last executing test programs: 5m42.53181355s ago: executing program 0 (id=308): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8, 0xffb3, 0x9}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x3f, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x4000) 5m40.391887233s ago: executing program 0 (id=314): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="864cd12f8600d1b20a559569b7365a81712f4bd65975a3bfd6f996660efbabf6fbe9752ce3d056b5050506196f0b7438caaa35305f1273d478df461721cc9d") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m39.652289087s ago: executing program 0 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1d4}}, 0x804) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x8, 0x1004, 0x6, 0xc595, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m37.284368334s ago: executing program 0 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r4) 5m36.674749876s ago: executing program 0 (id=326): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x80, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 5m35.780668844s ago: executing program 0 (id=329): unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x86f2) 5m19.353574889s ago: executing program 32 (id=329): unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x86f2) 3m12.97192077s ago: executing program 3 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) 3m10.750674114s ago: executing program 3 (id=551): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x280, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000005c0)={'security\x00', 0x0, [0xffff8000, 0x396b, 0x3ff, 0x800]}, &(0x7f0000000640)=0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x80) 3m9.072750057s ago: executing program 3 (id=554): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f00000022c0), 0x0, 0xa0, 0xb) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/84, 0x54}, {0x0}], 0x2, 0xc02, 0x9) 3m3.119678745s ago: executing program 3 (id=562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000140)=0x27a8dfd3, 0x4) 3m1.742187073s ago: executing program 3 (id=565): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r1, r0) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) r3 = gettid() r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r4, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x8000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x1d2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) 2m59.049365406s ago: executing program 3 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 2m43.355860646s ago: executing program 33 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 18.519777773s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40004004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r8, 0x0, 0x40c0) openat$cgroup(r7, 0x0, 0x200002, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r9, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) recvmmsg(r9, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xf07e}], 0x1, 0x20, 0x0) 17.516619913s ago: executing program 4 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x582c952b5e63b23f, 0xffffffffffffffff, 0x892c4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r6, 0x0, &(0x7f00000000c0)) 15.201445989s ago: executing program 5 (id=817): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) mknod(0x0, 0x8000, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 15.200046939s ago: executing program 2 (id=818): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x0) preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x800, 0x1, 0x4, 0x100000, 0x5, {0x0, 0xea60}, {0x3, 0xc, 0xa, 0x3, 0x6, 0x7, 'sgl?'}, 0x7f, 0x1, {0x0}, 0x4}) 15.061011782s ago: executing program 4 (id=819): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00'], 0x14}}, 0x4000054) flistxattr(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) 14.67186975s ago: executing program 1 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000280)='\\[[]!,,@@!--\x00A\v\xdbh^\x0f\x88\x86\xf6]\xee6g\xce\x88h\xb9\x19\x9a\xba\x05\x05e\x84\xaa\xc9\xe4\xa1\x98\x1e\x19\xbbn\xc6!\xacF\xe7\xb2\xefP,\xd9\xf09\x02\x99>\xfcMJ\xae\xd9\x16\x81P\xb6\xcb\x91\xb6PhAY\xb6', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) pipe2(&(0x7f0000000000), 0x4800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="ed"], 0x20) 13.863511995s ago: executing program 2 (id=821): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x1a0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004000000001fffffffe00010002000100ac141441000000000000000000000000000d0001017564703a73797a3200000000000000000000000000000000000000a4bce5f3f7f9d00116d73dbf331d62e37b735594199092d2487cc7b63da8993a66cf456c4c493cddd586f11f5547751b7fb7ceb8938bc76c4dffa4ef7410501d5dabc46a41fafadc1b8b72a07621bdc9c230050806412b74605aa770957bb4cd7fbc4e8b8fb92938b587798d6e98dab50acdb5dd2080105282c8f4576219ab2dcc66ed7e3219d0a46f6b520000000000000000000000000015cdce964f24893c0962639a5e188f92ca368f7debc3f36d06013e6bd4e2e7a749e15b62ae5f126d112008c30b654d7aab44c2e3c1c9900e7f2a9b0c33b23c048fd4ccaa313739243c1a1cd0cd4e3cba92ac73c4a8901c1b70a1f2fa81e2c817820ef1e23f06b88a0cb6fcfbf7068bcbd3be28e723dc858e23efcf566aaae2300de3ec5aefc1e2d4d3aa8bf51e9f0884d68321f722da481432ee4e6d4311d1a637c120e6b11b42a93176b3495fb73be635e62aa2bd5aac274766c177a3a39c346fe85488a189aeff95daea4e783a679f474563d8b12abdaf"], 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x2) 12.904496764s ago: executing program 4 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x22020400) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x4015, 0x0) sendto$inet6(r1, &(0x7f0000000280)=':', 0x1, 0x20008800, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x35) shutdown(r1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e000100000000316c388d80", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x8000) setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_read_part_table(0x1046, &(0x7f0000001080)="$eJzszUEOwVAYBOBpNS0JrsPGheycgJs4nlPIL21KhANY+L7Fy/9mFhN+qsuQ2qfaQ5L+o2xf1zK5rsfjnKRq9V6MmjTPZHE73WuYq+qzmdIan+Oumz6XeXr7tQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf+kRAAD///ffDIA=") 12.287273917s ago: executing program 1 (id=823): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fsopen(0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x4800) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 10.204250658s ago: executing program 2 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff3e, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRES8=r0], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, 0x0) 10.174273208s ago: executing program 4 (id=825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x4}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) syz_emit_ethernet(0xa2, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0xb) 9.863848474s ago: executing program 5 (id=826): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010401020000018000000000000000000800054000"], 0x24}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 9.134825049s ago: executing program 4 (id=827): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x200000000000009, 0x400000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) openat2(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r5, 0x0) shmctl$IPC_RMID(0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e23, 0x8, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x3c}, {0x0, 0x5, 0x31, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca8}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x2, @in6=@empty, 0x3505, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 6.54458645s ago: executing program 1 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r4) keyctl$invalidate(0x15, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5eaa000000000000611067000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x80, 0xff, 0x3}) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0383e04, &(0x7f0000000140)={"c4650da6c04da5a743eadb230a98b1079aa302394a0000d10000000200", r8, 0xffffffffffffffff, 0x2}) 6.475883872s ago: executing program 5 (id=829): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0xffffffffacecc35e, 0x1690c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x200008, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) pipe2$watch_queue(0x0, 0x80) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=0x0}}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 5.184865147s ago: executing program 1 (id=830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x22601, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000200)=0x8, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r5 = dup(r4) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) write$FUSE_INIT(r5, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x8, 0xfffffff7, 0x238d117e660ceb5b, 0x401, 0x6, 0xe12, 0x2c0, 0x0, 0x0, 0x0, 0x27}}, 0x50) 3.790073985s ago: executing program 1 (id=831): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r1, @ANYRES64=r0, @ANYRES8=r1], 0x2c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet(0x2, 0x4, 0xfffffffd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback, r3, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x54, r4, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "e02794f2c17fcb6b", "79b47851e5fe973d29aa79100f393494", "489dd8a9", "2fee2fd92f2cc3e3"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) shutdown(r1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.723899916s ago: executing program 5 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x1, 0x101, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x67, 0x0, 0x2, 0x29, 0x0, @remote, @remote}}}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.678763737s ago: executing program 2 (id=833): mount(0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r1, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xf, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) gettid() ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f00000000c0)={0x8}) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) setitimer(0x0, 0x0, 0x0) 2.031035869s ago: executing program 5 (id=834): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.627867458s ago: executing program 1 (id=835): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x80108907, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/36, 0x24) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sysfs$1(0x1, &(0x7f0000000080)='\x00') 160.464807ms ago: executing program 5 (id=836): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0)={[{@nouser_xattr}, {@resgid}, {@inlinecrypt}, {@grpquota}, {@resuid}, {@data_err_ignore}]}, 0xfe, 0x445, &(0x7f0000000900)="$eJzs3MtvG0UYAPBv7Tz6JKGUR0MLgYKIeCRN+qAHLiCQOICEBIciTiFJq1C3QU2QaBVB4BCOqBJ3xBGJv4ATXBBwQuIKd1SpQrm0cDJaezd1HTuNE6cu8e8nbTvjHXfm293xzs7YDaBrDad/JBH7IuKPiBioZm8vMFz96+bK4tQ/K4tTSZTLb/+dVMrdWFmcyovm79tbzZTLWb6/Qb3L70VMlkozl7L82MKFD8fmL195YfbC5LmZczMXJ9J/7UjfqYmTbYkzjevG0Cdzhw+9/u7VN6fOXH3/l+/SGvZl+2vjaJfh6tFt6Ol2V9Zh+2vSSU8HG0JLihGRnq7eSv8fiGLsXt03EK993tHGAduqXC6XG92fM0tlYAdLotMtADojv9Gnz7/5dpeGHveE6y9XH4DSuG9mW3VPTxSyMr11z7ftNBwRZ5b+/TrdYpvmIQAAav2Qjn+ebzT+K8RDNeXuy9ZQBiPi/og4EBEPRMTBiHgwolL24Yh4pMX661dI1o5/Ctc2FdgGpeO/l7K1rdvHf/noLwaLWW5/Jf7e5OxsaeZYdkxGorc/zY+vU8ePr/7+ZbN9teO/dEvrz8eCWTuu9dRN0E1PLkxuJeZa1z+LGOppFH8S+TJOEhGHImJok3XMPvvt4Wb77hz/OtqwzlT+JuKZ6vlfirr4c0nD9cnTp08cH3/x1MTJsV1Rmjk2ll8Va/362/JbzerfUvxtkJ7/PQ2v/9X4B5NdEfOXr5yvrNfOt17H8p9fNH2m2ez135e8U0n3Za99PLmwcGk8oi95Y+3rE7fem+fz8mn8I0cb9/8DcetIPBoR6UV8JCIei4jHs7Y/ERFPRsTRdeL/+ZWnPmg9/nVm5dsojX/6Tuc/as9/64ni+Z++bz3+XHr+T1RSI9krG/n822gDt3LsAAAA4P+iUPkOfFIYXU0XCqOj1e/wH4w9hdLc/MJzZ+c+ujhd/a78YPQW8pmugZr50PFsbjjPT9Tlj2fzxl8Vd1fyo1NzpelOBw9dbm+T/p/6q9jp1gHbzu+1oHvV9f/yp51qCHDXuf9D99L/oXvp/9C9GvV/cwDQHdz/oXvp/9C99H/oXvo/dKWmv40vbOkn/xI7PhGFe6IZOz/Rs+H/zGKTif6Guzr9yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAe/wUAAP//ziLlLw==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000d14040029bd7000fcdbdf25080001000100000008000300000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r6 = syz_open_pts(r5, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 66.034208ms ago: executing program 2 (id=837): sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040880) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = socket(0x11, 0x2, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000001600)={&(0x7f0000001540)=""/159, 0x9f}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001500)={0x6, 0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)=""/67, 0x43}, {&(0x7f0000001140)=""/58, 0x3a}, {0x0}, {&(0x7f00000012c0)=""/64, 0x40}, {&(0x7f0000001300)=""/107, 0x6b}, {&(0x7f0000001380)=""/140, 0x8c}], &(0x7f00000014c0)=[0xe000000000, 0x4ea5, 0x5]}, 0x20) syz_open_dev$audion(0x0, 0x7, 0x400) keyctl$setperm(0x5, 0x0, 0x1c303911) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 4 (id=838): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0000000000000000000000000000003364d980c8e9b33eef112b013ccd00000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="875bfc79cf06000000361d294420"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): p link [ 72.599728][ T5788] team0: Port device team_slave_1 added [ 72.614050][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.660198][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.667600][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.674740][ T5796] bridge_slave_0: entered allmulticast mode [ 72.682317][ T5796] bridge_slave_0: entered promiscuous mode [ 72.724668][ T5787] team0: Port device team_slave_0 added [ 72.730785][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.738750][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.745904][ T5796] bridge_slave_1: entered allmulticast mode [ 72.753836][ T5796] bridge_slave_1: entered promiscuous mode [ 72.761334][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.768829][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.794907][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.819333][ T5787] team0: Port device team_slave_1 added [ 72.862390][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.869655][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.895685][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.922911][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.930652][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.937934][ T5793] bridge_slave_0: entered allmulticast mode [ 72.944904][ T5793] bridge_slave_0: entered promiscuous mode [ 72.954447][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.968091][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.997482][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.004593][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.013223][ T5793] bridge_slave_1: entered allmulticast mode [ 73.020249][ T5793] bridge_slave_1: entered promiscuous mode [ 73.075802][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.082874][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.109371][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.136927][ T5796] team0: Port device team_slave_0 added [ 73.156489][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.163693][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.189862][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.203788][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.216463][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.228857][ T5796] team0: Port device team_slave_1 added [ 73.238641][ T5788] hsr_slave_0: entered promiscuous mode [ 73.244870][ T5788] hsr_slave_1: entered promiscuous mode [ 73.294215][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.301293][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.327708][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.355438][ T5793] team0: Port device team_slave_0 added [ 73.386864][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.393902][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.419871][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.438916][ T5793] team0: Port device team_slave_1 added [ 73.464417][ T5787] hsr_slave_0: entered promiscuous mode [ 73.470830][ T5787] hsr_slave_1: entered promiscuous mode [ 73.477018][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.484924][ T5787] Cannot create hsr debugfs directory [ 73.568217][ T5792] Bluetooth: hci2: command tx timeout [ 73.584225][ T5796] hsr_slave_0: entered promiscuous mode [ 73.584385][ T5792] Bluetooth: hci1: command tx timeout [ 73.589941][ T5791] Bluetooth: hci0: command tx timeout [ 73.601690][ T5796] hsr_slave_1: entered promiscuous mode [ 73.609397][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.616979][ T5796] Cannot create hsr debugfs directory [ 73.623388][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.630422][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.656532][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.669568][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.676545][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.702536][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.734447][ T5791] Bluetooth: hci3: command tx timeout [ 73.897357][ T5793] hsr_slave_0: entered promiscuous mode [ 73.904006][ T5793] hsr_slave_1: entered promiscuous mode [ 73.910545][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.918876][ T5793] Cannot create hsr debugfs directory [ 74.109532][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.155336][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.165204][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.190447][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.253584][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.283624][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.293793][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.312562][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.366955][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.403028][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.413785][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.433242][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.530285][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.541981][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.551476][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.562856][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.619246][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.669416][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.691039][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.698397][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.726780][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.734199][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.786953][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.842337][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.862362][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.889494][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.896601][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.929092][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.943337][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.950515][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.978440][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.995621][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.002866][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.032953][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.040217][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.084402][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.145383][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.152620][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.203646][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.251524][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.258819][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.371005][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.395449][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.543946][ T5788] veth0_vlan: entered promiscuous mode [ 75.601024][ T5788] veth1_vlan: entered promiscuous mode [ 75.647847][ T5791] Bluetooth: hci0: command tx timeout [ 75.649388][ T5792] Bluetooth: hci2: command tx timeout [ 75.653295][ T5791] Bluetooth: hci1: command tx timeout [ 75.746210][ T5788] veth0_macvtap: entered promiscuous mode [ 75.775352][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.793286][ T5788] veth1_macvtap: entered promiscuous mode [ 75.808187][ T5791] Bluetooth: hci3: command tx timeout [ 75.828455][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.869243][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.884850][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.898293][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.907418][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.916135][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.925233][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.963973][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.009853][ T5796] veth0_vlan: entered promiscuous mode [ 76.094513][ T5793] veth0_vlan: entered promiscuous mode [ 76.121246][ T5796] veth1_vlan: entered promiscuous mode [ 76.152961][ T5793] veth1_vlan: entered promiscuous mode [ 76.161381][ T5787] veth0_vlan: entered promiscuous mode [ 76.183027][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.201934][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.205487][ T5787] veth1_vlan: entered promiscuous mode [ 76.282008][ T5796] veth0_macvtap: entered promiscuous mode [ 76.292256][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.302330][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.306358][ T5793] veth0_macvtap: entered promiscuous mode [ 76.322193][ T5796] veth1_macvtap: entered promiscuous mode [ 76.349506][ T5793] veth1_macvtap: entered promiscuous mode [ 76.412059][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.425879][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.440378][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.470604][ T5787] veth0_macvtap: entered promiscuous mode [ 76.503614][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.523902][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.536903][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.551105][ T5787] veth1_macvtap: entered promiscuous mode [ 76.578591][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.592040][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.603336][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.614733][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639903][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.651599][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.662442][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.673315][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.686893][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.818206][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.837993][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.852317][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.863976][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.876536][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.892500][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.910982][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.943397][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.986769][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.022137][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.038853][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.102387][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.314544][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.323564][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.357409][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377039][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.536065][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.606373][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.617924][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.628673][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.639251][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.652340][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.670245][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.727505][ T5791] Bluetooth: hci2: command tx timeout [ 77.732936][ T5791] Bluetooth: hci0: command tx timeout [ 77.739217][ T5797] Bluetooth: hci1: command tx timeout [ 77.746824][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.762300][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.777193][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.806563][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.874197][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.887469][ T5791] Bluetooth: hci3: command tx timeout [ 77.896612][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.049914][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.064669][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.189332][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.231439][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.324645][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.355794][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.366838][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.447105][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.455476][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.518241][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.526483][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.981056][ T5890] Zero length message leads to an empty skb [ 79.023882][ T5898] syz.0.8[5898]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.146042][ T5890] syz.2.7 (5890) used greatest stack depth: 20712 bytes left [ 79.187853][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.427754][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.445883][ T5878] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 79.466351][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.510032][ T5878] usb 4-1: config 0 descriptor?? [ 79.573845][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 79.807475][ T5791] Bluetooth: hci2: command tx timeout [ 79.813032][ T5797] Bluetooth: hci0: command tx timeout [ 79.818955][ T5791] Bluetooth: hci1: command tx timeout [ 79.830516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.854495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.959098][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 79.968491][ T5792] Bluetooth: hci3: command tx timeout [ 80.010774][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 80.057580][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 80.091227][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 80.164175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.210838][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 80.341577][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 80.371602][ T5926] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 80.387898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.397766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.554884][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 80.585063][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 80.601339][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 80.626282][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 80.635241][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 80.644043][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 80.652734][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 80.664876][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 80.682616][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 80.712605][ T5878] pwc: Registered as video103. [ 80.740665][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 80.888695][ T5878] usb 4-1: USB disconnect, device number 2 [ 81.697763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!! [ 81.727595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.800054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.809047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 83.599787][ T5969] loop1: detected capacity change from 0 to 128 [ 83.744621][ T5969] syz.1.26: attempt to access beyond end of device [ 83.744621][ T5969] loop1: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 83.837958][ T5969] syz.1.26: attempt to access beyond end of device [ 83.837958][ T5969] loop1: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 83.890300][ T5969] Buffer I/O error on dev loop1, logical block 241, lost async page write [ 84.039801][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.039801][ T128] loop1: rw=1, sector=242, nr_sectors = 1 limit=128 [ 84.097311][ T128] Buffer I/O error on dev loop1, logical block 242, lost async page write [ 84.106099][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.106099][ T128] loop1: rw=1, sector=243, nr_sectors = 1 limit=128 [ 84.147199][ T128] Buffer I/O error on dev loop1, logical block 243, lost async page write [ 84.156668][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.156668][ T128] loop1: rw=1, sector=244, nr_sectors = 1 limit=128 [ 84.204803][ T128] Buffer I/O error on dev loop1, logical block 244, lost async page write [ 84.232803][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.232803][ T128] loop1: rw=1, sector=245, nr_sectors = 1 limit=128 [ 84.268859][ T128] Buffer I/O error on dev loop1, logical block 245, lost async page write [ 84.294264][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.294264][ T128] loop1: rw=1, sector=246, nr_sectors = 1 limit=128 [ 84.319482][ T128] Buffer I/O error on dev loop1, logical block 246, lost async page write [ 84.331522][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.331522][ T128] loop1: rw=1, sector=247, nr_sectors = 1 limit=128 [ 84.338085][ T5972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.355446][ T128] Buffer I/O error on dev loop1, logical block 247, lost async page write [ 84.381649][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.381649][ T128] loop1: rw=1, sector=248, nr_sectors = 1 limit=128 [ 84.402629][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 84.408864][ T5972] kvm: pic: non byte read [ 84.449312][ T128] Buffer I/O error on dev loop1, logical block 248, lost async page write [ 84.498099][ T128] kworker/u4:5: attempt to access beyond end of device [ 84.498099][ T128] loop1: rw=1, sector=249, nr_sectors = 79 limit=128 [ 85.137367][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.165774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.430155][ T5996] block device autoloading is deprecated and will be removed. [ 86.086470][ T27] audit: type=1804 audit(1758335439.641:2): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.39" name="file0" dev="ramfs" ino=8339 res=1 errno=0 [ 86.615860][ T6019] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 86.641630][ T6019] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 86.931214][ T9] cfg80211: failed to load regulatory.db [ 87.148253][ T6028] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 87.159595][ T6028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 87.486094][ T6037] loop1: detected capacity change from 0 to 8 [ 87.745737][ T6043] loop2: detected capacity change from 0 to 1024 [ 87.921132][ T27] audit: type=1800 audit(1758335441.481:3): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.51" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 89.183884][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.238796][ T5878] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.695333][ T6071] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 89.729259][ T6060] loop3: detected capacity change from 0 to 40427 [ 89.757775][ T6060] F2FS-fs (loop3): Corrupted extension count (720933 + 1 > 64) [ 89.766374][ T6060] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.784195][ T6060] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 89.821098][ T6060] F2FS-fs (loop3): Image doesn't support compression [ 89.842981][ T6060] F2FS-fs (loop3): Image doesn't support compression [ 89.890073][ T6060] F2FS-fs (loop3): invalid crc value [ 89.935590][ T6060] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.972031][ T6080] loop2: detected capacity change from 0 to 512 [ 89.991026][ T6080] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.052429][ T6080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.074983][ T6080] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.113148][ T6060] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.139046][ T6060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.271966][ T27] audit: type=1800 audit(1758335443.821:4): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="file2" dev="loop3" ino=14 res=0 errno=0 [ 90.287450][ T6080] EXT4-fs error (device loop2): __ext4_new_inode:1284: comm syz.2.62: failed to insert inode 16: doubly allocated? [ 90.508692][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.664755][ T128] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_write_inode+0x3c0/0x4b0 [ 90.711807][ T128] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 90.883627][ T6060] VFS:Filesystem freeze failed [ 91.829714][ T6104] loop2: detected capacity change from 0 to 7 [ 91.851290][ T5802] loop2: [ 91.854459][ T5802] loop2: partition table partially beyond EOD, truncated [ 91.885045][ T6104] loop2: [ 91.904720][ T6104] loop2: partition table partially beyond EOD, truncated [ 92.523325][ T2198] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.727327][ T2198] usb 2-1: Using ep0 maxpacket: 32 [ 92.748693][ T2198] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 92.770498][ T2198] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 92.798733][ T2198] usb 2-1: Product: syz [ 92.806930][ T2198] usb 2-1: Manufacturer: syz [ 92.815810][ T2198] usb 2-1: SerialNumber: syz [ 92.847599][ T2198] usb 2-1: config 0 descriptor?? [ 93.072936][ T6126] loop3: detected capacity change from 0 to 256 [ 93.109066][ T6126] ======================================================= [ 93.109066][ T6126] WARNING: The mand mount option has been deprecated and [ 93.109066][ T6126] and is ignored by this kernel. Remove the mand [ 93.109066][ T6126] option from the mount to silence this warning. [ 93.109066][ T6126] ======================================================= [ 93.114451][ T2198] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 93.218089][ T2198] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 93.270436][ T6126] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xfd45db89, utbl_chksum : 0xe619d30d) [ 93.279912][ T2198] peak_usb: probe of 2-1:0.0 failed with error -71 [ 93.288053][ T6126] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 93.306419][ T2198] usb 2-1: USB disconnect, device number 2 [ 93.309320][ T6130] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.658129][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.869770][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.923066][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.959164][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.989188][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.024549][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.062094][ T23] usb 4-1: config 0 descriptor?? [ 94.563362][ T23] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 94.629640][ T23] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 94.641300][ T6141] loop1: detected capacity change from 0 to 32768 [ 94.751365][ T6141] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.954296][ T6141] XFS (loop1): Ending clean mount [ 94.999868][ T6141] XFS (loop1): Quotacheck needed: Please wait. [ 95.030503][ T23] usb 4-1: USB disconnect, device number 3 [ 95.132106][ T6141] XFS (loop1): Quotacheck: Done. [ 95.469583][ T6169] team0: Port device vlan2 added [ 95.477792][ T5793] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.044934][ T6192] capability: warning: `syz.3.96' uses deprecated v2 capabilities in a way that may be insecure [ 97.062253][ T6194] loop1: detected capacity change from 0 to 1024 [ 97.091945][ T6194] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.152545][ T6194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.372058][ T6194] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 97.430817][ T6194] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #15: comm syz.1.95: mark_inode_dirty error [ 97.518270][ T6194] EXT4-fs error (device loop1): ext4_get_max_inline_size:116: inode #15: comm syz.1.95: can't get inode location 15 [ 97.795243][ T6204] loop3: detected capacity change from 0 to 32768 [ 97.961011][ T6204] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.988545][ T12] (kworker/u4:1,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 98.071803][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.451575][ T6210] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.473369][ T6210] overlayfs: failed to set xattr on upper [ 98.527883][ T6210] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.739000][ T6210] overlayfs: ...falling back to index=off. [ 98.834296][ T6210] overlayfs: ...falling back to uuid=null. [ 99.052927][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 101.517016][ T6185] syz.0.90 (6185): drop_caches: 1 [ 102.821025][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 103.395094][ T6267] loop3: detected capacity change from 0 to 1024 [ 103.415602][ T6267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.469999][ T6267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.830279][ T6267] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 103.878233][ T6267] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #15: comm syz.3.118: mark_inode_dirty error [ 103.897552][ T6267] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 103.909192][ T6267] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #15: comm syz.3.118: mark_inode_dirty error [ 103.936990][ T6267] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.118: Invalid block bitmap block 0 in block_group 0 [ 103.967933][ T6267] EXT4-fs error (device loop3): ext4_mb_discard_group_preallocations:5439: comm syz.3.118: Error -117 reading block bitmap for 0 [ 103.998009][ T6267] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.118: Invalid block bitmap block 0 in block_group 0 [ 104.018455][ T6267] EXT4-fs error (device loop3): ext4_mb_discard_group_preallocations:5439: comm syz.3.118: Error -117 reading block bitmap for 0 [ 104.034446][ T6267] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 104.051585][ T6267] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #15: comm syz.3.118: mark_inode_dirty error [ 104.310719][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.315387][ T6283] IPv4: Oversized IP packet from 127.202.26.0 [ 104.422206][ T6285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.123'. [ 105.148977][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.156297][ T6295] bond0: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 105.167973][ T6295] bond0: (slave ip6gre0): Error -95 calling set_mac_address [ 105.995463][ T6291] loop3: detected capacity change from 0 to 32768 [ 106.128635][ T6291] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.386844][ T6291] XFS (loop3): Ending clean mount [ 106.449032][ T6291] XFS (loop3): Quotacheck needed: Please wait. [ 106.572198][ T6291] XFS (loop3): Quotacheck: Done. [ 107.264818][ T5787] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.974708][ T6352] kvm: pic: single mode not supported [ 108.974809][ T6352] kvm: pic: non byte read [ 109.013885][ T6352] kvm: pic: non byte read [ 109.023964][ T6352] kvm: pic: single mode not supported [ 109.024154][ T6352] kvm: pic: level sensitive irq not supported [ 109.044171][ T6352] kvm: pic: non byte read [ 109.082737][ T6352] kvm: pic: single mode not supported [ 109.082832][ T6352] kvm: pic: non byte read [ 109.101330][ T6352] kvm: pic: non byte read [ 109.105925][ T6352] kvm: pic: non byte read [ 109.793753][ T6371] xt_hashlimit: max too large, truncated to 1048576 [ 110.123906][ T6348] loop0: detected capacity change from 0 to 40427 [ 110.191932][ T6348] F2FS-fs (loop0): invalid crc value [ 110.253690][ T6348] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.054357][ T6348] F2FS-fs (loop0): Start checkpoint disabled! [ 111.142424][ T6348] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 113.994227][ T48] kworker/u4:3: attempt to access beyond end of device [ 113.994227][ T48] loop0: rw=1, sector=77824, nr_sectors = 2712 limit=40427 [ 114.063464][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.063464][ T48] loop0: rw=1, sector=80536, nr_sectors = 1384 limit=40427 [ 114.178114][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.178114][ T48] loop0: rw=1, sector=49152, nr_sectors = 4080 limit=40427 [ 114.242715][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.242715][ T48] loop0: rw=1, sector=53232, nr_sectors = 16 limit=40427 [ 114.276861][ T27] audit: type=1326 audit(1758335467.831:5): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.356936][ T27] audit: type=1326 audit(1758335467.831:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.421779][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.421779][ T48] loop0: rw=1, sector=57344, nr_sectors = 4096 limit=40427 [ 114.453742][ T27] audit: type=1326 audit(1758335467.831:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.485307][ T27] audit: type=1326 audit(1758335467.831:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.507688][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.527001][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.527001][ T48] loop0: rw=1, sector=61440, nr_sectors = 4120 limit=40427 [ 114.528194][ T27] audit: type=1326 audit(1758335467.831:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.566216][ T27] audit: type=1326 audit(1758335467.831:10): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.588695][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.598799][ T27] audit: type=1326 audit(1758335467.831:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.621245][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.627982][ T27] audit: type=1326 audit(1758335467.831:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.650714][ T27] audit: type=1326 audit(1758335467.831:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.672913][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.682294][ T27] audit: type=1326 audit(1758335467.831:14): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f20b778ec29 code=0x7ffc0000 [ 114.705001][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.731333][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.731333][ T48] loop0: rw=1, sector=65560, nr_sectors = 4072 limit=40427 [ 114.754960][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.754960][ T48] loop0: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 114.773373][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.773373][ T48] loop0: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 114.787641][ T48] kworker/u4:3: attempt to access beyond end of device [ 114.787641][ T48] loop0: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 115.247476][ T48] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 117.957228][ T6474] syzkaller0: entered promiscuous mode [ 117.962791][ T6474] syzkaller0: entered allmulticast mode [ 118.008932][ T6476] syz_tun: entered allmulticast mode [ 118.028541][ T6476] dvmrp8: entered allmulticast mode [ 118.076096][ T6475] syz_tun: left allmulticast mode [ 118.537629][ T6482] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.018247][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 119.055316][ T6491] team0: No ports can be present during mode change [ 119.097816][ T6494] netlink: 10 bytes leftover after parsing attributes in process `syz.3.170'. [ 121.498026][ T6525] loop0: detected capacity change from 0 to 1764 [ 123.860754][ T6533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.789344][ T6544] loop1: detected capacity change from 0 to 2048 [ 124.878133][ T6551] process 'syz.3.183' launched '/dev/fd/6' with NULL argv: empty string added [ 124.941986][ T6544] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 125.023274][ T6544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.034316][ T6590] xt_TPROXY: Can be used only with -p tcp or -p udp [ 129.897901][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'. [ 130.170301][ T6601] loop3: detected capacity change from 0 to 40427 [ 130.219557][ T6601] F2FS-fs (loop3): invalid crc value [ 130.227745][ T6601] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.297576][ T6601] F2FS-fs (loop3): Start checkpoint disabled! [ 130.321553][ T6601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 130.865907][ T27] kauditd_printk_skb: 256 callbacks suppressed [ 130.865924][ T27] audit: type=1800 audit(1758336252.419:271): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.198" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 131.519927][ T3495] bio_check_eod: 1513 callbacks suppressed [ 131.519948][ T3495] kworker/u4:11: attempt to access beyond end of device [ 131.519948][ T3495] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 131.543207][ T3495] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 131.554044][ T3495] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.695607][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.749702][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.877773][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.884138][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.022882][ T6662] input: syz1 as /devices/virtual/input/input7 [ 136.091673][ T6664] loop2: detected capacity change from 0 to 1024 [ 139.135036][ T6687] loop3: detected capacity change from 0 to 128 [ 140.198772][ T6687] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.278695][ T6687] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.304281][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.304409][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.311901][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.311936][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.315282][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.315404][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.327781][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.327816][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.340628][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.340661][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.347598][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.347632][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.350294][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.350324][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.351569][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.351587][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.352417][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.352435][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.353516][ T6687] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.222: No space for directory leaf checksum. Please run e2fsck -D. [ 140.353533][ T6687] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.222: checksumming directory block 0 [ 140.424503][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.087233][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.289239][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.307382][ T2198] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 143.327059][ T28] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 143.337219][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.390211][ T28] usb 2-1: config 0 descriptor?? [ 143.759484][ T2198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.776419][ T2198] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 143.784431][ T2198] usb 3-1: can't read configurations, error -71 [ 144.055513][ T28] usbhid 2-1:0.0: can't add hid device: -71 [ 144.073395][ T28] usbhid: probe of 2-1:0.0 failed with error -71 [ 144.092601][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.122894][ T28] usb 2-1: USB disconnect, device number 3 [ 144.399513][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.422649][ T5878] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.452061][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.501359][ T5878] usb 4-1: config 0 descriptor?? [ 144.524220][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 145.023369][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 145.067732][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 145.128559][ T2198] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.742969][ T2198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.859001][ T2198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.868947][ T2198] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 145.878226][ T2198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.889054][ T2198] usb 3-1: config 0 descriptor?? [ 145.969200][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 146.002484][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 146.055068][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 146.082091][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 146.101325][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.111978][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 146.138261][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 146.147857][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.156398][ T5878] pwc: recv_control_msg error -32 req 04 val 1500 [ 146.187839][ T5878] pwc: recv_control_msg error -32 req 02 val 2500 [ 146.201197][ T5878] pwc: recv_control_msg error -32 req 02 val 2400 [ 146.263016][ T6750] loop1: detected capacity change from 0 to 1764 [ 146.329571][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 146.384225][ T6738] team0: entered promiscuous mode [ 146.415914][ T6738] team_slave_0: entered promiscuous mode [ 146.418167][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 146.453797][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 146.471905][ T6738] team_slave_1: entered promiscuous mode [ 146.478527][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.500894][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.513772][ T6738] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.534059][ T5878] pwc: Registered as video103. [ 146.548019][ T6738] bridge0: port 3(macvlan2) entered blocking state [ 146.564142][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 146.585529][ T6738] bridge0: port 3(macvlan2) entered disabled state [ 146.630827][ T6738] macvlan2: entered allmulticast mode [ 146.647062][ T5878] usb 4-1: USB disconnect, device number 4 [ 146.665049][ T6738] team0: entered allmulticast mode [ 146.694958][ T6738] team_slave_0: entered allmulticast mode [ 146.715511][ T6738] team_slave_1: entered allmulticast mode [ 146.764812][ T6738] macvlan2: entered promiscuous mode [ 146.793201][ T6738] bridge0: port 3(macvlan2) entered blocking state [ 146.800825][ T6738] bridge0: port 3(macvlan2) entered forwarding state [ 147.208073][ T6757] syzkaller0: entered promiscuous mode [ 147.213839][ T6757] syzkaller0: entered allmulticast mode [ 147.238066][ T2198] usbhid 3-1:0.0: can't add hid device: -71 [ 147.244327][ T2198] usbhid: probe of 3-1:0.0 failed with error -71 [ 147.289405][ T2198] usb 3-1: USB disconnect, device number 3 [ 148.201288][ T6770] NILFS (loop1): device size too small [ 148.439863][ T6768] loop2: detected capacity change from 0 to 2048 [ 148.494652][ T6768] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.541965][ T6768] NILFS (loop2): too large filesystem blocksize: 2 ^ 347668480 KiB [ 149.444742][ T6776] loop3: detected capacity change from 0 to 64 [ 149.499270][ T6776] hfs: unable to locate alternate MDB [ 149.633843][ T6776] hfs: continuing without an alternate MDB [ 151.993601][ T6793] syzkaller0: entered promiscuous mode [ 152.008283][ T6793] syzkaller0: entered allmulticast mode [ 154.534575][ T6807] loop0: detected capacity change from 0 to 32768 [ 154.605013][ T6807] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 154.678708][ T6807] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.860084][ T27] audit: type=1800 audit(1758336276.419:272): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.255" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 155.621655][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 159.752388][ T6838] syzkaller0: entered promiscuous mode [ 159.769608][ T6838] syzkaller0: entered allmulticast mode [ 160.533013][ T6849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.588507][ T6849] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.625844][ T6849] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 160.731147][ T6849] overlayfs: d_ino too big (61, ino=9223372036854776145, xinobits=2) [ 160.740352][ T6849] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=2) [ 160.759629][ T6849] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=2) [ 160.783736][ T6849] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=2) [ 160.794887][ T6849] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=2) [ 160.805191][ T6849] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=2) [ 160.815102][ T6849] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=2) [ 160.824585][ T6849] overlayfs: d_ino too big (io.pressure, ino=4611686018427387915, xinobits=2) [ 160.834952][ T6849] overlayfs: d_ino too big (cgroup.procs, ino=4611686018427387906, xinobits=2) [ 160.848984][ T6849] overlayfs: d_ino too big (misc.current, ino=4611686018427387926, xinobits=2) [ 163.496681][ T6852] bridge0: entered promiscuous mode [ 163.503801][ T6852] vlan2: entered promiscuous mode [ 167.314963][ T6890] overlayfs: failed to get inode (-116) [ 167.337852][ T6890] overlayfs: failed to look up (bus) for ino (-116) [ 167.359046][ T6887] overlayfs: failed to get inode (-116) [ 167.382821][ T6887] overlayfs: failed to get inode (-116) [ 167.620559][ T6893] loop1: detected capacity change from 0 to 512 [ 167.816285][ T6893] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.843770][ T6893] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 167.855060][ T6893] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 167.864619][ T6893] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.281: Failed to acquire dquot type 1 [ 167.910305][ T6893] EXT4-fs (loop1): 1 truncate cleaned up [ 167.923957][ T6893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.312584][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.458739][ T6897] vlan2: entered allmulticast mode [ 170.075814][ T6910] loop0: detected capacity change from 0 to 2048 [ 170.171979][ T6911] loop3: detected capacity change from 0 to 2048 [ 170.188726][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.343237][ T6911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.491678][ T6913] loop2: detected capacity change from 0 to 40427 [ 170.547020][ T6913] F2FS-fs (loop2): invalid crc value [ 170.560689][ T6913] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.615821][ T6913] F2FS-fs (loop2): Start checkpoint disabled! [ 170.765872][ T6913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 171.494414][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.539476][ T1139] kworker/u4:10: attempt to access beyond end of device [ 171.539476][ T1139] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 171.564553][ T1139] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 171.574967][ T1139] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 171.749741][ T6926] loop1: detected capacity change from 0 to 256 [ 171.887765][ T6926] FAT-fs (loop1): Directory bread(block 64) failed [ 171.904605][ T6926] FAT-fs (loop1): Directory bread(block 65) failed [ 171.935236][ T6926] FAT-fs (loop1): Directory bread(block 66) failed [ 171.948528][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 171.957465][ T6926] FAT-fs (loop1): Directory bread(block 67) failed [ 171.965629][ T6926] FAT-fs (loop1): Directory bread(block 68) failed [ 171.975099][ T6926] FAT-fs (loop1): Directory bread(block 69) failed [ 171.993884][ T6926] FAT-fs (loop1): Directory bread(block 70) failed [ 172.020410][ T6926] FAT-fs (loop1): Directory bread(block 71) failed [ 172.037266][ T6926] FAT-fs (loop1): Directory bread(block 72) failed [ 172.043934][ T6926] FAT-fs (loop1): Directory bread(block 73) failed [ 176.775655][ T6962] loop3: detected capacity change from 0 to 4096 [ 177.637676][ T6961] sched: RT throttling activated [ 178.647898][ T6962] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 179.631773][ T6962] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 179.632220][ T6962] EXT4-fs: failed to create workqueue [ 179.647799][ T6962] EXT4-fs (loop3): mount failed [ 180.374720][ T6971] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 180.374720][ T6971] program syz.3.302 not setting count and/or reply_len properly [ 180.478504][ T6971] netlink: 'syz.3.302': attribute type 10 has an invalid length. [ 180.588119][ T6971] team0: Port device dummy0 added [ 181.832259][ T6988] loop3: detected capacity change from 0 to 256 [ 181.881891][ T6986] loop1: detected capacity change from 0 to 1024 [ 181.927016][ T6986] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 181.927180][ T6988] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 181.964514][ T6986] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 182.004170][ T6988] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 182.028303][ T6986] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 182.087910][ T6986] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.306: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 182.127944][ T6986] EXT4-fs (loop1): no journal found [ 182.145159][ T6986] EXT4-fs (loop1): can't get journal size [ 182.189485][ T6986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.246233][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.122043][ T7017] veth0_vlan: entered allmulticast mode [ 184.319784][ T7017] syzkaller0: entered promiscuous mode [ 184.335729][ T7017] syzkaller0: entered allmulticast mode [ 184.367998][ T7017] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 184.533158][ T7026] loop1: detected capacity change from 0 to 1024 [ 185.022064][ T27] audit: type=1804 audit(1758336306.569:273): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.317" name="/newroot/90/file1/bus" dev="loop1" ino=26 res=1 errno=0 [ 185.650103][ T3495] hfsplus: b-tree write err: -5, ino 4 [ 187.105545][ T7047] loop1: detected capacity change from 0 to 128 [ 187.122729][ T7047] qnx6: superblock #1 checksum error [ 187.206692][ T5802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.811577][ T7059] netlink: 80 bytes leftover after parsing attributes in process `syz.3.325'. [ 189.963422][ T7073] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 191.692063][ T7085] loop2: detected capacity change from 0 to 512 [ 191.704591][ T7085] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.723809][ T7085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.750153][ T7085] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 191.810185][ T7085] EXT4-fs (loop2): 1 truncate cleaned up [ 191.831411][ T7085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.235084][ T7096] netlink: 'syz.3.336': attribute type 12 has an invalid length. [ 193.783993][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.312649][ T7101] tipc: Started in network mode [ 194.319460][ T7101] tipc: Node identity 5ea86a6153a5, cluster identity 4711 [ 194.326859][ T7101] tipc: Enabled bearer , priority 0 [ 194.338826][ T7101] syzkaller0: entered promiscuous mode [ 194.344361][ T7101] syzkaller0: entered allmulticast mode [ 194.385730][ T7101] tipc: Resetting bearer [ 194.424979][ T7100] tipc: Resetting bearer [ 194.461730][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468760][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.508269][ T7100] tipc: Disabling bearer [ 195.021540][ T7114] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 196.116411][ T7120] loop3: detected capacity change from 0 to 16 [ 196.146820][ T7120] erofs: (device loop3): mounted with root inode @ nid 36. [ 196.439981][ T7123] loop3: detected capacity change from 0 to 8192 [ 196.462779][ T7123] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.479618][ T7123] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 196.490699][ T7123] REISERFS (device loop3): using ordered data mode [ 196.497675][ T7123] reiserfs: using flush barriers [ 196.512771][ T7123] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.529142][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 196.529277][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 196.539589][ T7123] REISERFS (device loop3): checking transaction log (loop3) [ 196.544304][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 196.579965][ T7123] REISERFS (device loop3): Using r5 hash to sort names [ 196.603948][ T7123] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 198.818704][ T7141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.333239][ T7134] loop1: detected capacity change from 0 to 32768 [ 200.626205][ T7134] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop1": -EINTR [ 203.671223][ T7163] loop1: detected capacity change from 0 to 1024 [ 203.695252][ T7164] binder: 7159:7164 ioctl c0306201 200000000080 returned -14 [ 203.802630][ T7163] EXT4-fs (loop1): filesystem is read-only [ 203.877204][ T7163] EXT4-fs (loop1): Unsupported encryption level 6 [ 204.122699][ T5878] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 204.977575][ T5878] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.600079][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.618920][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.633764][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.642377][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.652372][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.660358][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.755241][ T3495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.969608][ T3495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.514346][ T3495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.812518][ T3495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.999015][ T5791] Bluetooth: hci1: command tx timeout [ 209.436991][ T7211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.947863][ T7215] loop2: detected capacity change from 0 to 8 [ 209.964083][ T7182] chnl_net:caif_netlink_parms(): no params data found [ 211.344291][ T5791] Bluetooth: hci1: command tx timeout [ 213.409401][ T5791] Bluetooth: hci1: command tx timeout [ 213.426662][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.488531][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.495847][ T7182] bridge_slave_0: entered allmulticast mode [ 213.538404][ T7244] capability: warning: `syz.3.374' uses 32-bit capabilities (legacy support in use) [ 213.559036][ T7182] bridge_slave_0: entered promiscuous mode [ 213.872645][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.896654][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.914337][ T7182] bridge_slave_1: entered allmulticast mode [ 213.977511][ T7182] bridge_slave_1: entered promiscuous mode [ 214.550430][ T7260] tipc: Enabled bearer , priority 0 [ 214.825526][ T7261] syzkaller0: entered promiscuous mode [ 214.832283][ T7261] syzkaller0: entered allmulticast mode [ 215.106077][ T7260] tipc: Resetting bearer [ 215.192010][ T7255] tipc: Resetting bearer [ 215.342251][ T7255] tipc: Disabling bearer [ 215.390248][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.444895][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.500775][ T5791] Bluetooth: hci1: command tx timeout [ 215.647951][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 215.657271][ T7283] loop3: detected capacity change from 0 to 128 [ 215.667043][ T7283] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 215.719799][ T7283] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 215.820478][ T5802] udevd[5802]: incorrect jbd checksum on /dev/loop3 [ 216.792195][ T7182] team0: Port device team_slave_0 added [ 216.837903][ T7182] team0: Port device team_slave_1 added [ 217.324210][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.367401][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.435370][ T7182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.539026][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.546305][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.606917][ T7182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.043526][ T7289] loop3: detected capacity change from 0 to 40427 [ 218.083786][ T7289] F2FS-fs (loop3): invalid crc value [ 218.132733][ T7289] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.380784][ T7289] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 218.490218][ T7182] hsr_slave_0: entered promiscuous mode [ 219.150651][ T7182] hsr_slave_1: entered promiscuous mode [ 219.817536][ T7182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.825178][ T7182] Cannot create hsr debugfs directory [ 220.339254][ T7309] input: syz1 as /devices/virtual/input/input9 [ 220.488278][ T3495] hsr_slave_0: left promiscuous mode [ 220.576557][ T3495] hsr_slave_1: left promiscuous mode [ 220.704330][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.727353][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.758143][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.785956][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.811150][ T3495] bridge_slave_1: left allmulticast mode [ 220.833663][ T3495] bridge_slave_1: left promiscuous mode [ 220.856114][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.974211][ T3495] bridge_slave_0: left allmulticast mode [ 221.008654][ T3495] bridge_slave_0: left promiscuous mode [ 221.024854][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.110159][ T7330] loop2: detected capacity change from 0 to 47 [ 222.159193][ T7329] loop1: detected capacity change from 0 to 4096 [ 222.260653][ T3495] veth1_macvtap: left promiscuous mode [ 222.287305][ T3495] veth0_macvtap: left promiscuous mode [ 222.293495][ T3495] veth1_vlan: left promiscuous mode [ 222.330459][ T3495] veth0_vlan: left promiscuous mode [ 222.505636][ T7346] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.743563][ T27] audit: type=1800 audit(1758336344.299:274): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.387" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 222.938135][ T3495] team0 (unregistering): Port device vlan2 removed [ 223.727437][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 223.787351][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 223.893061][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.956330][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.265180][ T3495] bond0 (unregistering): Released all slaves [ 225.968330][ T7321] tipc: Enabling of bearer rejected, failed to enable media [ 227.364393][ T7182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.374861][ T7182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.386009][ T7182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.398009][ T7182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.123047][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.254408][ T7182] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.574738][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.582013][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.748058][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.756381][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.545274][ T7182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.595939][ T7182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.929744][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.697020][ T7427] loop2: detected capacity change from 0 to 32768 [ 233.706324][ T7427] jfs: Unrecognized mount option "00000000000000000000" or missing value [ 233.769114][ T5802] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.851032][ T7432] loop3: detected capacity change from 0 to 764 [ 234.071813][ T7432] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 234.471051][ T7440] ip6t_srh: unknown srh invflags 7D00 [ 234.576589][ T7182] veth0_vlan: entered promiscuous mode [ 234.696006][ T7182] veth1_vlan: entered promiscuous mode [ 234.922016][ T7182] veth0_macvtap: entered promiscuous mode [ 235.133500][ T7182] veth1_macvtap: entered promiscuous mode [ 235.193145][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.483948][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.816359][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.828065][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.857521][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.937208][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.976401][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.073174][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.084234][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.096537][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.113160][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.125240][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.141983][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.159508][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.278463][ T7182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.345087][ T7182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.396009][ T7182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.475839][ T7182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.549686][ T7465] loop3: detected capacity change from 0 to 1024 [ 238.843374][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.865140][ T7471] loop2: detected capacity change from 0 to 1024 [ 238.946764][ T7471] ext4: Unknown parameter 'hash' [ 238.947209][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.328921][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.368576][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.509749][ T7465] EXT4-fs: Ignoring removed i_version option [ 239.515870][ T7465] EXT4-fs: inline encryption not supported [ 239.540292][ T7465] EXT4-fs (loop3): Test dummy encryption mode enabled [ 239.766719][ T7465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.071514][ T7465] netlink: 'syz.3.408': attribute type 30 has an invalid length. [ 240.764144][ T7465] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 241.119466][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.852489][ T27] audit: type=1326 audit(1758336363.159:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.1.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee11d8ec29 code=0x0 [ 247.063036][ T7565] netlink: 264 bytes leftover after parsing attributes in process `syz.2.422'. [ 247.072484][ T7565] netlink: 56 bytes leftover after parsing attributes in process `syz.2.422'. [ 252.622988][ T7600] loop1: detected capacity change from 0 to 32768 [ 252.648537][ T7600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.432 (7600) [ 252.673039][ T7600] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.683852][ T7600] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 252.693254][ T7600] BTRFS info (device loop1): enabling disk space caching [ 252.700338][ T7600] BTRFS info (device loop1): setting nodatasum [ 252.707158][ T7600] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 252.716782][ T7600] BTRFS info (device loop1): force lzo compression, level 0 [ 252.724173][ T7600] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 252.733006][ T7600] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 252.741472][ T7600] BTRFS error (device loop1): cannot disable free space tree [ 252.753123][ T7600] BTRFS error (device loop1): open_ctree failed: -22 [ 255.891254][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898290][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.301244][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.436'. [ 256.545414][ T7639] binder: 7636:7639 ioctl c0306201 0 returned -14 [ 256.937421][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 256.944148][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 259.489127][ T7667] loop4: detected capacity change from 0 to 1024 [ 259.604143][ T7667] hfsplus: unable to find HFS+ superblock [ 260.716203][ T7676] loop4: detected capacity change from 0 to 512 [ 261.788748][ T5802] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.824623][ T7680] loop2: detected capacity change from 0 to 65 [ 261.967679][ T7680] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 266.283394][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.450'. [ 269.023760][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 270.137508][ T7736] loop1: detected capacity change from 0 to 512 [ 271.372960][ T7739] loop4: detected capacity change from 0 to 131072 [ 271.432264][ T7739] F2FS-fs (loop4): invalid crc value [ 271.538758][ T7739] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.577700][ T7745] block nbd3: shutting down sockets [ 271.595418][ T7739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 272.034596][ T7753] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 274.168720][ T7777] netlink: 264 bytes leftover after parsing attributes in process `syz.1.461'. [ 274.177943][ T7777] netlink: 56 bytes leftover after parsing attributes in process `syz.1.461'. [ 276.726124][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 278.230561][ T7829] loop1: detected capacity change from 0 to 256 [ 278.249959][ T7829] exfat: Bad value for 'gid' [ 280.937772][ T7848] 9pnet_fd: Insufficient options for proto=fd [ 281.272830][ T7854] binder: 7850:7854 ioctl c0306201 0 returned -14 [ 281.553008][ T7858] loop2: detected capacity change from 0 to 128 [ 281.600263][ T7858] UDF-fs: bad mount option "" or missing value [ 282.264837][ T7865] loop1: detected capacity change from 0 to 32768 [ 285.019284][ T7869] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 285.052227][ T7869] xt_policy: neither incoming nor outgoing policy selected [ 286.357993][ T7871] syz.2.482: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 286.379054][ T7871] CPU: 0 PID: 7871 Comm: syz.2.482 Not tainted syzkaller #0 [ 286.386354][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.396422][ T7871] Call Trace: [ 286.399721][ T7871] [ 286.402675][ T7871] dump_stack_lvl+0x16c/0x230 [ 286.407386][ T7871] ? show_regs_print_info+0x20/0x20 [ 286.412597][ T7871] ? load_image+0x3b0/0x3b0 [ 286.417123][ T7871] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 286.423564][ T7871] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 286.430083][ T7871] warn_alloc+0x210/0x300 [ 286.434441][ T7871] ? zone_watermark_ok_safe+0x230/0x230 [ 286.440017][ T7871] ? _raw_spin_unlock+0x28/0x40 [ 286.444870][ T7871] ? __vb2_queue_alloc+0x794/0x1410 [ 286.450075][ T7871] __vmalloc_node_range+0x662/0x1320 [ 286.455395][ T7871] ? free_vm_area+0x50/0x50 [ 286.459910][ T7871] vmalloc_user+0x74/0x80 [ 286.464253][ T7871] ? vb2_vmalloc_alloc+0xef/0x330 [ 286.469284][ T7871] vb2_vmalloc_alloc+0xef/0x330 [ 286.474137][ T7871] ? __copy_timestamp+0x1f0/0x1f0 [ 286.479160][ T7871] __vb2_queue_alloc+0x794/0x1410 [ 286.484197][ T7871] vb2_core_reqbufs+0xa57/0x1140 [ 286.489146][ T7871] ? vb2_verify_memory_type+0x570/0x570 [ 286.494696][ T7871] ? vb2_reqbufs+0x360/0x5a0 [ 286.499314][ T7871] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 286.504705][ T7871] __video_do_ioctl+0xcbd/0xdd0 [ 286.509588][ T7871] ? video_ioctl2+0x30/0x30 [ 286.514108][ T7871] ? __might_fault+0xc6/0x120 [ 286.518975][ T7871] ? __might_fault+0xaa/0x120 [ 286.523772][ T7871] video_usercopy+0x838/0x1330 [ 286.528648][ T7871] ? video_ioctl2+0x30/0x30 [ 286.533163][ T7871] ? v4l_printk_ioctl+0x160/0x160 [ 286.538203][ T7871] v4l2_ioctl+0x18a/0x1e0 [ 286.542553][ T7871] ? v4l2_poll+0x2b0/0x2b0 [ 286.546980][ T7871] __se_sys_ioctl+0xfd/0x170 [ 286.551579][ T7871] do_syscall_64+0x55/0xb0 [ 286.556002][ T7871] ? clear_bhb_loop+0x40/0x90 [ 286.560679][ T7871] ? clear_bhb_loop+0x40/0x90 [ 286.565367][ T7871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.571270][ T7871] RIP: 0033:0x7fccac58ec29 [ 286.575688][ T7871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.595298][ T7871] RSP: 002b:00007fccad499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.603717][ T7871] RAX: ffffffffffffffda RBX: 00007fccac7d5fa0 RCX: 00007fccac58ec29 [ 286.611692][ T7871] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 286.619697][ T7871] RBP: 00007fccac611e41 R08: 0000000000000000 R09: 0000000000000000 [ 286.627683][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.635660][ T7871] R13: 00007fccac7d6038 R14: 00007fccac7d5fa0 R15: 00007ffe261c7938 [ 286.643671][ T7871] [ 286.732247][ T7871] Mem-Info: [ 286.735520][ T7871] active_anon:13509 inactive_anon:0 isolated_anon:0 [ 286.735520][ T7871] active_file:18125 inactive_file:3501 isolated_file:0 [ 286.735520][ T7871] unevictable:768 dirty:54 writeback:0 [ 286.735520][ T7871] slab_reclaimable:10546 slab_unreclaimable:92731 [ 286.735520][ T7871] mapped:31400 shmem:8137 pagetables:751 [ 286.735520][ T7871] sec_pagetables:0 bounce:0 [ 286.735520][ T7871] kernel_misc_reclaimable:0 [ 286.735520][ T7871] free:1363741 free_pcp:13278 free_cma:0 [ 286.782541][ T7871] Node 0 active_anon:55036kB inactive_anon:0kB active_file:72452kB inactive_file:13868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126676kB dirty:216kB writeback:0kB shmem:32112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11840kB pagetables:3004kB sec_pagetables:0kB all_unreclaimable? no [ 286.834769][ T7871] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 286.986554][ T7871] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.057407][ T7871] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 287.075662][ T7871] Node 0 DMA32 free:1553392kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:43528kB inactive_anon:0kB active_file:72312kB inactive_file:12880kB unevictable:1536kB writepending:116kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:33300kB local_pcp:21200kB free_cma:0kB [ 287.237149][ T7871] lowmem_reserve[]: 0 0 1 1 1 [ 287.242385][ T7871] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:220kB inactive_anon:0kB active_file:140kB inactive_file:996kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 287.270018][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.286432][ T7871] lowmem_reserve[]: 0 0 0 0 0 [ 287.291659][ T7871] Node 1 Normal free:3893796kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23964kB local_pcp:6336kB free_cma:0kB [ 287.321301][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.617159][ T7871] lowmem_reserve[]: 0 0 0 0 0 [ 287.635315][ T7871] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 288.047772][ T7871] Node 0 DMA32: 33*4kB (UM) 23*8kB (UME) 616*16kB (ME) 487*32kB (UME) 322*64kB (UME) 134*128kB (M) 58*256kB (M) 15*512kB (UM) 5*1024kB (ME) 1*2048kB (M) 356*4096kB (UM) = 1551388kB [ 288.153344][ T7871] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 288.227249][ T7871] Node 1 Normal: 249*4kB (UME) 66*8kB (UME) 45*16kB (UME) 119*32kB (UE) 36*64kB (UME) 9*128kB (UM) 3*256kB (ME) 1*512kB (U) 2*1024kB (UM) 1*2048kB (M) 947*4096kB (ME) = 3893796kB [ 288.288435][ T7871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.325275][ T7871] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.366058][ T7871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.405846][ T7901] team0: Port device dummy0 removed [ 288.411352][ T7871] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.416222][ T7901] bridge_slave_0: left promiscuous mode [ 288.445608][ T7906] loop4: detected capacity change from 0 to 512 [ 288.467237][ T7871] 25902 total pagecache pages [ 288.472568][ T7871] 0 pages in swap cache [ 288.476743][ T7871] Free swap = 124456kB [ 288.509952][ T7906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.520075][ T7906] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 288.531446][ T7906] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 288.540203][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.547131][ T7871] Total swap = 124996kB [ 288.553727][ T7906] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 288.571882][ T7871] 2097051 pages RAM [ 288.581072][ T7871] 0 pages HighMem/MovableOnly [ 288.590337][ T7871] 416137 pages reserved [ 288.609783][ T7871] 0 pages cma reserved [ 288.652741][ T7906] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 288.664707][ T7906] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 288.693778][ T7906] EXT4-fs (loop4): too many log groups per flexible block group [ 288.728635][ T7901] bridge_slave_1: left allmulticast mode [ 288.734544][ T7906] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 288.748240][ T7906] EXT4-fs (loop4): mount failed [ 288.758294][ T7901] bridge_slave_1: left promiscuous mode [ 288.764169][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.808713][ T7914] loop3: detected capacity change from 0 to 64 [ 288.924829][ T7901] bond0: (slave bond_slave_0): Releasing backup interface [ 288.974612][ T7901] bond0: (slave bond_slave_1): Releasing backup interface [ 289.156699][ T7901] team0: Port device team_slave_0 removed [ 289.273068][ T7901] team0: Port device team_slave_1 removed [ 289.308656][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.331678][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.351983][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.395169][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.461272][ T7903] team0: Mode changed to "activebackup" [ 289.540637][ T7913] vlan0: entered promiscuous mode [ 289.612279][ T7913] team0: Port device vlan0 added [ 291.123064][ T7935] loop1: detected capacity change from 0 to 1024 [ 291.485542][ T7935] hfsplus: unable to find HFS+ superblock [ 291.939534][ T7933] binder: 7928:7933 ioctl c0306201 0 returned -14 [ 292.014324][ T5802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.410906][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 292.763438][ T7942] loop4: detected capacity change from 0 to 32768 [ 292.770820][ T7942] XFS: ikeep mount option is deprecated. [ 292.843652][ T7942] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.131384][ T7955] binder: 7944:7955 ioctl c0306201 0 returned -14 [ 293.372635][ T7942] XFS (loop4): Ending clean mount [ 293.409691][ T7942] XFS (loop4): Quotacheck needed: Please wait. [ 294.160563][ T7975] loop3: detected capacity change from 0 to 128 [ 296.676002][ T7975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 296.754887][ T7942] XFS (loop4): Quotacheck: Done. [ 296.804593][ T7975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.977284][ T7182] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.191421][ T7983] loop2: detected capacity change from 0 to 2048 [ 298.207500][ T7229] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.631021][ T7995] loop3: detected capacity change from 0 to 256 [ 298.750856][ T7995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 300.176710][ T8013] loop3: detected capacity change from 0 to 1024 [ 301.628701][ T8013] hfsplus: unable to find HFS+ superblock [ 301.690229][ T5802] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.454569][ T8011] loop4: detected capacity change from 0 to 32768 [ 302.489772][ T8011] (syz.4.503,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.552481][ T8011] (syz.4.503,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.649543][ T8011] JBD2: Ignoring recovery information on journal [ 302.770100][ T8011] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 302.846334][ T8029] tipc: Started in network mode [ 302.880742][ T8029] tipc: Node identity , cluster identity 4711 [ 302.913293][ T8029] tipc: Failed to obtain node identity [ 302.932842][ T8029] tipc: Enabling of bearer rejected, failed to enable media [ 302.958637][ T8033] syzkaller0: entered promiscuous mode [ 303.037998][ T8033] syzkaller0: entered allmulticast mode [ 303.980063][ T8019] loop3: detected capacity change from 0 to 32768 [ 304.057799][ T8046] loop1: detected capacity change from 0 to 24 [ 304.065121][ T8046] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 304.083072][ T8046] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 304.350146][ T8011] ocfs2: Unmounting device (7,4) on (node local) [ 306.601903][ T28] IPVS: starting estimator thread 0... [ 306.727401][ T8067] IPVS: using max 15 ests per chain, 36000 per kthread [ 308.168419][ T8090] loop1: detected capacity change from 0 to 32768 [ 308.188382][ T8090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.514 (8090) [ 308.429241][ T8090] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.441781][ T8090] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 308.450720][ T8090] BTRFS info (device loop1): enabling disk space caching [ 308.457921][ T8090] BTRFS info (device loop1): setting nodatasum [ 308.464178][ T8090] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 308.473656][ T8090] BTRFS info (device loop1): force lzo compression, level 0 [ 308.483118][ T8090] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 308.492829][ T8090] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 308.501497][ T8090] BTRFS error (device loop1): cannot disable free space tree [ 309.220282][ T8090] BTRFS error (device loop1): open_ctree failed: -22 [ 310.402331][ T8109] loop2: detected capacity change from 0 to 1024 [ 310.711916][ T5802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5802) [ 312.093935][ T27] audit: type=1804 audit(1758336433.519:276): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.519" name="/newroot/128/file1/bus" dev="loop2" ino=26 res=1 errno=0 [ 312.198250][ T8124] hfsplus: xattr searching failed [ 312.596759][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 313.048802][ T8138] veth3: entered promiscuous mode [ 313.053957][ T8138] veth3: entered allmulticast mode [ 314.134078][ T8144] x_tables: ip_tables: osf match: only valid for protocol 6 [ 315.312402][ T8148] tipc: Enabled bearer , priority 0 [ 315.463654][ T8151] syzkaller0: entered promiscuous mode [ 315.504736][ T8151] syzkaller0: entered allmulticast mode [ 315.861564][ T8162] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1970299695.1831805743) [ 316.070275][ T8151] tipc: Resetting bearer [ 316.204496][ T8147] tipc: Resetting bearer [ 316.433138][ T5855] tipc: Node number set to 218983009 [ 316.683516][ T8147] tipc: Disabling bearer [ 317.342025][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.348685][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.300895][ T8170] loop2: detected capacity change from 0 to 32768 [ 319.486811][ T8170] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.530 (8170) [ 319.648462][ T8186] loop3: detected capacity change from 0 to 32768 [ 319.892439][ T8170] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 319.903361][ T8170] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 321.117614][ T8190] read_mapping_page failed! [ 321.280126][ T27] audit: type=1800 audit(1758336441.519:277): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.534" name="file1" dev="loop3" ino=9 res=0 errno=0 [ 321.345235][ T8170] BTRFS info (device loop2): use no compression [ 321.411525][ T8170] BTRFS info (device loop2): using free space tree [ 321.449617][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 321.451507][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 321.489423][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 321.538107][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 321.593254][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 321.651783][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 321.693090][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 321.734073][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 321.784673][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 321.826458][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 321.900898][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 322.024678][ T8170] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 322.854461][ T8170] BTRFS error (device loop2): open_ctree failed: -12 [ 328.618052][ T8243] loop1: detected capacity change from 0 to 32768 [ 328.625247][ T8243] XFS: ikeep mount option is deprecated. [ 328.719869][ T8243] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.126055][ T8243] XFS (loop1): Ending clean mount [ 329.141505][ T8243] XFS (loop1): Quotacheck needed: Please wait. [ 329.240217][ T8243] XFS (loop1): Quotacheck: Done. [ 330.311012][ T5793] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 335.669103][ T8283] loop2: detected capacity change from 0 to 512 [ 337.469821][ T8283] EXT4-fs (loop2): orphan cleanup on readonly fs [ 337.479241][ T8283] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 337.489776][ T8283] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 337.499957][ T8283] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.552: Failed to acquire dquot type 1 [ 337.522465][ T8283] EXT4-fs (loop2): 1 truncate cleaned up [ 337.549744][ T8283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.941698][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.222398][ T8308] loop1: detected capacity change from 0 to 256 [ 341.229260][ T8312] netlink: 140 bytes leftover after parsing attributes in process `syz.4.560'. [ 341.252153][ T5791] Bluetooth: hci1: link tx timeout [ 341.259560][ T5791] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.262241][ T8308] exfat: Bad value for 'gid' [ 341.277219][ T8312] netlink: 'syz.4.560': attribute type 5 has an invalid length. [ 341.518933][ T8312] netlink: 'syz.4.560': attribute type 10 has an invalid length. [ 341.628424][ T8312] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.432341][ T8312] bond0: (slave team0): Enslaving as an active interface with an up link [ 342.971557][ T8328] loop2: detected capacity change from 0 to 40427 [ 343.012937][ T8328] F2FS-fs (loop2): invalid crc value [ 343.025687][ T8328] F2FS-fs (loop2): Found nat_bits in checkpoint [ 343.090785][ T8328] F2FS-fs (loop2): Start checkpoint disabled! [ 343.111130][ T8328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 343.337785][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 343.723663][ T8336] syz.2.564: attempt to access beyond end of device [ 343.723663][ T8336] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 343.748667][ T27] audit: type=1800 audit(1758336465.259:278): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.564" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 343.748771][ T8336] syz.2.564: attempt to access beyond end of device [ 343.748771][ T8336] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.793357][ T8336] syz.2.564: attempt to access beyond end of device [ 343.793357][ T8336] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.817560][ T8336] syz.2.564: attempt to access beyond end of device [ 343.817560][ T8336] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.833782][ T8336] syz.2.564: attempt to access beyond end of device [ 343.833782][ T8336] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.859512][ T8336] syz.2.564: attempt to access beyond end of device [ 343.859512][ T8336] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 343.875780][ T8336] syz.2.564: attempt to access beyond end of device [ 343.875780][ T8336] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.891639][ T8336] syz.2.564: attempt to access beyond end of device [ 343.891639][ T8336] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 343.907198][ T8336] syz.2.564: attempt to access beyond end of device [ 343.907198][ T8336] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 343.923003][ T8336] syz.2.564: attempt to access beyond end of device [ 343.923003][ T8336] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 344.902060][ T1095] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 344.934507][ T1095] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 344.956633][ T1095] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 345.507454][ T8339] tipc: Started in network mode [ 345.512399][ T8339] tipc: Node identity aab13b8a327, cluster identity 4711 [ 345.627513][ T8339] tipc: Enabled bearer , priority 0 [ 345.709816][ T8341] syzkaller0: entered promiscuous mode [ 345.747297][ T8341] syzkaller0: entered allmulticast mode [ 345.927865][ T8339] tipc: Resetting bearer [ 345.972724][ T8337] tipc: Resetting bearer [ 346.037522][ T8337] tipc: Disabling bearer [ 346.879386][ T8349] UBIFS error (pid: 8349): cannot open "(null)", error -22 [ 348.382897][ T8363] loop1: detected capacity change from 0 to 512 [ 348.947230][ T8363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 348.956059][ T8363] EXT4-fs (loop1): Test dummy encryption mode enabled [ 349.102136][ T8363] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.573: casefold flag without casefold feature [ 349.261079][ T8363] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.573: couldn't read orphan inode 15 (err -117) [ 349.363436][ T8363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.439293][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.943019][ T8437] loop2: detected capacity change from 0 to 256 [ 351.287318][ T8437] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.347787][ T8437] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 351.384165][ T8437] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 355.406233][ T8453] loop2: detected capacity change from 0 to 2048 [ 355.499336][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.677279][ T8453] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.826798][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 356.012928][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.126284][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.052081][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.584'. [ 362.405291][ T8496] loop2: detected capacity change from 0 to 4096 [ 362.585585][ T8499] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.358306][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.369242][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.377867][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.388475][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.400326][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 363.412473][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.474890][ T27] audit: type=1800 audit(1758336484.859:279): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.592" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 365.410567][ T8514] tipc: Enabled bearer , priority 10 [ 365.489072][ T5791] Bluetooth: hci4: command tx timeout [ 365.704049][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 366.740508][ T5855] tipc: Node number set to 2562800522 [ 367.568518][ T5791] Bluetooth: hci4: command tx timeout [ 367.870933][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.878658][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.886189][ T8501] bridge_slave_0: entered allmulticast mode [ 367.894557][ T8501] bridge_slave_0: entered promiscuous mode [ 367.925744][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.933344][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.941077][ T8501] bridge_slave_1: entered allmulticast mode [ 367.951795][ T8501] bridge_slave_1: entered promiscuous mode [ 368.325554][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.647182][ T5791] Bluetooth: hci4: command tx timeout [ 369.909215][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.043962][ T8501] team0: Port device team_slave_0 added [ 371.059670][ T8501] team0: Port device team_slave_1 added [ 372.627173][ T5791] Bluetooth: hci4: command tx timeout [ 372.716826][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.757939][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.847056][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.895606][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.914433][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.940414][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.974541][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.996371][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.604'. [ 373.170575][ T8501] hsr_slave_0: entered promiscuous mode [ 373.204044][ T8501] hsr_slave_1: entered promiscuous mode [ 373.212290][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.734120][ T8501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.744418][ T8501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.770645][ T8501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.780114][ T8501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.101200][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.162674][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.193437][ T8419] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.200705][ T8419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.262960][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.270292][ T8400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.296143][ T8591] kvm: pic: non byte read [ 377.306598][ T8591] kvm: pic: non byte read [ 377.332032][ T8591] kvm: pic: non byte read [ 377.341168][ T8591] kvm: pic: non byte read [ 377.347675][ T8591] kvm: pic: non byte read [ 377.358385][ T8591] kvm: pic: non byte read [ 377.362910][ T8591] kvm: pic: non byte read [ 377.367832][ T8591] kvm: pic: non byte read [ 377.372270][ T8591] kvm: pic: non byte read [ 377.376701][ T8591] kvm: pic: non byte read [ 378.388852][ T8501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.472758][ T8604] loop1: detected capacity change from 0 to 512 [ 378.551042][ T8604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.564524][ T8604] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.772617][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.779786][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.812833][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.894814][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.393388][ T8501] veth0_vlan: entered promiscuous mode [ 380.437470][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 380.440920][ T8501] veth1_vlan: entered promiscuous mode [ 380.546944][ T8501] veth0_macvtap: entered promiscuous mode [ 380.611262][ T8501] veth1_macvtap: entered promiscuous mode [ 380.649624][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.663469][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.694012][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.834734][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 380.874575][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.939583][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.950454][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.961355][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.972741][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.351810][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.667122][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.674358][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.691020][ T9] usb 2-1: config 0 descriptor?? [ 381.970897][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.299409][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.327451][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.387542][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.407085][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.430865][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.463335][ T8501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.492445][ T8501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.504312][ T8501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.516462][ T8501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.825402][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.874295][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.449346][ T8649] loop2: detected capacity change from 0 to 1024 [ 383.456898][ T8649] EXT4-fs: Ignoring removed orlov option [ 383.462765][ T8649] EXT4-fs: Ignoring removed i_version option [ 383.594514][ T8649] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 383.690996][ T8649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.725457][ T8400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.768078][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 383.774147][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 383.784571][ T9] usb 2-1: USB disconnect, device number 4 [ 383.795606][ T8400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.928588][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.083564][ T8660] loop1: detected capacity change from 0 to 1024 [ 384.103463][ T8662] tipc: Enabling of bearer rejected, failed to enable media [ 386.337870][ T8672] mmap: syz.5.590 (8672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 388.670787][ T8669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.678843][ T8669] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 388.882202][ T8669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.888372][ T8669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 388.895932][ T8669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.903176][ T8669] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 388.996655][ T8669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 389.006759][ T8669] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 389.073015][ T8669] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 390.518141][ T8690] loop2: detected capacity change from 0 to 2048 [ 390.560178][ T8692] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.693268][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 390.886049][ T8698] overlayfs: failed to clone upperpath [ 390.928490][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 390.929083][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 391.092855][ T5791] Bluetooth: hci4: command 0x0c1a tx timeout [ 392.358690][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 392.767172][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 393.014594][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 393.020870][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 393.167231][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.676846][ T8731] UBIFS error (pid: 8731): cannot open "./file0", error -22 [ 395.317524][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout [ 400.155413][ T8768] loop5: detected capacity change from 0 to 1024 [ 401.277794][ T8778] warning: `syz.2.649' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 406.392621][ T8817] loop1: detected capacity change from 0 to 256 [ 407.272491][ T8817] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.285134][ T8817] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 407.813918][ T8817] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 408.256287][ T8822] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 411.686864][ T8852] loop5: detected capacity change from 0 to 512 [ 411.797261][ T8852] EXT4-fs warning (device loop5): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 411.831356][ T8852] EXT4-fs (loop5): mount failed [ 414.431228][ T787] IPVS: starting estimator thread 0... [ 414.527168][ T8872] IPVS: using max 16 ests per chain, 38400 per kthread [ 414.752705][ T8879] netlink: 'syz.1.675': attribute type 10 has an invalid length. [ 414.813457][ T8879] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 429.320038][ T8956] loop5: detected capacity change from 0 to 40427 [ 429.345954][ T8956] F2FS-fs (loop5): invalid crc value [ 429.365149][ T8956] F2FS-fs (loop5): Found nat_bits in checkpoint [ 429.392638][ T8956] F2FS-fs (loop5): Start checkpoint disabled! [ 429.407400][ T8956] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 429.502826][ T27] audit: type=1800 audit(1758336551.049:280): pid=8963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.694" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 429.601670][ T8963] bio_check_eod: 182 callbacks suppressed [ 429.601730][ T8963] syz.5.694: attempt to access beyond end of device [ 429.601730][ T8963] loop5: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 431.208479][ T8408] kworker/u4:19: attempt to access beyond end of device [ 431.208479][ T8408] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 431.273772][ T8408] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 431.280725][ T8408] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 432.296954][ T8970] loop1: detected capacity change from 0 to 32768 [ 433.418838][ T8970] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop1": -EINTR [ 433.509491][ T8992] loop5: detected capacity change from 0 to 1024 [ 433.579334][ T8992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.879189][ T8998] netlink: 'syz.4.701': attribute type 24 has an invalid length. [ 433.907073][ T8501] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.201436][ T9012] loop5: detected capacity change from 0 to 256 [ 436.041716][ T9014] loop5: detected capacity change from 0 to 16 [ 436.096671][ T9014] erofs: (device loop5): mounted with root inode @ nid 36. [ 439.196683][ T9025] fuse: Bad value for 'user_id' [ 439.740926][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.747436][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.636637][ T9059] loop1: detected capacity change from 0 to 128 [ 443.654829][ T9059] qnx6: invalid mount options. [ 447.447659][ T9083] loop5: detected capacity change from 0 to 2048 [ 447.488305][ T9083] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 447.500451][ T9083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.662538][ T9080] kvm: kvm [9079]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 449.501775][ T9080] kvm: kvm [9079]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 449.594595][ T9099] loop5: detected capacity change from 0 to 16 [ 449.627880][ T9099] erofs: (device loop5): mounted with root inode @ nid 36. [ 449.785064][ T9100] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 449.803952][ T9100] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 449.815923][ T9100] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 449.835503][ T9100] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 449.846363][ T9100] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 449.857717][ T9100] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 452.498622][ T9109] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 452.729966][ T9109] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 452.739246][ T9115] loop5: detected capacity change from 0 to 8 [ 452.760528][ T9115] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 452.797970][ T9038] udevd[9038]: incorrect cramfs checksum on /dev/loop5 [ 453.179684][ T9119] cramfs: Error -5 while decompressing! [ 453.185777][ T9119] cramfs: ffffffff96fdc308(26)->ffff8880771cc000(4096) [ 453.192880][ T9119] cramfs: Error -3 while decompressing! [ 453.198503][ T9119] cramfs: ffffffff96fdc322(26)->ffff88805b3a6000(4096) [ 453.205734][ T9119] cramfs: Error -3 while decompressing! [ 453.211829][ T9119] cramfs: ffffffff96fdc33c(16)->ffff88805b7a5000(4096) [ 453.219024][ T9119] cramfs: Error -5 while decompressing! [ 453.224931][ T9119] cramfs: ffffffff96fdc308(26)->ffff8880771cc000(4096) [ 453.233259][ T27] audit: type=1800 audit(1758336575.956:281): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.731" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 457.274468][ T9138] overlayfs: failed to clone upperpath [ 459.087537][ T5878] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 459.271405][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 459.385322][ T5878] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 459.401773][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.430609][ T5878] usb 6-1: Product: syz [ 459.434840][ T5878] usb 6-1: Manufacturer: syz [ 459.439465][ T5878] usb 6-1: SerialNumber: syz [ 459.536744][ T5878] usb 6-1: config 0 descriptor?? [ 459.570105][ T5878] as10x_usb: device has been detected [ 459.582106][ T5878] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 459.659363][ T5878] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 459.890377][ T5878] as10x_usb: error during firmware upload part1 [ 459.917827][ T5878] Registered device Sky IT Digital Key (green led) [ 460.065975][ T9172] overlayfs: failed to clone upperpath [ 462.774152][ T9182] delete_channel: no stack [ 464.678006][ T9152] delete_channel: no stack [ 464.719851][ T9127] usb 6-1: USB disconnect, device number 2 [ 464.840503][ T9127] Unregistered device Sky IT Digital Key (green led) [ 464.874210][ T9127] as10x_usb: device has been disconnected [ 466.498238][ T9212] loop5: detected capacity change from 0 to 512 [ 466.628357][ T9212] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.754: casefold flag without casefold feature [ 466.675665][ T9212] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.754: couldn't read orphan inode 15 (err -117) [ 466.743853][ T9212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.139437][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.755'. [ 468.622945][ T8501] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.266142][ T9238] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 473.500775][ T9243] pim6reg: entered allmulticast mode [ 475.660374][ T9271] loop5: detected capacity change from 0 to 8192 [ 476.379180][ T9271] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 476.392826][ T9271] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 476.410440][ T9271] REISERFS (device loop5): using ordered data mode [ 476.417107][ T9271] reiserfs: using flush barriers [ 476.436299][ T9271] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 476.455075][ T9271] REISERFS (device loop5): checking transaction log (loop5) [ 476.536893][ T9271] REISERFS (device loop5): Using r5 hash to sort names [ 476.547764][ T9271] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 478.739251][ T9290] overlayfs: failed to clone lowerpath [ 481.762873][ T9307] syz.2.771 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 481.903360][ T9308] loop5: detected capacity change from 0 to 128 [ 481.912449][ T9308] EXT4-fs: inline encryption not supported [ 483.604318][ T9308] EXT4-fs (loop5): Test dummy encryption mode enabled [ 483.627438][ T9308] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.651330][ T9308] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 484.270834][ T8501] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.991306][ T9328] befs: (nullb0): invalid magic header [ 485.468348][ T9328] loop5: detected capacity change from 0 to 8192 [ 486.270407][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'. [ 486.394754][ T9334] x_tables: ip_tables: ah match: only valid for protocol 51 [ 487.612761][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.781716][ T27] audit: type=1107 audit(1758336612.216:282): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 487.796332][ T9347] loop5: detected capacity change from 0 to 1024 [ 487.827200][ T9347] hfsplus: unable to parse mount options [ 489.212217][ T9364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.786'. [ 490.321359][ T9369] (null): rxe_set_mtu: Set mtu to 1024 [ 490.329197][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 490.339497][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 490.347974][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 490.442760][ T9369] infiniband syz0: set active [ 490.447727][ T9369] infiniband syz0: added wlan1 [ 490.460810][ T5855] wlan1 speed is unknown, defaulting to 1000 [ 490.518187][ T9369] RDS/IB: syz0: added [ 490.523110][ T9369] smc: adding ib device syz0 with port count 1 [ 490.529384][ T9369] smc: ib device syz0 port 1 has pnetid [ 490.540539][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 490.636672][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 490.731051][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 490.826066][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 490.918994][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 491.018341][ T5855] wlan1 speed is unknown, defaulting to 1000 [ 491.423283][ T9369] loop5: detected capacity change from 0 to 32768 [ 491.430238][ T9369] XFS: ikeep mount option is deprecated. [ 491.436020][ T9369] XFS (loop5): invalid logbufs value: 1 [not 2-8] [ 491.653563][ T9369] loop5: detected capacity change from 0 to 128 [ 491.662693][ T9369] ufs: Invalid option: "onerror=repa9 [ 491.662693][ T9369] wt  [ 491.662693][ T9369] ir" or missing value [ 491.675518][ T9369] ufs: wrong mount options [ 491.746698][ T9373] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.464772][ T9403] 8021q: VLANs not supported on ip6tnl0 [ 498.062392][ T9420] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 498.442721][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 498.583879][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 499.645873][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.037840][ T9425] syz.4.804 (9425) used greatest stack depth: 15600 bytes left [ 500.720496][ T9434] loop5: detected capacity change from 0 to 2048 [ 501.309354][ T9435] fuse: Invalid rootmode [ 502.699017][ T9446] netlink: 'syz.4.808': attribute type 10 has an invalid length. [ 504.471279][ T9446] bond0: (slave wlan1): Releasing backup interface [ 504.503377][ T9446] team0: Port device wlan1 added [ 517.109800][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 523.674210][ T9573] vxfs: WRONG superblock magic 00000000 at 1 [ 523.681257][ T9573] vxfs: WRONG superblock magic 00000000 at 8 [ 523.687306][ T9573] vxfs: can't find superblock. [ 524.276721][ T9578] loop5: detected capacity change from 0 to 512 [ 524.291662][ T9578] ext2: Unknown parameter 'nouser_xattr' [ 524.320436][ T9580] netlink: 188 bytes leftover after parsing attributes in process `syz.1.835'. [ 524.622774][ T9587] lo speed is unknown, defaulting to 1000 [ 524.628988][ T9587] lo speed is unknown, defaulting to 1000 [ 524.636659][ T9587] lo speed is unknown, defaulting to 1000 [ 524.649319][ T9587] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 524.667683][ T9587] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 524.777211][ T9587] lo speed is unknown, defaulting to 1000 [ 524.786045][ T9587] lo speed is unknown, defaulting to 1000 [ 524.794673][ T9587] lo speed is unknown, defaulting to 1000 [ 524.802073][ T9587] lo speed is unknown, defaulting to 1000 [ 524.810698][ T9587] lo speed is unknown, defaulting to 1000 [ 524.863191][ T9588] smc: removing ib device syz0 [ 526.051737][ T9588] ------------[ cut here ]------------ [ 526.057317][ T9588] WARNING: CPU: 1 PID: 9588 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50 [ 526.068272][ T9588] Modules linked in: [ 526.072191][ T9588] CPU: 1 PID: 9588 Comm: syz.5.836 Not tainted syzkaller #0 [ 526.079577][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.089671][ T9588] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 526.095182][ T9588] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 b1 1a fa 48 83 3b 00 75 07 e8 65 66 c3 f9 5b c3 e8 5e 66 c3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 526.114830][ T9588] RSP: 0018:ffffc9000e277168 EFLAGS: 00010246 [ 526.120928][ T9588] RAX: ffffffff87c23142 RBX: ffff88802f1dd298 RCX: 0000000000080000 [ 526.128943][ T9588] RDX: ffffc9001248a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 526.136930][ T9588] RBP: 0000000000000002 R08: ffff88802f1dc743 R09: 1ffff11005e3b8e8 [ 526.145944][ T9588] R10: dffffc0000000000 R11: ffffed1005e3b8e9 R12: dffffc0000000000 [ 526.154062][ T9588] R13: 1ffff92001c4ee48 R14: ffffffff87c077e0 R15: dffffc0000000000 [ 526.162059][ T9588] FS: 00007f80d17b46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 526.171036][ T9588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.177650][ T9588] CR2: 0000001b2fc06ff8 CR3: 000000002e278000 CR4: 00000000003506e0 [ 526.185621][ T9588] Call Trace: [ 526.188917][ T9588] [ 526.191847][ T9588] rxe_dealloc+0x33/0x100 [ 526.196224][ T9588] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 526.203106][ T9588] ib_dealloc_device+0x4e/0x1f0 [ 526.208050][ T9588] __ib_unregister_device+0x120/0x170 [ 526.213449][ T9588] ib_unregister_device_and_put+0xb8/0xf0 [ 526.219236][ T9588] nldev_dellink+0x2af/0x300 [ 526.223858][ T9588] ? nldev_newlink+0x560/0x560 [ 526.228621][ T9588] ? __lock_acquire+0x1334/0x7c80 [ 526.233727][ T9588] ? apparmor_capable+0x137/0x1a0 [ 526.239281][ T9588] ? bpf_lsm_capable+0x9/0x10 [ 526.243998][ T9588] ? security_capable+0x89/0xb0 [ 526.248850][ T9588] ? nldev_newlink+0x560/0x560 [ 526.253674][ T9588] rdma_nl_rcv+0x6b9/0x9a0 [ 526.258121][ T9588] ? rdma_nl_net_init+0x170/0x170 [ 526.263236][ T9588] ? __lock_acquire+0x7c80/0x7c80 [ 526.268267][ T9588] ? net_generic+0x1e/0x240 [ 526.272809][ T9588] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.278025][ T9588] netlink_unicast+0x751/0x8d0 [ 526.282843][ T9588] netlink_sendmsg+0x8c1/0xbe0 [ 526.287615][ T9588] ? netlink_getsockopt+0x580/0x580 [ 526.292899][ T9588] ? aa_sock_msg_perm+0x94/0x150 [ 526.297844][ T9588] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 526.303165][ T9588] ? security_socket_sendmsg+0x80/0xa0 [ 526.308624][ T9588] ? netlink_getsockopt+0x580/0x580 [ 526.313876][ T9588] ____sys_sendmsg+0x5bf/0x950 [ 526.318671][ T9588] ? __asan_memset+0x22/0x40 [ 526.323329][ T9588] ? __sys_sendmsg_sock+0x30/0x30 [ 526.328355][ T9588] ? __import_iovec+0x5f2/0x860 [ 526.333758][ T9588] ? import_iovec+0x73/0xa0 [ 526.338314][ T9588] ___sys_sendmsg+0x220/0x290 [ 526.342998][ T9588] ? __sys_sendmsg+0x270/0x270 [ 526.347788][ T9588] __se_sys_sendmsg+0x1a5/0x270 [ 526.352699][ T9588] ? __x64_sys_sendmsg+0x80/0x80 [ 526.357673][ T9588] ? lockdep_hardirqs_on+0x98/0x150 [ 526.363051][ T9588] do_syscall_64+0x55/0xb0 [ 526.367585][ T9588] ? clear_bhb_loop+0x40/0x90 [ 526.372272][ T9588] ? clear_bhb_loop+0x40/0x90 [ 526.376992][ T9588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.382892][ T9588] RIP: 0033:0x7f80d098ec29 [ 526.387343][ T9588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.406982][ T9588] RSP: 002b:00007f80d17b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.415428][ T9588] RAX: ffffffffffffffda RBX: 00007f80d0bd6270 RCX: 00007f80d098ec29 [ 526.423395][ T9588] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 526.431900][ T9588] RBP: 00007f80d0a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 526.439933][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.447946][ T9588] R13: 00007f80d0bd6308 R14: 00007f80d0bd6270 R15: 00007ffc0d65e928 [ 526.455941][ T9588] [ 526.458957][ T9588] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 526.466228][ T9588] CPU: 1 PID: 9588 Comm: syz.5.836 Not tainted syzkaller #0 [ 526.473505][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.483552][ T9588] Call Trace: [ 526.486823][ T9588] [ 526.489747][ T9588] dump_stack_lvl+0x16c/0x230 [ 526.494428][ T9588] ? show_regs_print_info+0x20/0x20 [ 526.499630][ T9588] ? load_image+0x3b0/0x3b0 [ 526.504144][ T9588] panic+0x2c0/0x710 [ 526.508040][ T9588] ? bpf_jit_dump+0xd0/0xd0 [ 526.512549][ T9588] __warn+0x2e0/0x470 [ 526.516526][ T9588] ? rxe_pool_cleanup+0x42/0x50 [ 526.521376][ T9588] ? rxe_pool_cleanup+0x42/0x50 [ 526.526410][ T9588] report_bug+0x2be/0x4f0 [ 526.530736][ T9588] ? rxe_pool_cleanup+0x42/0x50 [ 526.535580][ T9588] ? rxe_pool_cleanup+0x42/0x50 [ 526.540511][ T9588] ? rxe_pool_cleanup+0x44/0x50 [ 526.545356][ T9588] handle_bug+0xcf/0x120 [ 526.549596][ T9588] exc_invalid_op+0x1a/0x50 [ 526.554098][ T9588] asm_exc_invalid_op+0x1a/0x20 [ 526.558940][ T9588] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 526.564399][ T9588] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 b1 1a fa 48 83 3b 00 75 07 e8 65 66 c3 f9 5b c3 e8 5e 66 c3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 526.584010][ T9588] RSP: 0018:ffffc9000e277168 EFLAGS: 00010246 [ 526.590077][ T9588] RAX: ffffffff87c23142 RBX: ffff88802f1dd298 RCX: 0000000000080000 [ 526.598042][ T9588] RDX: ffffc9001248a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 526.606009][ T9588] RBP: 0000000000000002 R08: ffff88802f1dc743 R09: 1ffff11005e3b8e8 [ 526.614064][ T9588] R10: dffffc0000000000 R11: ffffed1005e3b8e9 R12: dffffc0000000000 [ 526.622032][ T9588] R13: 1ffff92001c4ee48 R14: ffffffff87c077e0 R15: dffffc0000000000 [ 526.630094][ T9588] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 526.636874][ T9588] ? rxe_pool_cleanup+0x42/0x50 [ 526.641729][ T9588] ? rxe_pool_cleanup+0x42/0x50 [ 526.646590][ T9588] rxe_dealloc+0x33/0x100 [ 526.650943][ T9588] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 526.657739][ T9588] ib_dealloc_device+0x4e/0x1f0 [ 526.662596][ T9588] __ib_unregister_device+0x120/0x170 [ 526.667978][ T9588] ib_unregister_device_and_put+0xb8/0xf0 [ 526.673697][ T9588] nldev_dellink+0x2af/0x300 [ 526.678285][ T9588] ? nldev_newlink+0x560/0x560 [ 526.683068][ T9588] ? __lock_acquire+0x1334/0x7c80 [ 526.688142][ T9588] ? apparmor_capable+0x137/0x1a0 [ 526.693160][ T9588] ? bpf_lsm_capable+0x9/0x10 [ 526.697831][ T9588] ? security_capable+0x89/0xb0 [ 526.702681][ T9588] ? nldev_newlink+0x560/0x560 [ 526.707446][ T9588] rdma_nl_rcv+0x6b9/0x9a0 [ 526.711864][ T9588] ? rdma_nl_net_init+0x170/0x170 [ 526.716893][ T9588] ? __lock_acquire+0x7c80/0x7c80 [ 526.721929][ T9588] ? net_generic+0x1e/0x240 [ 526.726460][ T9588] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.731661][ T9588] netlink_unicast+0x751/0x8d0 [ 526.736424][ T9588] netlink_sendmsg+0x8c1/0xbe0 [ 526.741188][ T9588] ? netlink_getsockopt+0x580/0x580 [ 526.746380][ T9588] ? aa_sock_msg_perm+0x94/0x150 [ 526.751335][ T9588] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 526.756619][ T9588] ? security_socket_sendmsg+0x80/0xa0 [ 526.762069][ T9588] ? netlink_getsockopt+0x580/0x580 [ 526.767262][ T9588] ____sys_sendmsg+0x5bf/0x950 [ 526.772027][ T9588] ? __asan_memset+0x22/0x40 [ 526.776632][ T9588] ? __sys_sendmsg_sock+0x30/0x30 [ 526.781659][ T9588] ? __import_iovec+0x5f2/0x860 [ 526.786509][ T9588] ? import_iovec+0x73/0xa0 [ 526.791009][ T9588] ___sys_sendmsg+0x220/0x290 [ 526.795686][ T9588] ? __sys_sendmsg+0x270/0x270 [ 526.800486][ T9588] __se_sys_sendmsg+0x1a5/0x270 [ 526.805363][ T9588] ? __x64_sys_sendmsg+0x80/0x80 [ 526.810305][ T9588] ? lockdep_hardirqs_on+0x98/0x150 [ 526.815526][ T9588] do_syscall_64+0x55/0xb0 [ 526.819985][ T9588] ? clear_bhb_loop+0x40/0x90 [ 526.824690][ T9588] ? clear_bhb_loop+0x40/0x90 [ 526.829374][ T9588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.835288][ T9588] RIP: 0033:0x7f80d098ec29 [ 526.839699][ T9588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.859387][ T9588] RSP: 002b:00007f80d17b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.867795][ T9588] RAX: ffffffffffffffda RBX: 00007f80d0bd6270 RCX: 00007f80d098ec29 [ 526.875778][ T9588] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 526.883766][ T9588] RBP: 00007f80d0a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 526.891756][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.899729][ T9588] R13: 00007f80d0bd6308 R14: 00007f80d0bd6270 R15: 00007ffc0d65e928 [ 526.907706][ T9588] [ 526.911057][ T9588] Kernel Offset: disabled [ 526.915467][ T9588] Rebooting in 86400 seconds..