process 12762 (syz.6.1882) did not claim interface 0 before use [ 859.399946][T12794] loop0: detected capacity change from 0 to 512 [ 859.584142][T12794] ext3: Unknown parameter '.' [ 860.441695][T12800] rxe_eth0 speed is unknown, defaulting to 1000 [ 864.879631][T12814] usb usb1: usbfs: process 12814 (syz.0.1890) did not claim interface 0 before use [ 865.314192][T12816] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 865.320791][T12816] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 865.329751][T12816] vhci_hcd vhci_hcd.0: Device attached [ 865.341306][T12816] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 865.347876][T12816] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 865.355976][T12816] vhci_hcd vhci_hcd.0: Device attached [ 865.462688][T12816] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(10) [ 865.469375][T12816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 865.517395][T12816] vhci_hcd vhci_hcd.0: Device attached [ 865.527019][ T14] vhci_hcd: vhci_device speed not set [ 865.567022][T12826] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(13) [ 865.573710][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 865.596962][ T14] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 865.650187][T12833] loop5: detected capacity change from 0 to 512 [ 865.666781][T12826] vhci_hcd vhci_hcd.0: Device attached [ 865.949560][T12816] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(12) [ 865.956321][T12816] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 866.697693][T12826] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(20) [ 866.704368][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 866.712315][T12826] vhci_hcd vhci_hcd.0: Device attached [ 866.847284][T12831] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(23) [ 866.853964][T12831] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 866.937239][T12816] vhci_hcd vhci_hcd.0: Device attached [ 866.983861][T12831] vhci_hcd vhci_hcd.0: Device attached [ 867.327013][ T8296] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 867.528531][T12853] loop0: detected capacity change from 0 to 16 [ 868.400409][T12853] erofs: (device loop0): mounted with root inode @ nid 36. [ 868.604159][ T8296] usb 10-1: device descriptor read/all, error -71 [ 868.641322][T12840] vhci_hcd: connection closed [ 868.641526][T12837] vhci_hcd: connection closed [ 868.641667][T12822] vhci_hcd: connection closed [ 868.646703][T12835] vhci_hcd: connection closed [ 868.651926][T12827] vhci_hcd: connection closed [ 868.660826][ T9700] vhci_hcd: stop threads [ 868.687001][ T9700] vhci_hcd: release socket [ 868.712512][ T9700] vhci_hcd: disconnect device [ 868.763373][ T9700] vhci_hcd: stop threads [ 868.773021][ T9700] vhci_hcd: release socket [ 868.794627][ T9700] vhci_hcd: disconnect device [ 868.871639][ T9700] vhci_hcd: stop threads [ 869.010655][ T9700] vhci_hcd: release socket [ 869.150247][ T9700] vhci_hcd: disconnect device [ 869.309334][ T9700] vhci_hcd: stop threads [ 869.441699][ T9700] vhci_hcd: release socket [ 869.638737][ T9700] vhci_hcd: disconnect device [ 869.680636][ T9700] vhci_hcd: stop threads [ 869.684958][ T9700] vhci_hcd: release socket [ 869.689537][ T9700] vhci_hcd: disconnect device [ 869.725696][T12819] vhci_hcd: connection closed [ 869.725894][T12817] vhci_hcd: connection reset by peer [ 869.736578][ T9] vhci_hcd: stop threads [ 869.747268][ T9] vhci_hcd: release socket [ 869.776206][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.792364][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.814032][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.823615][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.837457][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 869.844840][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 869.876936][ T9] vhci_hcd: disconnect device [ 869.917273][ T9] vhci_hcd: stop threads [ 869.921626][ T9] vhci_hcd: release socket [ 870.003178][ T9] vhci_hcd: disconnect device [ 870.028295][T12862] rxe_eth0 speed is unknown, defaulting to 1000 [ 870.063934][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.070336][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.897053][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 872.344139][ T14] vhci_hcd: vhci_device speed not set [ 872.653695][T12878] rxe_eth0 speed is unknown, defaulting to 1000 [ 873.782602][T12912] loop5: detected capacity change from 0 to 512 [ 873.887043][T12913] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 874.382548][T12916] loop0: detected capacity change from 0 to 512 [ 875.687082][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 876.733885][T12916] EXT4-fs: failed to create workqueue [ 876.741797][T12916] EXT4-fs (loop0): mount failed [ 877.117816][ T22] usb usb52-port1: attempt power cycle [ 877.407506][T12933] usb usb1: usbfs: process 12933 (syz.5.1908) did not claim interface 0 before use [ 877.800444][ T22] usb usb52-port1: unable to enumerate USB device [ 878.465977][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 878.539965][T12862] chnl_net:caif_netlink_parms(): no params data found [ 878.672946][T12941] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 878.679530][T12941] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 878.706960][T12944] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6) [ 878.713631][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 878.759144][T12941] vhci_hcd vhci_hcd.0: Device attached [ 878.817117][T12944] vhci_hcd vhci_hcd.0: Device attached [ 878.886986][T12944] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(8) [ 878.893573][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 879.005204][T12944] vhci_hcd vhci_hcd.0: Device attached [ 879.021355][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.028894][T12941] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(12) [ 879.035549][T12941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 879.063021][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.075441][T12941] vhci_hcd vhci_hcd.0: Device attached [ 879.107009][ T14] vhci_hcd: vhci_device speed not set [ 879.108684][T12862] device bridge_slave_0 entered promiscuous mode [ 879.113370][T12944] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(16) [ 879.125468][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 879.164544][T12944] vhci_hcd vhci_hcd.0: Device attached [ 879.177247][ T14] usb 51-1: new full-speed USB device number 3 using vhci_hcd [ 879.191408][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.222336][T12941] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(19) [ 879.229005][T12941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 879.236546][T12862] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.275471][T12941] vhci_hcd vhci_hcd.0: Device attached [ 879.292512][T12862] device bridge_slave_1 entered promiscuous mode [ 879.306629][T12944] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(18) [ 879.313294][T12944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 879.380912][T12944] vhci_hcd vhci_hcd.0: Device attached [ 879.466240][T12862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.523923][T12862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.587185][ T4370] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 879.689686][T12862] team0: Port device team_slave_0 added [ 879.788534][ T4370] usb 10-1: not running at top speed; connect to a high speed hub [ 879.840800][ T4370] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.869940][T12862] team0: Port device team_slave_1 added [ 879.922636][ T4370] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 880.017494][ T4370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.132157][ T4370] usb 10-1: Found UVC 1.00 device (046d:0825) [ 880.197026][ T4370] usb 10-1: No streaming interface found for terminal 2. [ 880.284258][T12862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.322407][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.363131][ T4415] usb 10-1: USB disconnect, device number 4 [ 880.370146][T12969] vhci_hcd: connection closed [ 880.370582][ T4841] vhci_hcd: stop threads [ 880.379926][T12966] vhci_hcd: connection closed [ 880.380306][T12963] vhci_hcd: connection closed [ 880.385510][T12961] vhci_hcd: connection closed [ 880.390463][T12955] vhci_hcd: connection closed [ 880.416928][ T4841] vhci_hcd: release socket [ 880.453568][ T4841] vhci_hcd: disconnect device [ 880.491692][T12862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.502657][ T4841] vhci_hcd: stop threads [ 880.509867][ T4841] vhci_hcd: release socket [ 880.528962][ T4841] vhci_hcd: disconnect device [ 880.537270][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 880.543407][ T4841] vhci_hcd: stop threads [ 880.578355][T12945] vhci_hcd: connection closed [ 880.578557][T12942] vhci_hcd: connection reset by peer [ 880.584879][ T4841] vhci_hcd: release socket [ 880.613984][T12862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.629414][T12995] loop0: detected capacity change from 0 to 512 [ 880.634444][ T4841] vhci_hcd: disconnect device [ 880.646998][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.688369][ T4841] vhci_hcd: stop threads [ 880.692703][ T4841] vhci_hcd: release socket [ 880.717022][ T4841] vhci_hcd: disconnect device [ 880.727329][ T4841] vhci_hcd: stop threads [ 880.731657][ T4841] vhci_hcd: release socket [ 881.053256][T12862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.148312][ T4841] vhci_hcd: disconnect device [ 881.300617][ T4841] vhci_hcd: stop threads [ 881.607896][ T4841] vhci_hcd: release socket [ 881.657030][ T4841] vhci_hcd: disconnect device [ 881.697118][ T4841] vhci_hcd: stop threads [ 881.711654][ T4841] vhci_hcd: release socket [ 881.879070][ T4841] vhci_hcd: disconnect device [ 882.834439][T12862] device hsr_slave_0 entered promiscuous mode [ 882.863553][T13010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 882.870137][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 882.933633][T12862] device hsr_slave_1 entered promiscuous mode [ 882.951155][T12862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.412558][T13019] loop9: detected capacity change from 0 to 512 [ 883.650268][T13010] vhci_hcd vhci_hcd.0: Device attached [ 884.251132][T13009] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(3) [ 884.257733][T13009] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 884.333671][T13019] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.1916: iget: bad i_size value: 38620345925642 [ 884.352486][T13019] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.1916: couldn't read orphan inode 15 (err -117) [ 884.374193][T13019] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 884.640098][T12862] Cannot create hsr debugfs directory [ 884.830428][T13009] vhci_hcd vhci_hcd.0: Device attached [ 884.992501][T13009] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 884.999096][T13009] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 885.647522][ T14] vhci_hcd: vhci_device speed not set [ 885.678652][T13009] vhci_hcd vhci_hcd.0: Device attached [ 886.079121][T13030] fuse: Bad value for 'fd' [ 886.159495][T13033] usb usb1: usbfs: process 13033 (syz.5.1917) did not claim interface 0 before use [ 886.575248][T13021] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 886.636996][ T8296] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 886.647213][T13010] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 886.653873][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 886.702494][T13010] vhci_hcd vhci_hcd.0: Device attached [ 886.709728][T12185] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 886.743079][T12185] EXT4-fs (loop9): This should not happen!! Data will be lost [ 886.743079][T12185] [ 886.753033][T13017] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 886.759711][T13017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 886.774959][T12185] EXT4-fs (loop9): Total free blocks count 0 [ 886.781385][T12185] EXT4-fs (loop9): Free/Dirty block details [ 886.795856][T13017] vhci_hcd vhci_hcd.0: Device attached [ 886.804596][T12185] EXT4-fs (loop9): free_blocks=0 [ 886.822016][T12185] EXT4-fs (loop9): dirty_blocks=65 [ 886.827485][T13009] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 886.834142][T13009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 886.849496][T12185] EXT4-fs (loop9): Block reservation details [ 886.855545][T12185] EXT4-fs (loop9): i_reserved_data_blocks=65 [ 886.872996][T13009] vhci_hcd vhci_hcd.0: Device attached [ 886.889321][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 886.915698][T13010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 886.922374][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 886.971030][T13010] vhci_hcd vhci_hcd.0: Device attached [ 887.068603][T13048] usb usb1: usbfs: process 13048 (syz.5.1920) did not claim interface 0 before use [ 887.227106][ T4381] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 887.673634][T13038] vhci_hcd: connection closed [ 887.674024][ T4843] vhci_hcd: stop threads [ 887.684034][T13042] vhci_hcd: connection closed [ 887.684226][T13032] vhci_hcd: connection closed [ 887.684699][T13027] vhci_hcd: connection closed [ 887.694227][T13025] vhci_hcd: connection closed [ 887.709020][ T4843] vhci_hcd: release socket [ 887.736065][ T4843] vhci_hcd: disconnect device [ 887.754987][ T4843] vhci_hcd: stop threads [ 887.764865][ T4843] vhci_hcd: release socket [ 887.772835][ T4843] vhci_hcd: disconnect device [ 887.782749][ T4843] vhci_hcd: stop threads [ 887.801239][T13011] vhci_hcd: connection reset by peer [ 887.809025][T13014] vhci_hcd: connection closed [ 887.895851][ T4843] vhci_hcd: release socket [ 887.958545][ T4843] vhci_hcd: disconnect device [ 888.087400][ T4843] vhci_hcd: stop threads [ 888.106656][ T4843] vhci_hcd: release socket [ 888.145710][ T4843] vhci_hcd: disconnect device [ 888.203979][ T4843] vhci_hcd: stop threads [ 888.298063][ T4843] vhci_hcd: release socket [ 888.349965][ T4843] vhci_hcd: disconnect device [ 888.517740][ T4843] vhci_hcd: stop threads [ 888.627518][ T4843] vhci_hcd: release socket [ 888.667018][ T4843] vhci_hcd: disconnect device [ 888.677608][ T4843] vhci_hcd: stop threads [ 888.681912][ T4843] vhci_hcd: release socket [ 888.717056][ T4843] vhci_hcd: disconnect device [ 888.917958][ T8427] usb usb52-port1: attempt power cycle [ 889.146759][T13063] loop5: detected capacity change from 0 to 16 [ 889.366756][T13063] erofs: (device loop5): mounted with root inode @ nid 36. [ 890.269639][ T8427] usb usb52-port1: unable to enumerate USB device [ 890.419714][T13078] loop9: detected capacity change from 0 to 512 [ 891.155411][T13082] loop5: detected capacity change from 0 to 512 [ 891.495411][T13082] EXT4-fs (loop5): 1 orphan inode deleted [ 891.502310][T13082] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 891.513459][ T4831] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 891.527340][T13082] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.557946][ T4831] EXT4-fs error (device loop5): ext4_release_dquot:6884: comm kworker/u4:20: Failed to release dquot type 1 [ 891.737115][ T8296] vhci_hcd: vhci_device speed not set [ 893.536564][T10158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.706533][T13092] rxe_eth0 speed is unknown, defaulting to 1000 [ 894.190865][T10158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.711446][T13112] loop6: detected capacity change from 0 to 16 [ 895.770110][T13112] erofs: (device loop6): mounted with root inode @ nid 36. [ 895.784986][T10158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.827900][ T4370] usb usb34-port1: attempt power cycle [ 896.301111][T10158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.490174][ T4370] usb usb34-port1: unable to enumerate USB device [ 896.896801][T11209] EXT4-fs (loop5): unmounting filesystem. [ 897.043908][T12862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 897.079778][T12862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 897.118933][T12862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 897.244861][T13132] fuse: Bad value for 'fd' [ 897.323272][T13133] usb usb1: usbfs: process 13133 (syz.9.1938) did not claim interface 0 before use [ 898.530696][T12862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 899.657653][T13146] loop0: detected capacity change from 0 to 512 [ 900.990183][T13158] loop5: detected capacity change from 0 to 512 [ 901.094267][T12862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.249378][T13158] EXT4-fs (loop5): 1 orphan inode deleted [ 901.259523][T13158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 901.284399][T13158] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.642796][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 901.667843][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 901.693237][T13157] loop0: detected capacity change from 0 to 4096 [ 901.701158][T11209] EXT4-fs (loop5): unmounting filesystem. [ 901.721076][T12862] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.806197][T13157] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 902.045188][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 902.076645][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 902.113087][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.120364][ T9972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.155247][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 902.193529][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 902.237643][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.244865][ T9972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.427990][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 902.446493][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 902.460809][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 902.476201][T13175] loop5: detected capacity change from 0 to 16 [ 902.519012][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 902.556545][T13175] erofs: (device loop5): mounted with root inode @ nid 36. [ 902.578180][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.638188][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.685040][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 902.739072][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 902.783759][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 903.057166][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 903.076741][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.128448][T13185] loop6: detected capacity change from 0 to 512 [ 903.234228][T13185] EXT4-fs (loop6): 1 orphan inode deleted [ 903.241164][T13185] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 903.251951][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 903.262596][ T9967] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 903.272592][T13185] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.284637][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.300638][ T9967] EXT4-fs error (device loop6): ext4_release_dquot:6884: comm kworker/u4:9: Failed to release dquot type 1 [ 903.312509][T12862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 905.439675][ T26] audit: type=1326 audit(1794115583.398:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.059841][ T26] audit: type=1326 audit(1794115583.398:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.196974][ T26] audit: type=1326 audit(1794115583.408:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.262729][ T26] audit: type=1326 audit(1794115583.408:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.287018][ T26] audit: type=1326 audit(1794115583.408:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.311664][ T26] audit: type=1326 audit(1794115583.408:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.336181][ T26] audit: type=1326 audit(1794115583.408:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.365965][ T26] audit: type=1326 audit(1794115583.408:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 906.432672][ T26] audit: type=1326 audit(1794115583.418:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.0.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442299fb19 code=0x7ffc0000 [ 907.064386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.196137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.203213][T10158] device hsr_slave_0 left promiscuous mode [ 908.298318][T10158] device hsr_slave_1 left promiscuous mode [ 908.371487][T13240] xt_SECMARK: invalid mode: 2 [ 908.419845][T13239] loop5: detected capacity change from 0 to 512 [ 908.511739][T13239] ext3: Unknown parameter '.' [ 908.552933][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.595197][T10158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.791460][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.930792][T10158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.282798][T10158] device bridge_slave_1 left promiscuous mode [ 909.290210][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.297329][T12913] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 909.512717][T10158] device bridge_slave_0 left promiscuous mode [ 909.564389][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 909.600025][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.323861][T13249] fuse: Bad value for 'fd' [ 911.683933][T13249] usb usb1: usbfs: process 13249 (syz.0.1958) did not claim interface 0 before use [ 911.802699][T10158] device veth1_macvtap left promiscuous mode [ 911.931598][T10158] device veth0_macvtap left promiscuous mode [ 911.943485][T10158] device veth1_vlan left promiscuous mode [ 911.949547][T10158] device veth0_vlan left promiscuous mode [ 912.692507][T10158] team0 (unregistering): Port device team_slave_1 removed [ 912.770644][T10158] team0 (unregistering): Port device team_slave_0 removed [ 912.832807][T10158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.033346][T13258] loop6: detected capacity change from 0 to 512 [ 913.166692][T13258] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 913.175564][T13258] FAT-fs (loop6): Filesystem has been set read-only [ 913.183611][T13258] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 913.192185][T13258] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 913.442390][T13258] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 913.651138][T10158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.623986][T10158] bond0 (unregistering): Released all slaves [ 914.710623][T12862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.741183][T13247] rxe_eth0 speed is unknown, defaulting to 1000 [ 915.453893][T13264] loop5: detected capacity change from 0 to 512 [ 915.517962][T13264] ext3: Unknown parameter '.' [ 916.111016][T13276] rxe_eth0 speed is unknown, defaulting to 1000 [ 919.263605][T13292] loop5: detected capacity change from 0 to 16 [ 919.335987][T13294] fuse: Bad value for 'fd' [ 919.353883][T13294] usb usb1: usbfs: process 13294 (syz.0.1967) did not claim interface 0 before use [ 920.122959][T13292] erofs: (device loop5): mounted with root inode @ nid 36. [ 920.568164][T13305] loop6: detected capacity change from 0 to 512 [ 920.702315][T13305] EXT4-fs (loop6): 1 orphan inode deleted [ 920.709978][T13305] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 920.720206][ T9972] __quota_error: 65 callbacks suppressed [ 920.720220][ T9972] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 920.727460][T13305] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.750114][ T9972] EXT4-fs error (device loop6): ext4_release_dquot:6884: comm kworker/u4:26: Failed to release dquot type 1 [ 921.331204][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 921.340969][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 921.428961][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 921.452367][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 921.487620][T12862] device veth0_vlan entered promiscuous mode [ 921.555039][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 921.565648][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 921.612731][T12862] device veth1_vlan entered promiscuous mode [ 921.699371][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 921.730948][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 921.761369][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 921.791834][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 921.839769][T12862] device veth0_macvtap entered promiscuous mode [ 921.864614][T12862] device veth1_macvtap entered promiscuous mode [ 921.980737][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.045137][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.093637][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.147168][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.176975][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.217770][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.297343][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.356928][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.408386][T12862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.418394][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 922.452703][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 922.481747][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 922.547456][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 922.631589][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.669646][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.707016][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.738082][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.782281][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.837762][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.202646][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.422052][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.880407][T12862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.961612][T12862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.017058][T12862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.072522][T12862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.119925][T12862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.156260][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 924.392482][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.432240][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.503294][ T4843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.535252][ T4843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.734100][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 924.754279][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 924.797554][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 924.847590][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 924.963237][T13342] loop5: detected capacity change from 0 to 512 [ 924.976457][T13346] loop0: detected capacity change from 0 to 512 [ 925.079714][T13346] ext3: Unknown parameter '.' [ 925.996827][T13353] rxe_eth0 speed is unknown, defaulting to 1000 [ 927.357568][T13351] usb usb1: usbfs: process 13351 (syz.6.1971) did not claim interface 0 before use [ 928.321102][T13361] fuse: Bad value for 'fd' [ 928.335850][T13361] usb usb1: usbfs: process 13361 (syz.5.1975) did not claim interface 0 before use [ 929.102462][T13367] rxe_eth0 speed is unknown, defaulting to 1000 [ 930.624607][T13376] loop0: detected capacity change from 0 to 512 [ 930.984995][T13376] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 930.993900][T13376] FAT-fs (loop0): Filesystem has been set read-only [ 931.001839][T13376] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 931.010379][T13376] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 931.241841][T13376] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 931.501403][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.510008][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.746265][T13378] loop9: detected capacity change from 0 to 512 [ 933.605944][T13383] loop9: detected capacity change from 0 to 512 [ 933.745813][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.756689][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.765113][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.864668][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.911100][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 933.925868][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 934.948854][T13399] loop0: detected capacity change from 0 to 512 [ 935.488546][T13386] rxe_eth0 speed is unknown, defaulting to 1000 [ 935.699169][T13399] EXT4-fs (loop0): 1 orphan inode deleted [ 935.705854][T13399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 935.715105][T13399] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.725843][ T4811] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 935.767482][ T4811] EXT4-fs error (device loop0): ext4_release_dquot:6884: comm kworker/u4:12: Failed to release dquot type 1 [ 936.029638][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 936.057241][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 936.690458][T13409] usb usb1: usbfs: process 13409 (syz.9.1987) did not claim interface 0 before use [ 937.970306][T13420] loop0: detected capacity change from 0 to 512 [ 939.715980][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 941.032669][T13415] loop9: detected capacity change from 0 to 4096 [ 942.295862][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 943.115351][T13444] loop6: detected capacity change from 0 to 512 [ 943.348588][T13386] chnl_net:caif_netlink_parms(): no params data found [ 943.453802][T13450] loop5: detected capacity change from 0 to 1024 [ 943.511979][T13447] usb usb1: usbfs: process 13447 (syz.0.1997) did not claim interface 0 before use [ 943.563760][T13450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 943.748796][T12913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 943.811035][T13450] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 944.387299][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 945.041487][ T4832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.688273][T13471] loop6: detected capacity change from 0 to 512 [ 945.712808][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.810900][T13471] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 945.819791][T13471] FAT-fs (loop6): Filesystem has been set read-only [ 945.826663][T13471] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 945.835068][T13471] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 945.893932][T13471] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 945.949272][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.996744][T13386] device bridge_slave_0 entered promiscuous mode [ 946.021223][T11209] EXT4-fs (loop5): unmounting filesystem. [ 946.080722][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.140666][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.210438][T13386] device bridge_slave_1 entered promiscuous mode [ 946.364982][T13386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.473964][T13386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.686939][T13386] team0: Port device team_slave_0 added [ 946.727989][T13386] team0: Port device team_slave_1 added [ 946.920469][ T4832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.235060][ T4832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.324280][T13386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.346872][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.754758][T13386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.120880][ T4832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.157896][T13386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.165020][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.482062][T13386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.282374][T13509] loop0: detected capacity change from 0 to 512 [ 951.324343][T13386] device hsr_slave_0 entered promiscuous mode [ 951.363509][T13509] ext3: Unknown parameter '.' [ 952.647505][T13386] device hsr_slave_1 entered promiscuous mode [ 953.549774][T13528] loop0: detected capacity change from 0 to 256 [ 954.573874][T13534] loop6: detected capacity change from 0 to 512 [ 955.151547][T13386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.153001][T13537] usb usb1: usbfs: process 13537 (syz.5.2010) did not claim interface 0 before use [ 955.206549][T13386] Cannot create hsr debugfs directory [ 955.896299][T13528] rxe_eth0 speed is unknown, defaulting to 1000 [ 956.392907][T13546] loop5: detected capacity change from 0 to 16 [ 956.469188][T13546] erofs: (device loop5): mounted with root inode @ nid 36. [ 958.372945][T13386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 958.547644][T13386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 958.671100][T13386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 958.690799][T13568] usb usb1: usbfs: process 13568 (syz.0.2015) did not claim interface 0 before use [ 958.691064][T13386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 959.264903][T13386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.540344][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 959.584398][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 959.645024][T13386] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.881447][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 959.908947][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 959.935716][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.942984][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.986193][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 960.015717][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 960.267630][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.274842][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.312893][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 960.343531][T13587] loop9: detected capacity change from 0 to 512 [ 960.377873][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 960.388042][T13587] ext3: Unknown parameter '.' [ 960.417626][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 960.584032][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 960.623928][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 960.692157][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 960.732339][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 960.828296][T13589] loop9: detected capacity change from 0 to 256 [ 961.984531][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 963.310667][T13386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 963.399436][T13386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.638513][ T4832] device hsr_slave_0 left promiscuous mode [ 963.753311][ T4832] device hsr_slave_1 left promiscuous mode [ 963.767544][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.813391][ T4832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.916725][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.985360][ T4832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.117749][ T4832] device bridge_slave_1 left promiscuous mode [ 964.124037][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.188076][ T4832] device bridge_slave_0 left promiscuous mode [ 964.225502][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.160927][ T4832] device veth1_macvtap left promiscuous mode [ 965.187780][ T4832] device veth0_macvtap left promiscuous mode [ 965.193952][ T4832] device veth1_vlan left promiscuous mode [ 965.247256][ T4832] device veth0_vlan left promiscuous mode [ 965.269911][T13612] loop5: detected capacity change from 0 to 512 [ 968.030913][T13621] loop5: detected capacity change from 0 to 512 [ 968.043478][T13621] ext3: Unknown parameter '.' [ 968.430931][T13623] loop5: detected capacity change from 0 to 256 [ 969.761584][ T4832] team0 (unregistering): Port device team_slave_1 removed [ 969.808947][ T4832] team0 (unregistering): Port device team_slave_0 removed [ 969.874439][ T4832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.948058][ T4832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.460707][ T4832] bond0 (unregistering): Released all slaves [ 970.516407][T13589] rxe_eth0 speed is unknown, defaulting to 1000 [ 970.757576][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 970.766203][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 970.794060][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 970.803032][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 970.821562][T13614] rxe_eth0 speed is unknown, defaulting to 1000 [ 970.915399][T13623] rxe_eth0 speed is unknown, defaulting to 1000 [ 971.152870][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 971.788034][T13643] loop5: detected capacity change from 0 to 512 [ 972.515922][T13644] loop6: detected capacity change from 0 to 512 [ 973.734546][T13644] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.2025: iget: bad i_size value: 38620345925642 [ 973.751145][T13644] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2025: couldn't read orphan inode 15 (err -117) [ 973.767710][T13643] EXT4-fs (loop5): 1 orphan inode deleted [ 973.774387][T13643] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 973.863300][T13644] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 973.905946][T13643] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.217063][T13648] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 975.015228][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 975.031614][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 975.072988][T13386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.230557][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 975.231247][T11209] EXT4-fs (loop5): unmounting filesystem. [ 975.450463][T13669] loop6: detected capacity change from 0 to 1024 [ 975.479115][T13671] usb usb1: usbfs: process 13671 (syz.5.2029) did not claim interface 0 before use [ 975.664245][T13673] usb usb1: usbfs: process 13673 (syz.0.2032) did not claim interface 0 before use [ 975.973240][T13669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 976.472693][T13669] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 976.721046][T13681] loop0: detected capacity change from 0 to 512 [ 977.963944][ T26] audit: type=1800 audit(1794115656.148:297): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2031" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 978.029629][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 979.388703][T13708] loop0: detected capacity change from 0 to 256 [ 979.416323][T13708] exfat: Deprecated parameter 'utf8' [ 979.477558][T13708] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x8119abd0) [ 979.527394][T13708] exFAT-fs (loop0): invalid boot region [ 979.533053][T13708] exFAT-fs (loop0): failed to recognize exfat type [ 979.781684][T13708] loop0: detected capacity change from 0 to 512 [ 979.846679][T13708] EXT4-fs: Ignoring removed nobh option [ 979.983014][T13708] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2039: invalid indirect mapped block 256 (level 2) [ 980.090656][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 980.121082][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 980.153101][T13708] EXT4-fs (loop0): 2 truncates cleaned up [ 980.194592][T13708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 980.211208][T13386] device veth0_vlan entered promiscuous mode [ 980.255689][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 980.279295][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 980.349765][T13386] device veth1_vlan entered promiscuous mode [ 980.395266][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 980.407774][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 980.446453][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 980.563876][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 980.757909][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 981.499670][T13707] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2039: bg 0: block 5: invalid block bitmap [ 981.516955][T13707] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 981.530143][T13707] EXT4-fs (loop0): This should not happen!! Data will be lost [ 981.530143][T13707] [ 981.539950][T13707] EXT4-fs (loop0): Total free blocks count 0 [ 981.545967][T13707] EXT4-fs (loop0): Free/Dirty block details [ 981.552108][T13707] EXT4-fs (loop0): free_blocks=0 [ 981.557142][T13707] EXT4-fs (loop0): dirty_blocks=33 [ 981.562294][T13707] EXT4-fs (loop0): Block reservation details [ 981.568390][T13707] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 981.689579][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 981.733130][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 981.744210][T13386] device veth0_macvtap entered promiscuous mode [ 981.927508][T13725] usb usb1: usbfs: process 13725 (syz.9.2042) did not claim interface 0 before use [ 982.730302][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 982.751128][T13386] device veth1_macvtap entered promiscuous mode [ 982.864636][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.917387][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.984630][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.995667][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.005664][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.030218][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.072806][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.192722][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.223514][T13386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.388336][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.720204][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.730779][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.741339][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.759955][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.691765][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.857218][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.878985][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.905625][T13386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.046360][T13386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.172653][T13386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.516135][T13760] loop6: detected capacity change from 0 to 512 [ 987.054666][T13386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.156686][T13386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.172049][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 987.213974][T13760] EXT4-fs (loop6): 1 orphan inode deleted [ 987.221706][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 987.231975][T13760] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 987.241321][ T4825] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 987.244140][T13760] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.288777][ T4825] EXT4-fs error (device loop6): ext4_release_dquot:6884: comm kworker/u4:17: Failed to release dquot type 1 [ 987.305059][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 987.346394][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.473441][T13770] loop9: detected capacity change from 0 to 512 [ 987.493819][T13770] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2043: iget: bad i_size value: 38620345925642 [ 987.507454][T13770] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2043: couldn't read orphan inode 15 (err -117) [ 987.588398][T13770] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 987.660564][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 987.854649][T13778] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2048'. [ 987.897413][T13778] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2048'. [ 987.935177][T13778] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2048'. [ 987.989078][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 988.007457][T13781] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2048'. [ 990.302554][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 990.322124][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 990.330633][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 990.348511][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 990.369596][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 990.383375][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.629527][T13809] usb usb1: usbfs: process 13809 (syz.5.2052) did not claim interface 0 before use [ 990.660137][ T4379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.734278][T13805] rxe_eth0 speed is unknown, defaulting to 1000 [ 990.804610][ T4379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.931457][T13814] loop0: detected capacity change from 0 to 512 [ 991.204935][T13814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 991.213915][T13814] FAT-fs (loop0): Filesystem has been set read-only [ 991.222078][T13814] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 991.230670][T13814] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 991.470810][T13814] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 991.973609][ T4379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.727524][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 993.186564][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.222168][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.663763][ T4379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.778584][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 995.336405][T13830] loop6: detected capacity change from 0 to 4096 [ 995.429738][T13805] chnl_net:caif_netlink_parms(): no params data found [ 995.473351][T13830] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 995.497324][T13843] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2060'. [ 995.517693][T13843] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2060'. [ 995.528463][T13843] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2060'. [ 995.538341][T13843] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2060'. [ 995.631465][T13846] loop9: detected capacity change from 0 to 16 [ 995.648068][T13846] erofs: (device loop9): mounted with root inode @ nid 36. [ 996.889678][T13864] usb usb1: usbfs: process 13864 (syz.0.2063) did not claim interface 0 before use [ 996.996673][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 997.176956][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 997.229543][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.266322][T13805] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.305172][T13805] device bridge_slave_0 entered promiscuous mode [ 998.722187][T13805] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.731266][T13805] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.739845][T13805] device bridge_slave_1 entered promiscuous mode [ 999.627760][T13892] loop0: detected capacity change from 0 to 512 [ 999.730022][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 1000.836094][T13892] EXT4-fs (loop0): 1 orphan inode deleted [ 1000.843059][T13892] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1000.857890][T13892] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.343761][T13805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.372220][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 1001.731231][T13805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.806635][T13805] team0: Port device team_slave_0 added [ 1002.182582][T13805] team0: Port device team_slave_1 added [ 1002.340739][T13913] loop5: detected capacity change from 0 to 512 [ 1003.060876][T13913] EXT4-fs (loop5): 1 orphan inode deleted [ 1003.067680][T13913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1003.081484][T13918] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2071'. [ 1003.097081][ T4832] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1003.316585][T13913] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.495259][ T4832] EXT4-fs error (device loop5): ext4_release_dquot:6884: comm kworker/u4:21: Failed to release dquot type 1 [ 1004.413067][T13918] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2071'. [ 1004.432036][T11209] EXT4-fs (loop5): unmounting filesystem. [ 1004.524158][T13921] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2071'. [ 1004.565835][T13805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.604462][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.727890][T13805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.917615][T13805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.947899][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.364918][T13931] loop5: detected capacity change from 0 to 16 [ 1006.436175][T13931] erofs: (device loop5): mounted with root inode @ nid 36. [ 1006.454969][T13931] fuse: Bad value for 'fd' [ 1007.007358][T13805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.404820][T13944] usb usb1: usbfs: process 13944 (syz.0.2074) did not claim interface 0 before use [ 1007.450075][T13943] loop9: detected capacity change from 0 to 512 [ 1007.513353][T13943] ext3: Unknown parameter '.' [ 1007.718402][T13805] device hsr_slave_0 entered promiscuous mode [ 1007.777039][T13805] device hsr_slave_1 entered promiscuous mode [ 1007.904099][T13805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1008.109853][T13805] Cannot create hsr debugfs directory [ 1008.336640][T13939] rxe_eth0 speed is unknown, defaulting to 1000 [ 1011.887288][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2082'. [ 1011.931518][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2082'. [ 1011.947410][T13980] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2082'. [ 1012.807181][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2082'. [ 1013.412533][T13991] loop0: detected capacity change from 0 to 16 [ 1013.425488][T13991] erofs: (device loop0): mounted with root inode @ nid 36. [ 1013.619241][T13991] fuse: Bad value for 'fd' [ 1014.642195][T14000] loop0: detected capacity change from 0 to 512 [ 1014.665007][ T4379] device hsr_slave_0 left promiscuous mode [ 1014.677701][ T4379] device hsr_slave_1 left promiscuous mode [ 1014.783614][T14002] loop9: detected capacity change from 0 to 512 [ 1016.097171][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.104641][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.135711][T14002] EXT4-fs (loop9): 1 orphan inode deleted [ 1016.142611][T14002] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1016.152271][T14002] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.207594][ T9969] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1016.248749][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.261655][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.335915][ T9969] EXT4-fs error (device loop9): ext4_release_dquot:6884: comm kworker/u4:19: Failed to release dquot type 1 [ 1016.377971][ T4379] device bridge_slave_1 left promiscuous mode [ 1016.384258][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.480337][ T4379] device bridge_slave_0 left promiscuous mode [ 1016.486661][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.697778][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1016.907218][ T4379] device veth1_macvtap left promiscuous mode [ 1016.913328][ T4379] device veth0_macvtap left promiscuous mode [ 1016.930263][ T4379] device veth1_vlan left promiscuous mode [ 1016.936160][ T4379] device veth0_vlan left promiscuous mode [ 1019.366493][ T26] audit: type=1326 audit(1794115697.608:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1019.784664][ T26] audit: type=1326 audit(1794115697.608:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1019.832651][ T26] audit: type=1326 audit(1794115697.608:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1019.925232][ T26] audit: type=1326 audit(1794115697.608:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1020.558536][ T26] audit: type=1326 audit(1794115697.608:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1021.142041][ T26] audit: type=1326 audit(1794115697.608:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1021.336884][ T26] audit: type=1326 audit(1794115697.608:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1021.476868][ T26] audit: type=1326 audit(1794115697.608:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1021.616937][ T26] audit: type=1326 audit(1794115697.608:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1021.717828][ T26] audit: type=1326 audit(1794115697.608:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1021.742636][ T26] audit: type=1326 audit(1794115697.608:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1021.913190][ T26] audit: type=1326 audit(1794115697.608:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1022.025558][ T26] audit: type=1326 audit(1794115697.608:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1022.133800][ T26] audit: type=1326 audit(1794115697.608:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1022.222811][ T26] audit: type=1326 audit(1794115697.608:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1022.422077][ T26] audit: type=1326 audit(1794115697.608:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.2090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9fb19 code=0x7ffc0000 [ 1022.545284][T14034] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2094'. [ 1023.941675][T14044] xt_SECMARK: invalid mode: 2 [ 1024.693052][ T4379] team0 (unregistering): Port device team_slave_1 removed [ 1024.749796][ T4379] team0 (unregistering): Port device team_slave_0 removed [ 1024.800718][T14048] loop5: detected capacity change from 0 to 16 [ 1024.821334][T14048] erofs: (device loop5): mounted with root inode @ nid 36. [ 1024.944377][T14048] fuse: Bad value for 'fd' [ 1025.084144][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.501377][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.974548][ T4379] bond0 (unregistering): Released all slaves [ 1026.137969][T14034] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2094'. [ 1026.259458][T13805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1026.326670][T14055] loop6: detected capacity change from 0 to 512 [ 1026.354863][T13805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1026.378215][T13805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1026.398318][T13805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1026.437848][T14055] ext3: Unknown parameter '.' [ 1027.006344][T14061] loop6: detected capacity change from 0 to 256 [ 1027.308505][T14061] rxe_eth0 speed is unknown, defaulting to 1000 [ 1029.758112][T14069] loop0: detected capacity change from 0 to 512 [ 1030.243931][T13805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.834439][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1030.878392][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1030.951475][T13805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.032633][ T9973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.058556][ T9973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.067878][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.075058][ T9973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.083450][ T9973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1031.631797][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1032.266955][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1032.529574][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.536861][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.721182][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.731336][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1035.242876][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1035.256610][T14102] loop9: detected capacity change from 0 to 16 [ 1035.270979][T14102] erofs: (device loop9): mounted with root inode @ nid 36. [ 1035.364225][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1035.428610][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1035.467129][T14107] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2109'. [ 1035.497822][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1035.660236][T14107] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2109'. [ 1035.725902][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1035.751247][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1035.821457][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1035.871997][T14110] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2109'. [ 1035.906723][T13805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.212311][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1036.241641][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1036.358524][T14119] loop9: detected capacity change from 0 to 512 [ 1036.524766][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1036.648354][T14119] EXT4-fs (loop9): 1 orphan inode deleted [ 1036.658455][T14119] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1036.670435][ T4825] __quota_error: 45 callbacks suppressed [ 1036.670473][ T4825] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1036.688802][T14119] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.845434][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2109'. [ 1037.045783][T14125] loop5: detected capacity change from 0 to 512 [ 1037.067494][ T4825] EXT4-fs error (device loop9): ext4_release_dquot:6884: comm kworker/u4:17: Failed to release dquot type 1 [ 1037.149425][T13974] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1037.365746][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1037.884350][T14137] usb usb1: usbfs: process 14137 (syz.6.2113) did not claim interface 0 before use [ 1038.209201][T14141] loop9: detected capacity change from 0 to 512 [ 1038.341277][T14071] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1039.797070][T14154] xt_SECMARK: invalid mode: 2 [ 1040.537652][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1040.545176][T12185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1040.625756][T13805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.172905][T14181] loop6: detected capacity change from 0 to 16 [ 1044.244986][T14181] erofs: (device loop6): mounted with root inode @ nid 36. [ 1046.747215][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2123'. [ 1047.439704][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2123'. [ 1047.609147][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2123'. [ 1047.704143][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2123'. [ 1047.934238][T14208] usb usb1: usbfs: process 14208 (syz.0.2125) did not claim interface 0 before use [ 1048.172624][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1048.209491][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1048.406906][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1048.469394][T14213] loop6: detected capacity change from 0 to 512 [ 1048.487448][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1048.501292][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1048.534529][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.151022][T14224] loop6: detected capacity change from 0 to 16 [ 1051.161720][T14224] erofs: (device loop6): mounted with root inode @ nid 36. [ 1051.724702][T14232] loop9: detected capacity change from 0 to 512 [ 1052.630425][T14232] EXT4-fs (loop9): 1 orphan inode deleted [ 1052.637359][T14232] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1052.649036][T14232] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.708191][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2139'. [ 1053.200681][T14245] loop5: detected capacity change from 0 to 512 [ 1054.117078][T14245] EXT4-fs (loop5): 1 orphan inode deleted [ 1054.124600][T14245] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1054.137134][T14245] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.270233][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1054.467382][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.473842][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.831087][T14256] loop9: detected capacity change from 0 to 512 [ 1056.320200][T11209] EXT4-fs (loop5): unmounting filesystem. [ 1056.342591][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.353059][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.361129][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.373660][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.384552][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1056.395104][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1057.871254][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1057.927116][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1057.978844][T14279] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1057.997506][T14281] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1058.008350][T14282] loop0: detected capacity change from 0 to 512 [ 1058.031381][T14282] ext3: Unknown parameter '.' [ 1058.044906][T14261] rxe_eth0 speed is unknown, defaulting to 1000 [ 1058.132264][T14185] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1059.717605][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1060.763740][T14291] loop0: detected capacity change from 0 to 256 [ 1061.736965][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1063.541133][T14309] loop6: detected capacity change from 0 to 512 [ 1063.859736][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 1064.863640][T14324] usb usb1: usbfs: process 14324 (syz.0.2146) did not claim interface 0 before use [ 1064.894716][T14261] chnl_net:caif_netlink_parms(): no params data found [ 1065.554879][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.572044][T14261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.582937][T14261] device bridge_slave_0 entered promiscuous mode [ 1065.659211][T14261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.666475][T14261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.727037][T14261] device bridge_slave_1 entered promiscuous mode [ 1065.883173][T14334] loop0: detected capacity change from 0 to 512 [ 1065.922637][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 1065.943830][T14334] ext3: Unknown parameter '.' [ 1066.072569][T14261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.741064][T14339] loop0: detected capacity change from 0 to 256 [ 1067.754766][T14261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.309235][T14261] team0: Port device team_slave_0 added [ 1070.406372][T14344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2150'. [ 1070.526577][T14261] team0: Port device team_slave_1 added [ 1070.593095][T14344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2150'. [ 1070.757153][T14345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2150'. [ 1070.828811][T14261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.838375][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.985046][T14261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.110706][T14346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2150'. [ 1071.136666][T14261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.153075][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.255616][T14351] loop6: detected capacity change from 0 to 512 [ 1071.290124][T14261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.406046][T14261] device hsr_slave_0 entered promiscuous mode [ 1072.447374][T14261] device hsr_slave_1 entered promiscuous mode [ 1072.465839][T14261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.502683][T14261] Cannot create hsr debugfs directory [ 1072.523722][T14365] loop6: detected capacity change from 0 to 512 [ 1073.715067][T14382] usb usb1: usbfs: process 14382 (syz.5.2157) did not claim interface 0 before use [ 1073.776272][T14379] loop0: detected capacity change from 0 to 1024 [ 1074.118137][T14379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1074.587182][T14379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1074.601049][ T9971] device hsr_slave_0 left promiscuous mode [ 1074.612840][ T9971] device hsr_slave_1 left promiscuous mode [ 1074.623245][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.642708][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.904139][ T9971] device bridge_slave_1 left promiscuous mode [ 1074.926992][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.509012][ T9971] device bridge_slave_0 left promiscuous mode [ 1076.517466][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.733574][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 1077.571843][T14399] loop9: detected capacity change from 0 to 512 [ 1077.705255][T14399] EXT4-fs (loop9): 1 orphan inode deleted [ 1077.712487][T14399] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1077.728149][T14399] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.752967][T14399] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2159'. [ 1078.153257][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1078.961696][T14415] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2162'. [ 1079.300430][T14409] loop5: detected capacity change from 0 to 40427 [ 1079.324818][T14409] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1079.334059][T14409] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1079.352548][T14409] F2FS-fs (loop5): invalid crc value [ 1079.392967][T14409] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1079.449138][ T9971] team0 (unregistering): Port device team_slave_1 removed [ 1079.542260][T14409] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1079.554406][ T9971] team0 (unregistering): Port device team_slave_0 removed [ 1079.556355][T14409] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1079.642445][ T9971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.679802][T14409] F2FS-fs (loop5): Inconsistent error blkaddr:5663, sit bitmap:0 [ 1079.706431][T14409] CPU: 1 PID: 14409 Comm: syz.5.2161 Not tainted syzkaller #0 [ 1079.713970][T14409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1079.724081][T14409] Call Trace: [ 1079.727403][T14409] [ 1079.730370][T14409] dump_stack_lvl+0x188/0x24e [ 1079.735125][T14409] ? show_regs_print_info+0x12/0x12 [ 1079.740471][T14409] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 1079.746342][T14409] ? unwind_next_frame+0x1719/0x1fd0 [ 1079.751693][T14409] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 1079.757138][T14409] f2fs_map_blocks+0xba8/0x36a0 [ 1079.762071][T14409] ? unwind_get_return_address+0x49/0x80 [ 1079.767797][T14409] ? f2fs_get_block+0x140/0x140 [ 1079.772709][T14409] ? xa_load+0x60/0x2e0 [ 1079.776920][T14409] ? xa_load+0x2b3/0x2e0 [ 1079.781227][T14409] ? xa_load+0x60/0x2e0 [ 1079.785449][T14409] ? page_index+0xe6/0x490 [ 1079.789915][T14409] f2fs_mpage_readpages+0xa40/0x2830 [ 1079.795283][T14409] ? dquot_release_reservation_block+0xa0/0xa0 [ 1079.801588][T14409] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1079.806891][T14409] ? f2fs_readahead+0x180/0x380 [ 1079.811788][T14409] ? blk_start_plug+0x94/0x110 [ 1079.816620][T14409] read_pages+0x187/0x860 [ 1079.821007][T14409] ? __lock_acquire+0x7ea0/0x7ea0 [ 1079.826098][T14409] ? folio_memcg_rcu+0x220/0x220 [ 1079.831093][T14409] ? folio_add_lru+0xcf0/0xcf0 [ 1079.835935][T14409] ? page_cache_ra_unbounded+0x750/0x750 [ 1079.841627][T14409] ? folio_batch_add_and_move+0x14a/0x250 [ 1079.847446][T14409] ? folio_add_lru+0x508/0xcf0 [ 1079.852273][T14409] ? filemap_add_folio+0x186/0x3d0 [ 1079.857447][T14409] page_cache_ra_unbounded+0x667/0x750 [ 1079.862992][T14409] force_page_cache_ra+0x2c4/0x320 [ 1079.868166][T14409] generic_fadvise+0x46c/0x700 [ 1079.873057][T14409] ? dump_task+0x640/0x640 [ 1079.877519][T14409] ? __fget_files+0x28/0x460 [ 1079.882133][T14409] ? __fdget+0x17c/0x200 [ 1079.886419][T14409] __x64_sys_fadvise64+0x139/0x180 [ 1079.891548][T14409] do_syscall_64+0x4c/0xa0 [ 1079.896021][T14409] ? clear_bhb_loop+0x60/0xb0 [ 1079.900720][T14409] ? clear_bhb_loop+0x60/0xb0 [ 1079.905425][T14409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.911341][T14409] RIP: 0033:0x7f1a4799fb19 [ 1079.915780][T14409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.935404][T14409] RSP: 002b:00007f1a4889b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 1079.943831][T14409] RAX: ffffffffffffffda RBX: 00007f1a47c25fa0 RCX: 00007f1a4799fb19 [ 1079.951842][T14409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1079.959855][T14409] RBP: 00007f1a47a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1079.967842][T14409] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1079.975829][T14409] R13: 00007f1a47c26038 R14: 00007f1a47c25fa0 R15: 00007ffda99f4ab8 [ 1079.983832][T14409] [ 1080.015159][ T9971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.174054][ T9972] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1080.199339][ T9972] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1080.454944][ T9971] bond0 (unregistering): Released all slaves [ 1080.551692][T14415] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2162'. [ 1082.560550][T14438] loop6: detected capacity change from 0 to 512 [ 1082.911218][T14438] EXT4-fs (loop6): 1 orphan inode deleted [ 1082.918660][T14438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1082.928505][T14438] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.320718][T14448] loop0: detected capacity change from 0 to 512 [ 1083.355789][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 1083.455067][T14448] EXT4-fs (loop0): 1 orphan inode deleted [ 1083.462384][T14448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1083.472537][T14448] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.498510][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2165'. [ 1083.586424][T14455] usb usb1: usbfs: process 14455 (syz.9.2167) did not claim interface 0 before use [ 1084.276623][T14459] loop5: detected capacity change from 0 to 1024 [ 1084.411573][T14459] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1085.288652][T14459] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1085.412922][T14467] loop9: detected capacity change from 0 to 1024 [ 1085.715003][T14467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1086.423701][ T26] audit: type=1800 audit(1794115764.568:359): pid=14470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2169" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1086.479399][T11209] EXT4-fs (loop5): unmounting filesystem. [ 1086.574770][T14467] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1086.993969][T14261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1087.008942][T14261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1087.037096][T14261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1087.063136][T14479] loop5: detected capacity change from 0 to 512 [ 1087.087945][T14261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1087.110826][T14479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1087.119740][T14479] FAT-fs (loop5): Filesystem has been set read-only [ 1087.127105][T14479] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1087.135708][T14479] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1087.200783][T14479] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1087.564329][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1087.713490][T14261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.769794][T14487] loop9: detected capacity change from 0 to 512 [ 1087.782208][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1087.821396][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1087.919037][T14261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.720444][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1090.745318][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1090.773846][T14499] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2175'. [ 1090.791622][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.798867][ T9967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.824451][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1090.855066][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1092.007355][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.014546][ T9967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.074226][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1092.135118][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1092.163882][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1092.203748][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1092.260423][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1092.297984][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1092.350348][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1092.366368][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1092.723291][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 1092.737242][T14499] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2175'. [ 1092.804238][T14261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1092.845254][T14261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.105718][T14518] loop9: detected capacity change from 0 to 512 [ 1093.252621][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1093.280769][T14185] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1093.312403][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1093.341621][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1093.764406][T14523] loop6: detected capacity change from 0 to 512 [ 1094.230123][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1094.280991][T14523] EXT4-fs (loop6): 1 orphan inode deleted [ 1094.287815][T14523] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1094.297382][T14523] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.506420][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1094.858117][T14544] usb usb1: usbfs: process 14544 (syz.9.2179) did not claim interface 0 before use [ 1094.965418][T14540] loop0: detected capacity change from 0 to 512 [ 1095.132073][T14540] ext3: Unknown parameter '.' [ 1096.023610][T14547] rxe_eth0 speed is unknown, defaulting to 1000 [ 1098.467539][T14551] loop5: detected capacity change from 0 to 512 [ 1098.544982][T14551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1098.553861][T14551] FAT-fs (loop5): Filesystem has been set read-only [ 1098.561015][T14551] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1098.569806][T14551] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1098.628876][T14551] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1099.030665][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1100.735420][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 1100.742223][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1101.730312][T14261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.732000][T14568] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1102.901365][T14568] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1102.928279][T14568] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1103.575568][T14576] loop6: detected capacity change from 0 to 16 [ 1103.621789][T14576] erofs: (device loop6): mounted with root inode @ nid 36. [ 1103.751303][T14568] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1107.915518][T14598] loop9: detected capacity change from 0 to 512 [ 1108.329606][T14598] EXT4-fs (loop9): 1 orphan inode deleted [ 1108.382454][T14598] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1108.399117][T14598] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.409989][ T4801] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1108.761389][T14614] loop5: detected capacity change from 0 to 512 [ 1108.789122][T14612] loop6: detected capacity change from 0 to 512 [ 1109.004141][T14614] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1109.013658][T14614] FAT-fs (loop5): Filesystem has been set read-only [ 1109.022758][T14614] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1109.031362][T14614] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1109.457610][T14614] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1109.537100][ T4801] EXT4-fs error (device loop9): ext4_release_dquot:6884: comm kworker/u4:11: Failed to release dquot type 1 [ 1111.526709][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1111.753633][T14628] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2200'. [ 1111.962574][T14634] loop9: detected capacity change from 0 to 16 [ 1112.034899][T14634] erofs: (device loop9): mounted with root inode @ nid 36. [ 1113.587799][T14657] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2203'. [ 1113.636490][T14657] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2203'. [ 1113.659076][T14659] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2203'. [ 1115.745973][T14657] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2203'. [ 1116.128671][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.135230][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.975880][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1117.991007][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1117.998963][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1118.008585][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1118.016228][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1118.029110][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1118.258138][T14674] rxe_eth0 speed is unknown, defaulting to 1000 [ 1119.633239][T14691] usb usb1: usbfs: process 14691 (syz.0.2210) did not claim interface 0 before use [ 1119.984760][T14697] loop6: detected capacity change from 0 to 512 [ 1120.102709][T14701] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2213'. [ 1120.632225][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1121.644203][T14728] loop6: detected capacity change from 0 to 16 [ 1121.776576][T14728] erofs: (device loop6): mounted with root inode @ nid 36. [ 1122.697210][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1122.953624][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2218'. [ 1123.739759][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2218'. [ 1123.837265][T14736] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2218'. [ 1124.518429][T14743] loop6: detected capacity change from 0 to 512 [ 1124.986893][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 1125.675386][T14674] chnl_net:caif_netlink_parms(): no params data found [ 1125.759956][T14747] loop9: detected capacity change from 0 to 512 [ 1125.817319][T14747] ext3: Unknown parameter '.' [ 1126.258566][T14752] loop9: detected capacity change from 0 to 256 [ 1127.016988][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 1127.112756][T14752] rxe_eth0 speed is unknown, defaulting to 1000 [ 1127.433736][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1127.444706][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1127.453005][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1127.467606][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1127.485442][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1127.495327][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1127.643558][T14674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.677018][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.729544][T14674] device bridge_slave_0 entered promiscuous mode [ 1127.738475][T14674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.745838][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.777226][T14674] device bridge_slave_1 entered promiscuous mode [ 1127.817946][T14758] rxe_eth0 speed is unknown, defaulting to 1000 [ 1128.180394][ T4823] device hsr_slave_0 left promiscuous mode [ 1128.200301][ T4823] device hsr_slave_1 left promiscuous mode [ 1128.240905][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.287199][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.336402][ T4823] device bridge_slave_1 left promiscuous mode [ 1128.367032][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.383017][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1128.471977][ T4823] device bridge_slave_0 left promiscuous mode [ 1128.487199][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.578969][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.606926][ T7] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 1128.631235][ T7] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1128.666088][ T7] usb 7-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 1128.686823][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.694994][ T7] usb 7-1: Product: syz [ 1128.716869][ T7] usb 7-1: Manufacturer: syz [ 1128.721555][ T7] usb 7-1: SerialNumber: syz [ 1128.749696][ T7] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1128.825006][ T7] scsi host1: usb-storage 7-1:1.0 [ 1128.864403][ T7] usb 7-1: USB disconnect, device number 5 [ 1129.670270][T14783] usb usb1: usbfs: process 14783 (syz.6.2223) did not claim interface 0 before use [ 1129.695549][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 1130.556969][T14786] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2225'. [ 1130.941996][ T4823] team0 (unregistering): Port device team_slave_1 removed [ 1131.121815][T14775] loop0: detected capacity change from 0 to 40427 [ 1131.143799][ T4823] team0 (unregistering): Port device team_slave_0 removed [ 1131.156729][T14775] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1131.184097][T14775] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1131.215462][T14775] F2FS-fs (loop0): invalid crc value [ 1131.295266][T14775] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1131.364048][ T4823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.518697][T14775] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1131.525842][T14775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1131.700589][T14775] F2FS-fs (loop0): Inconsistent error blkaddr:5663, sit bitmap:0 [ 1131.708606][T14775] CPU: 0 PID: 14775 Comm: syz.0.2231 Not tainted syzkaller #0 [ 1131.716111][T14775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1131.726209][T14775] Call Trace: [ 1131.729516][T14775] [ 1131.732469][T14775] dump_stack_lvl+0x188/0x24e [ 1131.737198][T14775] ? show_regs_print_info+0x12/0x12 [ 1131.742439][T14775] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 1131.748286][T14775] ? mark_lock+0x94/0x320 [ 1131.752660][T14775] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 1131.758074][T14775] f2fs_map_blocks+0xba8/0x36a0 [ 1131.762993][T14775] ? f2fs_get_block+0x140/0x140 [ 1131.767893][T14775] ? xa_load+0x60/0x2e0 [ 1131.772086][T14775] ? xa_load+0x2b3/0x2e0 [ 1131.776360][T14775] ? xa_load+0x60/0x2e0 [ 1131.780549][T14775] ? page_index+0xe6/0x490 [ 1131.785013][T14775] f2fs_mpage_readpages+0xa40/0x2830 [ 1131.790363][T14775] ? dquot_release_reservation_block+0xa0/0xa0 [ 1131.796556][T14775] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1131.801795][T14775] ? f2fs_readahead+0x180/0x380 [ 1131.806698][T14775] ? blk_start_plug+0x94/0x110 [ 1131.811508][T14775] read_pages+0x187/0x860 [ 1131.815871][T14775] ? __lock_acquire+0x7ea0/0x7ea0 [ 1131.820932][T14775] ? folio_memcg_rcu+0x220/0x220 [ 1131.825902][T14775] ? folio_add_lru+0xcf0/0xcf0 [ 1131.830708][T14775] ? page_cache_ra_unbounded+0x750/0x750 [ 1131.836376][T14775] ? folio_batch_add_and_move+0x14a/0x250 [ 1131.842144][T14775] ? folio_add_lru+0x508/0xcf0 [ 1131.846966][T14775] ? filemap_add_folio+0x186/0x3d0 [ 1131.852120][T14775] page_cache_ra_unbounded+0x667/0x750 [ 1131.857623][T14775] force_page_cache_ra+0x2c4/0x320 [ 1131.862772][T14775] generic_fadvise+0x46c/0x700 [ 1131.867599][T14775] ? dump_task+0x640/0x640 [ 1131.872128][T14775] ? __fget_files+0x28/0x460 [ 1131.876768][T14775] ? __fdget+0x17c/0x200 [ 1131.881051][T14775] __x64_sys_fadvise64+0x139/0x180 [ 1131.886196][T14775] do_syscall_64+0x4c/0xa0 [ 1131.890655][T14775] ? clear_bhb_loop+0x60/0xb0 [ 1131.895378][T14775] ? clear_bhb_loop+0x60/0xb0 [ 1131.900096][T14775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.906026][T14775] RIP: 0033:0x7f442299fb19 [ 1131.910472][T14775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.930114][T14775] RSP: 002b:00007f44237f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 1131.938557][T14775] RAX: ffffffffffffffda RBX: 00007f4422c25fa0 RCX: 00007f442299fb19 [ 1131.946564][T14775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1131.954562][T14775] RBP: 00007f4422a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1131.962575][T14775] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1131.970591][T14775] R13: 00007f4422c26038 R14: 00007f4422c25fa0 R15: 00007ffc0b025108 [ 1131.978616][T14775] [ 1131.984183][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 1131.992959][ T4823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.202728][ T9505] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1132.216465][ T9505] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1132.511123][ T4823] bond0 (unregistering): Released all slaves [ 1132.812925][T14813] usb usb1: usbfs: process 14813 (syz.0.2227) did not claim interface 0 before use [ 1133.537961][T14815] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2228'. [ 1133.637353][T14815] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2228'. [ 1133.658638][T14816] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2228'. [ 1133.673885][T14674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.698180][T14674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.741770][T14818] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2228'. [ 1133.826273][T14674] team0: Port device team_slave_0 added [ 1134.017347][T14674] team0: Port device team_slave_1 added [ 1134.061627][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 1134.776667][T14674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.805433][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.845348][T14674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.884622][T14674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.916668][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.030836][T14674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.565443][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 1136.567014][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1137.596193][T14758] chnl_net:caif_netlink_parms(): no params data found [ 1137.845102][T14845] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2235'. [ 1137.909793][ T7] usb 1-1: device descriptor read/all, error -71 [ 1137.929093][T14674] device hsr_slave_0 entered promiscuous mode [ 1137.952313][T14674] device hsr_slave_1 entered promiscuous mode [ 1138.014074][T14674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.026813][T14674] Cannot create hsr debugfs directory [ 1138.186677][T14856] loop9: detected capacity change from 0 to 512 [ 1138.447741][T14856] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2236: iget: bad i_size value: 38620345925642 [ 1138.462510][T14856] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2236: couldn't read orphan inode 15 (err -117) [ 1138.480250][T14856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1139.248914][T14860] loop0: detected capacity change from 0 to 16 [ 1139.478020][T14860] erofs: (device loop0): mounted with root inode @ nid 36. [ 1140.762172][ T4832] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm kworker/u4:21: bg 0: block 5: invalid block bitmap [ 1140.991287][ T4823] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.012481][ T4832] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 1141.085062][ T4832] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1141.085062][ T4832] [ 1141.119634][ T4832] EXT4-fs (loop9): Total free blocks count 0 [ 1141.125699][ T4832] EXT4-fs (loop9): Free/Dirty block details [ 1141.131726][ T4832] EXT4-fs (loop9): free_blocks=0 [ 1141.136746][ T4832] EXT4-fs (loop9): dirty_blocks=65 [ 1141.142010][ T4832] EXT4-fs (loop9): Block reservation details [ 1141.148134][ T4832] EXT4-fs (loop9): i_reserved_data_blocks=65 [ 1141.157543][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1141.608936][ T4823] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.790509][T14884] usb usb1: usbfs: process 14884 (syz.6.2240) did not claim interface 0 before use [ 1142.055334][T14758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.105435][T14758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.506864][T14758] device bridge_slave_0 entered promiscuous mode [ 1142.604553][T14758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.627513][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.636584][T14758] device bridge_slave_1 entered promiscuous mode [ 1142.790045][ T4823] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.377405][T14758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.792402][ T4823] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.868033][T14758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.960404][T14758] team0: Port device team_slave_0 added [ 1143.969306][T14758] team0: Port device team_slave_1 added [ 1144.014048][T14758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.031375][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.118802][T14758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.216612][T14758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.223743][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.360320][T14906] loop6: detected capacity change from 0 to 512 [ 1144.658454][T14906] EXT4-fs (loop6): 1 orphan inode deleted [ 1144.668585][T14906] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1144.681218][T14906] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.994645][T14758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.060397][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 1145.339634][T14915] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2246'. [ 1145.355904][T14758] device hsr_slave_0 entered promiscuous mode [ 1145.366696][T14758] device hsr_slave_1 entered promiscuous mode [ 1145.384495][T14758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.396957][T14758] Cannot create hsr debugfs directory [ 1145.428908][T14913] loop6: detected capacity change from 0 to 4096 [ 1145.506151][T14913] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1145.788859][ T7772] EXT4-fs (loop6): unmounting filesystem. [ 1147.326632][T14938] usb usb1: usbfs: process 14938 (syz.0.2248) did not claim interface 0 before use [ 1147.591728][T14674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1150.164557][T14674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1150.246409][T14951] loop0: detected capacity change from 0 to 1024 [ 1150.314065][T14951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1150.409350][T14951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1150.667154][T14959] loop6: detected capacity change from 0 to 16 [ 1150.703309][T14959] erofs: (device loop6): mounted with root inode @ nid 36. [ 1151.132039][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 1151.206828][T14674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1151.219065][T14674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1151.429959][T14963] loop6: detected capacity change from 0 to 512 [ 1153.122064][T14972] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2256'. [ 1153.362420][T14674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.506906][T14979] loop0: detected capacity change from 0 to 512 [ 1153.766377][T14979] EXT4-fs (loop0): 1 orphan inode deleted [ 1153.780834][T14979] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1153.794322][T14979] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.188225][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 1154.200865][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1154.230346][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1154.453568][T14674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.626221][T14994] usb usb1: usbfs: process 14994 (syz.6.2258) did not claim interface 0 before use [ 1155.000026][T14989] loop0: detected capacity change from 0 to 4096 [ 1155.386712][T14989] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1155.521934][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1155.532186][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1155.557473][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.564636][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.602865][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 1155.618777][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1155.669865][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1155.708177][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.715347][ T4832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.326045][T15007] usb usb1: usbfs: process 15007 (syz.0.2259) did not claim interface 0 before use [ 1159.170019][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1159.241783][T14758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1159.293102][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1159.318442][T15022] loop9: detected capacity change from 0 to 128 [ 1159.342922][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1159.377060][T14758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1159.440981][T15024] loop0: detected capacity change from 0 to 512 [ 1161.245074][T15035] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2266'. [ 1161.262847][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.869001][T15041] usb usb1: usbfs: process 15041 (syz.6.2265) did not claim interface 0 before use [ 1162.606326][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1162.869974][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1162.971955][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1163.035919][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1163.061985][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1163.087550][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1163.115973][T14758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1163.151213][T14674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1163.517527][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1163.556671][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1163.738276][T14758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.878839][T15058] loop9: detected capacity change from 0 to 512 [ 1164.204218][T15058] EXT4-fs (loop9): 1 orphan inode deleted [ 1164.219150][T15058] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1164.231268][T15058] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1164.567530][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1165.283833][T13608] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1165.375780][T14758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.415970][T14758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.481160][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1165.494906][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1165.587545][T13608] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.599024][T13608] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 1165.609408][T13608] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1165.627831][T13608] usb 7-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 1165.632829][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1165.646929][T13608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.654983][T13608] usb 7-1: Product: syz [ 1165.659859][T13608] usb 7-1: Manufacturer: syz [ 1165.664513][T13608] usb 7-1: SerialNumber: syz [ 1165.698028][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1165.706708][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.713897][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.744837][T13608] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1165.857379][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1165.872434][T13608] scsi host1: usb-storage 7-1:1.0 [ 1165.910088][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1165.992734][T15093] loop0: detected capacity change from 0 to 16 [ 1166.011256][T15093] erofs: (device loop0): mounted with root inode @ nid 36. [ 1167.572861][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.580173][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.407752][T14682] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1168.489361][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1168.637378][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1168.678435][T13501] usb 7-1: USB disconnect, device number 6 [ 1168.710817][T14674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.761763][ T4823] device hsr_slave_0 left promiscuous mode [ 1168.810783][ T4823] device hsr_slave_1 left promiscuous mode [ 1168.835727][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.870976][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.925977][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.003328][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.085026][ T4823] device bridge_slave_1 left promiscuous mode [ 1169.181097][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.312855][ T4823] device bridge_slave_0 left promiscuous mode [ 1169.348549][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.007301][ T4823] device veth1_macvtap left promiscuous mode [ 1170.013508][ T4823] device veth0_macvtap left promiscuous mode [ 1170.020170][ T4823] device veth1_vlan left promiscuous mode [ 1170.026046][ T4823] device veth0_vlan left promiscuous mode [ 1170.203630][T15113] loop6: detected capacity change from 0 to 1024 [ 1170.519818][T15113] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1172.063969][T15113] EXT4-fs: error -4 creating inode table initialization thread [ 1172.123433][T15113] EXT4-fs (loop6): mount failed [ 1174.015223][T15137] loop0: detected capacity change from 0 to 512 [ 1174.339080][T15137] EXT4-fs (loop0): 1 orphan inode deleted [ 1174.355945][T15137] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1174.366305][T15137] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.825957][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 1175.344444][T15154] usb usb1: usbfs: process 15154 (syz.0.2279) did not claim interface 0 before use [ 1176.138046][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1176.153659][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1176.162182][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1176.170725][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1176.183513][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1176.192895][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 Stopping sshd: stopped /usr/sbin/sshd (pid 4030) OK Stopping crond: stopped /usr/sbin/crond (pid 4016) OK [ 1177.263206][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.269612][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 Stopping dhcpcd... [ 1177.407194][ T4823] team0 (unregistering): Port device team_slave_1 removed [ 1177.504516][ T4823] team0 (unregistering): Port device team_slave_0 removed stopped /sbin/dhcpcd (pid 3937) [ 1177.620590][ T4823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.684560][ T4823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface Stopping network: [ 1178.300538][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 1178.441821][ T4823] bond0 (unregistering): Released all slaves [ 1178.506543][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1178.514856][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1178.525509][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1178.534513][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1178.544849][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1178.564278][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1178.573032][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1178.581877][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1178.589681][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1178.598427][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1178.622298][T14758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1178.634865][T14758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1178.783571][T15155] rxe_eth0 speed is unknown, defaulting to 1000 [ 1178.838373][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1178.877379][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1179.147949][T15184] loop0: detected capacity change from 0 to 16 [ 1179.341628][T15186] loop9: detected capacity change from 0 to 512 [ 1179.867883][T15184] erofs: (device loop0): mounted with root inode @ nid 36. [ 1180.292377][T15186] EXT4-fs (loop9): 1 orphan inode deleted [ 1180.299159][T15186] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1180.308983][T15186] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.376849][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 1180.746092][ T9728] EXT4-fs (loop9): unmounting filesystem. [ 1183.138659][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 1183.260033][T15155] chnl_net:caif_netlink_parms(): no params data found [ 1183.519605][T15219] loop9: detected capacity change from 0 to 512 [ 1184.969188][T15155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.976466][T15155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.078537][T15155] device bridge_slave_0 entered promiscuous mode [ 1185.169574][T15155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.196858][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 1185.252726][T15155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.363125][T15155] device bridge_slave_1 entered promiscuous mode [ 1187.865602][T15155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link OK [ 1188.509070][T15155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.601851][T15155] team0: Port device team_slave_0 added [ 1188.727866][T15155] team0: Port device team_slave_1 added Stopping iptables: [ 1188.869334][T15155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.896472][T15255] loop0: detected capacity change from 0 to 512 [ 1188.944802][T15155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.482535][T15155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.868347][T15155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.907630][T15155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. OK [ 1191.093039][T15155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.399968][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1191.415339][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1191.428519][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1191.455339][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1191.474157][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1191.486261][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1193.576968][ T4285] Bluetooth: hci3: command 0x0409 tx timeout serialport: VM disconnected.