last executing test programs: 18m44.670800831s ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() r1 = creat(0x0, 0x180) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r4, 0x80000}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f00000001c0)={0xa00}) socket$inet_tcp(0x2, 0x1, 0x0) 18m42.856638965s ago: executing program 3 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f00006c6000/0x4000)=nil, 0x4000, 0x8, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3fce, &(0x7f0000000180)={0x0, 0x4ee3, 0x4, 0x3, 0x1b2}, 0x0, &(0x7f00000002c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 18m40.953390699s ago: executing program 3 (id=13): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400000008, 0xfffffffffffffffc}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc1) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,umask=00000000000000000000001,dmask=00000000000000000036765,allow_utime=00000000000000000000007,namecase=1,discard,allow_utime=00000000000000000000004,errors=continue,Fmask=000000000rrors=remount-ro,\x00'/224], 0x1, 0x154e, &(0x7f0000001c00)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f00005e4000/0x11000)=nil, 0x11000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x840000000002, 0x3, 0xfa) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) getpeername$packet(r3, 0x0, &(0x7f0000000280)) 18m39.290770773s ago: executing program 3 (id=15): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) r1 = syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000400), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000040)={'pcl711\x00', [0x7, 0x5, 0x70, 0xa, 0x717, 0x5, 0x9, 0x800, 0x60000000, 0x4, 0x2, 0x6, 0x0, 0xffff, 0xffffffff, 0x2, 0x4, 0x3, 0x101, 0x1, 0x7, 0x9, 0x3, 0x80000001, 0x0, 0x1, 0x1ff, 0x1, 0x7, 0x0, 0xac3, 0x5]}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000000100)={[{@nodatasum}, {@nobarrier}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nossd}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@acl}, {@treelog}, {@enospc_debug}, {}]}, 0xfb, 0x514b, &(0x7f0000005140)="$eJzs3U+IVVUYAPDz5s04k4LzEgJbZRFItXBwExHRUyaoKHrlYrCNU4sgXTgJEi0Es0X/Fr6SohaSK6lFMgshqI0LKYzAbWiICzeKgeSinca8e8+b+8713fdm1MY/v5/M3Hvud75zz3vcxfveeO4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEJ45a+vDnV2Rm8cP3Vt+sy5mebOA1tmLu+bXnc6hFrneC2P79j64hvvbNvx6kRMmH092zYa/U6ZpZ7PGqt6Di7k9f68FUIYSwao59sX1pRGLe7uKQ9Y6frF3Uc37W1uPH64Xb966ezJ8ktnwcRKT2Cl5NfVhcVrqdn5PZL06LYLl16t5xLN8tML7n95EQDAkky1Opvux9H8I263vT+NJ+1m0m4n7fgJoV1sLEc27qp+89yQxldons2sVBjvO88knr//3XYrzU/aSamxhHn2ds1Lmol+85xL4is1TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7yRPvjT5WFT91bfrMuZnmzgNbZi7vm153OoRG53gtC9dWf3y4+c+PW48d+GXzd8cvvPxUPc+L29FC5/Bn3HlmMoS3C5ELcdiLa0No9QY6zfBtOfBuZ+elGAAAAOBe8nDn90i3nZWDYz3tWqearHX+RVmxeP3i7qOb9jY3Hj/crl+9dPbk8sdr9RmvecPxuu3G4k+tUBjH8jcdbzEeu+4pjVMtHTGt558+P/VvVX6p/m9U1//xnVP/AwAAcDPu0Pr/w3D31f+xyxdV+aX6f0PPKUv1f5xxrP9HwvLqfwAAALiT3e76v1kap9qgv/+Pvzb2fVV+qf6fGq7+Hy1OOx78I05412QIU4OmDgAAAPQR/+6++NVCrNezbw7Sev25Jw+eqxqvVP83h6v/x27pqwIAAABuxpFvtj9eFS/V/63h6v/x2zprAAAAYCne/3Tik6p4qf6fHa7+X51v85UPWdKv8X8hHJoMYWJhZy4L/Bbaz3cDAAAAwC0S6/S/v9z5c1W/Uv0/V33//3ing7j+v+f+f6X1/4VAdte/Z90YAAAAgPtReT1/vD1+9uSCfs/fH3b9/yMPHHyz6vyl+n//cPV/vbi9lc//AwAAgGW4257/v700TrVB9/9/6LMPfq/KL9X/7eHq/7hdU3x5J2q17P35aDKE9Qs7+d0Ef4in25UE5scKgY5WkrEtZuSB+fFCoGMuydg8GcKjCzv7k8CDMdBOAlfW5oEjSeB0DOTXQzdwLAmciFfa12vz6aaBn2IgX2AxH1dQrOkuiUgyrvbLWAjcMONs9+QAAAD3lVg857XsWG8zpKXsfG1Qh9WDOowM6lAf1GE06ZB27Hc8zPYG4vH2mY1Le/7/keHq//hWrMo2/db/h7j+P3+uYXf9/2wMNJLAfAy00jsGtOI5smL383iORivPuLK+GwAAAIB7WvxeoL7C8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Y+/eY+S66sOBn9nX7Mu7m8BPhPwQLFAnuOD12g4PtalYp6mKQinrkhJViGITb8LiDTaxU3AEyLGpUhRB0xIJ/ijCEUINfyS1SBDQgOJGIihqeIiqCBIlIq0JAoXSAAqFSLiauffcvXPuzsOPdbzp5yN558x8z+OeOzPXc869cwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5vOPbX7/ubTvEHf3v5w49dNffuQ9uuevKDl5//rRDmm4/XsnBt9OZPzf38zsvuOnTvlk/fc/yKVw7l5fJ4GGv86cvvfDjWenxdCF+shTCQBjaOZ4HB/P54rO9F4yGcF5YDRYmF0axE2nD42kgIR8JyoKjqyyMhjJcCV37n/vs+2kjcNhLC+hBCPW3j0XrWxkgauGgoC4ymgT0DWeBXJzJF4Et9WQBOW3wzFC/6o/OtGaZWLtfm9Td4xjbs2ZV2rz8mptrn++m2Vd6okqH0gfnTetoq1bEqKm+PY95ta+DdVtnPt3rayh+k8k8oJ5ZD9dC3a+GanTcs7Y+P9IWZmf52NVWf5+GYPp3n+ftPfeDqk0mvmddh3ICpM/I6/Ng319/Zv+FN37hn4/on7njV4Z+c7mZ+r7RLy+nVVg/5a27NPI/RnOPJGnj7VT4lTfvQFUK45l2/8+ZO8cr4f6rz+D++nONtX0vuWOszE9nYPD4yHhM/m8jG5gAAALBmnOSsaeFszprumfnq60rFJ+tJfZXx/3Rv5//jKf98MJ/19lgIc83E4ckQLmg+ngU+F5t752QIL22m5lsD25LAsRBe2ExsKKpKSgzHEtNJ4EcTeWAuCTwQA/NJ4LMxcGsS+HAMHE0CV8fAsSRwWQyExdZ+/O5E3o+eAyMxsCPbiUfjVQi/mIitJfvqkaIqAACAMyQfHQ623i1d63C6GeLw8uhItwzxCuy2GepJDekIthhWta1hoFsNfd1qKPp9sHP3KzXXutVcuQyj1prhU7/8q7eEDirj/9nO4//6ChtSq5z/D2F782/M3ZdHlor4jvmWDAAAAMBpGPufxz/TKV4Z/8/1dv1/nBPpL2UOD8VpiN2TIcy2BrJqf78ayM56j+UBAAAAWAuK8/HFufDF/Da7RDsdTzfyT7Tkn++av7X+eOJ/bsX8Q8e+sqPT9lbG//O9Xf8/2nqbbcQDcSs+PhkXickCX49b2Qg0TcfAD17fGsj7/0DcAbfEqvILE4qqbokldsTAbBI40q7Et4sSF7QG8ieraPxw0Y/FvEQpAAAAAGddnA6I5+Xj9f8v+82W93UqVxn/7zi56/+b4+DK5f1LYyFsGgihP/1iwEOj2cKAMTBeyxNfHc3q6k+rumk0hEsbHUurejxf/38gXWPwOyNZVTFwwcvueOqiRuIzIyFsKge++7bbX91I7E8CReN/PhLCSxq9TRv/wnDW+GDa+CeGQ3hxKVBU9c7hEBqNDaVV3V/Pf8cgreqf6iE8rxQoqnpNPYQDAYA1Kv5Xuqv84L4DN+7eubS0cP0qJuIc/ki4ZnFpYebqPUu76m22aVeyzS3LGN1U7VOvv3zzSL5E0Vvv3j7eS7r4nuBsua18Hr9y4WB+P34WGmz2c8tgy92taZdf8fJqE6H0Sapdl/tWucuj5UqWn8RK/TH/UBgLwzfsW7h+5v079++/fnP2t9fsW7K/8TRTtq82p/tqdKVt6+Hl0Xa1rMSp7quLy5Vs2n/d3k37Dty4cfG6ndcuXLvwns2v2TJ7yezW2ddesqnRq9nsb5euXrxS1UlXT9zeY7/OYFcvHChVcjaOGhISEmstsWfs4o7/J1fG/3s7j//jUSce+fP1Gdqd/5+Kp/mzx5dP8++IgSO9nv+fanc2v7gwYDoJHIyBg07zAwAA8NwQB/lxNjPOSv94wxee6FSuMv4/2Nv3/8/Q+v/F0vVXtFvmf0MsMdtu/f90mf9i/f+D7db/T5f5L9b/P/IsrP9/QxFIdskvrP8PAAA8F5y99f+7Lu+f/kBAJUPX5f3THwioZOi6jH+vPxBw0uv/P/off/FfoYPK+P/W3sb/Fu4HAACAc8eH/uR9/69TvDL+P9Lb+P/sr/8X2l3/P90uMN9uYUDr/wEAALBGtVv/b+rm0Xd0KlcZ/x/tbfwfL7voa8kda31mIlvTLqRr2v1sovjKAAAAAKwNfWFmZrDHvC0ro2479Ta/ny8F2ikdbQ8hPP5Hx0/u+v9jvY3/W76X8bFvrr+zf8ObvvHMPRvXP3HHqw7/ZPn8PwAAALB6ep2XAAAAAAAAAAAAAAAAnn2P//uhrZ3ile//N1cNaP/9//i7f/H7Bc9vyR1r7b7+X37/yjfedaC5ZOFDEyG8vBzYfWj3eSH/bf6Ly4H73r7hBY3EobTEVx677IeNxDvSwBs2nv90I3FpEtgRF0l8YRqIv6r49LokEJdX/Lc0EPfH0TQwlAc+si7rRy3dVz8ez/ZVLd1XD4+HMFkKFPvqi+NZG7W0g7clgaKD700DsYN/mgf60q26ayzbqhgYj0U/PZZtFQAA56z4KXAwXLO4tDAbP8LH2wsHWm+jliXLbqpWW+ux+Ufypcneevf28V7S/eln0eXfGh8M9UYXNlc+rpaz1Jq9PDO1dNl1z2/T5W6rvfW1KZc62V031L5HI1mPZq7es7RrsGvHt3bPsmWga5bNlcFOOUtfc5f2UEsP29JDj4ZqyYp0K++bHjY53u8LMzP9Sa7fi8Gp1sa6vSJ6/b5+eZ2/dq+Ccp73HD/8q071Vcb/U72N/+vlfj2d/xjAwfjLen87aZl/AAAAWF0f2fbrT8Z/b7n5we92ytsY/58oj/+nexv/xxms/FRwNttxLP7+/+HJEJo/rT+VBT4Xm3vnZAgvbabmY4nsB/WviCVms8Dn4oTJhlhix3xrVcMxcDQJ/GgiDxxLAg/EQD5LcUfIp3L+biKEVzdT21tL7I0lppLAm2NgOgnMxMBsaJ31WRcDc0mJJ9flgfkk8K8xEBZb99Xd6/J91WSlRwAAoEf5EGWw9W5Ix3lHB7plqHXLMNotQ1+3DPVuGdr1It7/fMwwmFy8UitlGkxrHUlqqWSIP4Z/0ttVyRC+3ZozLVhpOl5/UFxvUGvNcO/rBuqhg8r5/9nexv+jrbdZ6w/E8f/y7/9lga/Hzft4vHR8OgZ+8PrWQD4x8EAc7N5SVDWfl8gH7bfEEnMxMJ0E9sbAXBLYsT0PHHlBayAfaReNHy4aX8xLlAIAAABw1sUJgjhN07d8d6xTucr4f6638X9sb6zUWPhwrPX4uhC+WFvemiKwcTwLxHmM8fj1+BeNh3BeaYKjKLEwmpUYShoOXxvJvqE+lFb15ZHsywfx/pXfuf++jzYSt42EsL40+1K08Wg9a2MkDVw0lAVG08CegSwQZ36KwJf6sgCctmJWML6g8ktdClMrl2vz+nuuXCmSdq8yB7pCvpW+c7VaKhOu+Zxq4eSeto7zt5ySlXZ15e1xzLttLb7bprzbyh+k8k8oJ5ZD9dC3a+GanTcs7Y+PlL/JWrFKz3P5W6q9pM/A6/DgqW9td/V0A2aTw8fsyuVWfh3WYnUf++b6O/s3vOkb92xc/8Qdrzr8k543o434ReH7P/gv498r7d7VVg/5a27NHU/mHU/WxH8DB8Nvyoe5aU9bCGH7k5+4pVO8Mv6f7238P5DcNv067sx9kyG8orRzH4q7/w8ns+NgKZAdJZ9XDWSn3P9zou2REwAAAM60YrqjmC9YzG+zC8LTcXI1//xJ5o/zFXMr5u91u0f/8u3rO8Ur4/8dncf/w8lmOv/v/D+rxPn/FZ38VPTZfUMOpw8cPK2p6Ep13TkAnQLn/1d0Dp34GVrpwZ7O/6/wHnqOn/hx/t/5/5U4/9+F8/8rOteftsoRfu/Z/tB1TnriD776cKd4Zfy/t7fxv/X/Vl60r1j/b0cSKNb/29tu/b+Dp7b+HwAAQI/aLDSXjvMqq/dVMqSr91UydF0gsOsSg+nJZ+v/dV3/74cXPvqb0EFl/H+wt/F/fDmMlVs/q+v/Fc/gya//N729taoicGsM7LUwIAAAAOeidhMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLvu/fv/3tUp/uBvL3/4savm3n1o21VPfvDy878VwmLz8VoWro3e/Km5n9952V2H7t3y6XuOX/HKel5uML/9/y25Y63PTIRwpPTIeEz8bKJxZzlw5RvvOjDQSDw0EcLLy4Hdh3af10h8diKEi8uB+96+4QWNxKG0xFceu+yHjcQ70sAbNp7/dCNxaR6opZv7D+uyza2lm/vRdSFMlgLF5r57XWtVRRt/nAf60jb+cTxrIwbGY9FPjmdtxMBSLLE4HMKmgRD606oerGdV9adV/XM9q6o/repD9RAuDSEMpFU9NpRVNZD2/FtDWVUxcMHL7njqokbiyFAIm8qB777t9lc3Eu9NAkXjfzYUwksaL5m08c8PZo0Ppo3fNhjCi0MIQ2mJXw5kJYbSEo8PhPC8UqBo/F0DIRwIPCfEg0/LEW3fgRt371xaWrh+FRNDeVsj4ZrFpYWZq/cs7aon29ROrZQ+cdOp9/2Rpz5wdeP2rXdvH+8lPZCXG2xu8pbBlrtbz/Wtj9s1Wq5k+fmo1B/zD4WxMHzDvoXrZ96/c//+6zdnf3vNviX7259Hs321+aztq+Hs5lT31cXlujbtv27vpn0Hbty4eN3OaxeuXXjP5tdsmb1kduvsay/Z1OjVbPb3THT19lPoaji9rl44UKrkbBwAJCQk1lqir+XoNnuu/6dX+aC/vKGDod48QFeGFeUstWYvz0Snt51ij0/lc0rXHm2uDBwqWbaskOWm1ixbK4OJ5VpGsizNz3WVwWG5sb7mLo33+8LMTP4f6FRlPySPlHfvT09j934/33W9pgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91GD0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9Oah9c") io_uring_enter(r1, 0x8aa, 0xfffffffd, 0x0, 0x0, 0x0) 18m33.234688278s ago: executing program 3 (id=23): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44fc2, 0x101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8000, 0x0, 0x8, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 18m24.992593385s ago: executing program 3 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000280039030000000000000000e000000000000000000000000000000000000000ffff000000000000003ec9c2777e984c7d00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100"/132], 0xf8}}, 0x0) 18m7.315043653s ago: executing program 32 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000280039030000000000000000e000000000000000000000000000000000000000ffff000000000000003ec9c2777e984c7d00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100"/132], 0xf8}}, 0x0) 16m57.141094105s ago: executing program 4 (id=147): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 16m55.634927995s ago: executing program 4 (id=151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000080)=0x200009) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000180)=0xfffffffffffffffe, 0x12) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x81) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xc) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000500)=""/222, &(0x7f00000001c0)=0xfffffda0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, 0x0) 16m52.657064183s ago: executing program 4 (id=155): statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, &(0x7f00000003c0)) 16m51.905264894s ago: executing program 4 (id=156): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, 0x0, 0x4048040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 16m45.393849392s ago: executing program 4 (id=163): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) getpgid(0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 16m44.859755794s ago: executing program 4 (id=165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 16m29.572107363s ago: executing program 33 (id=165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 1m27.792333948s ago: executing program 5 (id=1266): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @private, @initdev}, &(0x7f00000001c0)=0xc) gettid() socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m19.703886658s ago: executing program 5 (id=1280): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006118bc000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x13}, 0x94) 1m19.291974251s ago: executing program 5 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4d}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0xfd122f3cb48753c8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1m18.200182531s ago: executing program 5 (id=1285): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d6370313235312c757466382c6f76657272696465726f636b7065726d2c6e6f6a6f6c6965742c6e6f6a6f6c6965742c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f636f6d70726573732c6d6f64653d3078303030303030303030303030303365382c6e6f726f636b2c626c6f636b3d3078303030303030303030303030303230302c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6d61703d61636f726e2c00aaf173231c8fa2125fe6f2a7691bf718642c029cb01a995f84dfc799c1a997db60e5eaf9103b75f05682a57c9bf5d42b69634b1ce70512ad02fa514664ff526420a42e66f59ae74f883b354af5e974a51cc3699b92bcef11ba1c6f747eef2f1e6929c0839509e2b5588d97e9eafab0aa57dcfa15eec0f15cbefddb09ede996f076f8320ffb2935d820e69df2ff1aaa022261f7ea565017b85eedd6426a51559c8b7227f27ca697034550e9184a0bc21df03bd64eb7f4573ecf2a47891375f522c24bed2e751c31e567d0eb8d1f8ede3f4169efad70fee6bec277e28f8da5b0ce03e705ede26c8f63def6e8052d7280e28d69d5d62f76696d465faf5f440c345d5a5720277587a958d795940e149f35bdb6f91d49fc2029fdf86731baa97bda944032df343da307b2285f777ae8edde19bb09e35550274dc0cf88ec034e45912e79522eb41e93e587ba425598208fef00eee7218bfc5d41c464c75939ea647634f57a991f5e1d082d357c6d433d"], 0x1, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m17.557973735s ago: executing program 5 (id=1287): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000070004006b111a000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.107932754s ago: executing program 5 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) 1m16.513360219s ago: executing program 34 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) 1m8.358877638s ago: executing program 0 (id=1343): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="4002040102cd425f235a0052e5fdf9d67f326b813a878592932c99dcaa6d1cd15a5b5457e0bf42ab85baffeedf6bb3ab5d383963cc94d3571e47bad252"], 0x7) 1m8.118170188s ago: executing program 0 (id=1344): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @info_request={0xf, 0x0, 0x0, 0x8, 0x5}}}}}, 0x0) 1m8.02984593s ago: executing program 0 (id=1345): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xf7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1m7.827754727s ago: executing program 0 (id=1346): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 1m6.599826758s ago: executing program 0 (id=1349): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m5.820329858s ago: executing program 0 (id=1356): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="070000000400000008000000d90000000000000000a3c36e271b7e1c838ddb3b973f90f3d34aac9ccc2cf58a6a10ab6df04a4f5d5792b70827ba7601ebb1c2d1a0677a13fb1f9e98345fb2f734854b3d0049296f7d9a033ecc72c733be9edc09f65ef9468e7267979b0f8e48", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60f4ad0100082c00fc020000000000000000000000000001ff020000000000000000000000000001850090"], 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x38, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000002200000427bd7000fedbdf2500000000cba32d702c9f4be4709d45b79fd7fcce9932fd6ff03f58d34cf7a9a43147d020aa865042b1949ffdd81fa5896bbcfe8712252fadefaec9556497742a492e066a334f8e3cf9488009a98e1a2511639a831f10ea573d06afbe759246a0458519962edafff1ce0920c73be760ba02c5036c86128ad935ec0803cb35af2f68a4c5c66c6f8ae40a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfeff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r8 = eventfd(0x5) r9 = eventfd2(0x1bb9fffe, 0x1) open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x1) io_submit(0x0, 0x8, &(0x7f0000000b80)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="7d4f9e53129921a4e847302d3e4370ca6a", 0x11, 0x80000000008}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x7ff, r6, &(0x7f0000000380)="61ce99145e00ca55de1f8231c02f46fdc68fa75b191da7c56dbf6c1610bf5699aa1d60db439dd9e69b51dc34fbe7dab562cae4f7334432e1edf2da1b82a0d51b865d6a45b58cfd3a84e0ac5157cb47b743aa77ee37042d9f", 0x58, 0x7, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x7, r7, &(0x7f0000000dc0)="f7857056208912b63c04107ad86cbba6850d7846d52a447d5a81862f8ad5c9be85d701c71c2f663d92da5b0b704d92d2ba0ce84d7a5eb211541a9404d7c8c20e9504f162e250aee0b751d00495a87a2541e9072a4513e91984df52fefb2a99c81f371624515378b9fe70f4afe0f2dd7acf13e91f870e6c2d3877bc893bf4a0aeb64b97c699d85e09156eb06d5fc44c8822dbf065e2798e7824179d81e77065383174784c7e944f65cc10970831a3b018c7203437c89f6643e6b3be5a4f1bfec05e5e7cf70f94903c5c168403598db2cea36dc831f560ab9e465de61541b82024c7cb474cb285030ec34582c3defb82e21755e6af753f1f2ca30ce1b69d34de09ae420400000039d20a772879e20a5e04114e", 0x6e, 0x1, 0x0, 0x3, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x9, r8, &(0x7f0000001dc0)="4162a9fc4eb4969bdfe0515f58967ff26c8e8358f7a834d10a8d2733117602e86a6da2c9a19cf7167d1425b2e4b8b5cdea459c3f58d2f2ddfdfe5da14af4dadcd101dc125a7c3407fe4949e7cc51fb6e10de4457407ac9ee2eb1888d1c634faa7241c7bb961aeb0874914fbaa7aa9946100fdc1a744ad9094efa1bf1457ac192a49922b37d6dc21172ffabc1f540e5ad60d04763438fe408edd45c42aa93be2396f848006ffcb4e8a3f48896ace634998f6d6192a59527c720234e803c574c61e4d5f390655195310e8c8feaf3607fc67c408770aaf1204f5bfdf6df0428e92a2f6dbad525270bac718381a4cd3aa3b40f5b4aa17972ce804d715180c9e92d20231b9bcbe6e5b1ca2e17813c68c8ae438c553dbf7f41a8bad458a72c9e9a339e7a0417341ab5d22db6c632fb6f34b5255f10a8b3f2fafec6af9272267d3a96d44f1b05cc855599828558187a490f619a48e7119c69f4275268da8ce7c0b2ed4d4a45da2b31f6dd93d325e4ccc0fd5041858dc36791b2a14972b946dbb7e22e7af26167a7612c8d83813c311f1ee4bb34cec12e577db73fe8022ac1af9ebf89bb738a349a4f278efb1ab59df506ca1e6efcc99e687de80387579b79f9ec4b119c8a04c6d973abb6b0da6efd2757b72fb81d8a5b0109ac26c0758ce6107023eb548f3bc65e72a2b0e950a821d81571ef065a95ab4caf81327cf904553cb1b6881d13c26d9fbb0d770c490f7fe684bb4c1071d1fc521cb7e94672a93cc32670f3f357766fc19ed23fd046d9c34086909854382e18c1f027d3431539ef8457f316d22c8fbfaf9eb6c90869116469a5b022cc0a253007e5f2724cd032d39b4495a9a3fcf1e46050ff8f0632ba3ae57d3fa45adccd9dd1d365c7e821fb59f643c3e6baae2757640489c81f5d986b2b936cb019bf8fa0bf7a54098a82dede7b14f9c08d35aad389d4b2bf3e314b118d009a2d999ab7e274141816bcaca243ba58557490afc384358369f17718a65521a3859121ac671f3b234db404aaf55f42a11949d3513f3ed86fcbbe99bf214edc5156d14b25d79e0aed56ab9ebeacebcc6cd49586fea3961a49646ad670829a0222e64f178a75551335e3d5972f978fbc3ed11c30e6646262a3b2e8f8d202933024a5367034dfe719b2bf219bcd3cb8c7696fbbc8c1f2043de8fbd345c696debcbefaa8262e773039216c37167aba912d53d3d145e7a5f016ec96bda163526e3c64f3d835f83ab163a1f9ba645ed9e6d87fb1de1f5ef402b887a6927dae53f6c82af8e945ca57da4a5e024f78b1d0bee8662941ff34c45b261413d68ee29b59278a7693097547473d7dfb042719be32d13feee778df74e2136af2ace9e1916f03b8a897f91e722b16e724b363305f820c04d2ff8482130f8067b1d13641dc157d265d4d17947f96bc90afb4c0c380d0ec9bda1244d65972ee317c52c6535ca2f1968a4291509d0c13034cecc171ea7b864d3383da1c504fc9beeb94b0062cbee7736d8a3abb41656b0eca725e85b81304530ffac6abfa3d59bc63a87144ef15ce395975165e6d3fb4bf1a77cd491bd290734718bce89c16ec4798788026faa116e89fe44217e4f70dcdd6dc2f4a9f1694ac57e630ac67fb4f36e1c9003d221a6c691805164e76b5f2df5ae9a8b79ed74ebc40cb16d58a067800270bb88a153a649988f64b2464cb4119875fa7c1b6369ebc341990fb59a7973d0c0136e253a3b011e448c3467d46b67832dacde43b87b3c79e63452075d62f9fb04411fc9c8a1579b4ebbf1423d289d4713c54141f582977e7eb82c268086a6e50ede60cd40ed186c974acfbb8ce86064838ff699616fa470b1bf155d5d38f7df4c40468c70c1f0cdf542f423b8b721672f03ea5656e6000bd41db79f91ad437cd64327fd394645b245b1f9e4a052bb06701661e2fbc81a2cee074baf488881929f0e850e41ef476c25ea2323daf4bcf1d30a817b6b6dfe805cfcaa77a469bbfb5ceaf31decf3b3ae3c81b109381ae0f577c973df6e983dc25e1c70852b49dedb3a0af3e955b96486567fa8d06c428e5373e85731b438d376bceddf1157bb8d7d628c2fa30f29a91956a12caacbd4990f7705f10c82c2361ef04a6b74835cd5c0bb08921db04b1acb0e42d9cfbbf3531ef29f5e2ba85f03fbab31f83704ae79cab001fef6e47e39f0af060c909a68665727807a53fa64dbf6e415321ddcc3978b3321a90d89acfa3de04396380ebbbb43058f563ead310f10c64d74351bbf324e8a8311bbae395be4dd5d65b10b5aa83ec8d27b350c0303e6d683279103836a7022e55c2c021530be55f3012c6088bd505eb62d2cc6b6b28fa9d7af381076d3763cd36d5d69d2a4c723f8b0b0de555663213536845e3234a34aa73164eec3d11b7c9c08652c422dd523b3f34480773b86580eacb1026cedd61224f96a4f20bc15eb8657f14322c2d1bade6c2e822488eb405736211c49ff278c6167ac6fcf32a5af8ae822b35953c6605521c6c3a142846b46727f829c1f278c6b9b8a374c05d3da8b30b1c1e1e793505d8844fb1636efc52c1d5260c0417b99bebba70a1e39267a95a5a48efb732073187d06894456b53801755188c616d072325af3aaf8b6bf8415491ee004dc4dccb78fb15da9064603cbd5173e45a7daad0983f647b23fb71d29afcc12147f9b21a63eb47973f7fe00297ebd9bb685e27d6b505e555857f99095329dfeb774b7d2adfb57ff41de027a2739c44379ee78e4eb98426e11d22ca649327fda93e47a65449bd1b7a9ca5131ee8f043d467f0bdc7f534bcd1209da94dd0cee9059c913c04548d45f0c229f206cf1b36f31b32fce654600884e1fe5d633752324cff83ba93d6a9fb740b4ba7f136a56baf12bb1d2e0ea4d00a28c8c8f5f2fd828f7226597253c07ccc59f89cc21bcf4faa56894713f7edff07883997bf4df1c8c19e9981cb659877b932db03c6ba23876c51a636aee9cf0536f0511bdca2f25ac938125234c0216f6fe17a94ee230f16de400778fc4fe845fd773c64802c2c995684656d0a99a2e5ebe096737978d9a20ee1b53a063c41b78010f2b1fa927085a85f4663613a36f0a009b6d88e6d3efdefdd84af546d30717218068959be2e80d9f6ebbc64aac93ad06509b0f217e3e72de7abb0d9ce59f652219fd368e1a91196e04c50edd9bb3c48a625880b209c39552d972eb6f7d594b32725f729dca6b960408d7188f162455deb1312b1cb7c355597342e2eaa24963886c315687888698e8c64f65d6257ac44c28e49b3c10323516dd448a909f8b2888eb8b001422f027cd772372dd5df0f48963c3f0b225eb668b4165f98452b946be48dd3b248e5581da8b7ac88ca560a1a5e370582039b1c1bbcb1d80ced649530cd1e2248fa402e3557760d51809f9aa86c748e255653389d6e3d0059c50a43c97e4840cdd3c1c95941e9e7c2d6a4d5fcec6373c84fabfce716666a881174e57c0c02f72c1f5b3f4ab4b9502850830b02d7794247aa3112db56a0bc55a30e445eccd7dc4aeed8052e279ac614c415f135d102a26a54ba6479f5072206f3bf11c1c83f2fdc35ff88b1a1aac10e6c77c9b2934ec86ac620dd5748cedb2b0c1743637fb578a6d8c825749d3d8977ecc59e33dd9ae1fd58bb5dd17f492bec911f28cce16cdc1a81ab08c0e2a9d89c374fe875b280bf801d78231daed4588c8ede64f146f3a0765d54aab5eb6eaa364240a09fb68b7e0957b4946bd8c6e6ba2d9b6033e2272cf780862a8f4116232ccc6930ef2869e13d1749ea84bf9f89043e7fa722e10333db171f14d736f00966f13dc476a4810efaf05b2d1a007897d092dcdac64d073f15bbaa7435f9689b2ba980e4c7f6a1f01b3b363a7f512db5a0119580823e3bfa6f7343889741c4ab56f789f925f53f50542490e7e7e462a002567b96012782fc35dada63c4c058685d3ce45f1a77a0ce9d1a32ef653651ff2e3fddeae2b81da7869847f9d343043385f447e8a96d30a78f8ac0f60d204e1757d0e217c0d3b002c2a76a523d1dd03705a8cd68cef16978fdb7bb003657105fd072cc020f9ba9aa9b26d6d963aa1f5c4aeed33c4f0559a46cf393aa41ea1a9c545bd9792662ccf4f792c14320cfcf234911d9df23c12bdaeefaa3d798638ac02d247ff1bfa7d86b246d19c5c2f7f6cd5fe44ec83d5f210f563acd87c8ee96884e9186a8a903783457e04978d6d2ad0161269df639fd528a43b0d8c531e6d175888f3fb1b2e619e9eb5c6a6c92f55f7e363fab3eecf6cd6150c2ace1f7d4421e70603b52786d350c2416eeea28d0cb2476a72b7883649b4b4ce0d6c1792a2be179d122606c1d6fcdeef9597ca31f86794fb14ae0c15cfb6452b8ab225074ff5ad79439a5b481497a966790ef1da8e662db6cc217e9c2751a577d0ce4474540d62ac4b98e300e2146adfc3f6ca2e0181fcc473c7e965e631470bb042e2132864a69623237bc057dff7d351908487f7391881afa0c56c044ca4cb3f093c36afbbbb4683aa6c1909e455c990263b9413b27f77c0cf4a3406658889d903673974f835b3e48400e30ff976daae483733798cdcb8f31255f3582828c0c74b4509db8682ffd87d0d9602a4a0ac9db6707480afe42f2c02ed91bc857003447ee2b317f63bdb5e6ce20f02aa8786fd78317e7dea810ad25b1f6fa7c30fd7f4409eba1679bb75281f2c68aa4b006f6550cbae2c6568bfab6e9570d0e8b082433d9ced0d4268be532cd1efc566ad796414264151f5551608e5f9af4d19e9f274e77d38048e8b85703c33f6cbfaaf531e0d0a49fae9d130e24d406d0dcbe61e0eca4a3f3e0475eaa311f37b306eaacb8b5d87126660b3fb04bdca4ecac0c8a3d2b26289697ca626b32bae007c30771b7052db093a1016382d108982b089bfd189a39bbcaa10b99c37f1c8f4dea017f5f76f4e193f39a712f7a984568d56b8b0055266d8dd4ed28a40958882b2979154e5095841fc0017a09ddab92053b1944aea073cb91083723c1e47fd6b287ecc51afa09e622ffde470b7d242e41ff80e345f6a071ae702c399655ceb46f2ed41046f71adb98a3c9c25449bbf01915e761dfbb86f28c584ee5caac68d070f6f9e77390c6ce2d4f0a6637231ec4eb5ea72d83773817a6338fb68cb206cdd000f6b48d1177489ea4bf90e4d08628dbb70b8bcbf25afbd081276f356e90f1759dcbb8bb5c8fc4296d30f8a88af37b321858a258db054c71803da07956005dee6643741a2c49ce0ff8723724831b7d56221a847d9b4c73f16accc61d110116b971b5973c853c19d3e96d53d642157af3615bbc838d982767de5dfca466369dc36852a0a4099ea6e01f5d0822b06019ccf5762c05e113ff80db756ab4af9e3b304b98b247125ab407b8ffb32fb687c03c0b0f8955506ea035a55a1d904b8c552dd96c2bc7c86ad8097b3bbc6bbbb40337f1bbe185fb48b79400d2c74a25221b1b6320b13c46c2cefd8b9a40a6f9858498c8f72e2e62bcf74d910cc04d06430eef94d61604068f20f54e433cdb3ea9004a00fd76f896fd19b03a5b1211d79611cc8cbe01e0d8ad3dc1260c22251fc69d0000a6f0eb942b609850f9152a76a9f0d29df0eee49a3f1a6bc6d29e2ed8f1f42f8c066ac39100c917f8b1ca3ae8c2873c01174c654d40ec218f7ddaeaf217d2f378d29584e12830fa1a481785f579c980dd0e13715bffbe8d731d0e47800a224ad0f28fcccb32343daa81c83add9168dcd3672d323391a7a1813ff73bbc47c944cb48b04d80cd25561352c333", 0x1000, 0x4ab, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x7, r3, &(0x7f0000000840)="54d734ae5c2426cf380b858d11293748def7", 0x12, 0x2, 0x0, 0x3, r9}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x3, 0x7ff, r4, &(0x7f0000000900)="b1e5fb7d5e5035a6c1419400", 0xfffffffffffffed3, 0x93, 0x0, 0x3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0xc6, r0, &(0x7f0000000a00)="e0f1ccbcf0cec6545e7d3a09761f9416160affc69026dc11d6a3dd0bea451b0043ed012f8a4232e873efe6f0e1ac24190cd7e8d87e84524a6963cbc6625e7a9b3fe5787d81b9ccdff4954703000aea00973fb6cb07978e4047d47ee8e31347652ae48036c8c63051b2d1541288ff8b28167c3da9b0eabc6404367c5829292490cf7af53da6349137589cfa35f1c2", 0x8e, 0x7, 0x0, 0x2}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0xb, r5, &(0x7f0000001c80)="1e743ea2963f3e674b68434ad2c764012d92133711694270563b0d8590f7079fbc0e2d94996c4e9bdce192f4c1f1fcc2e71d2d1b6f29795daba5b8d928dbda10f332b2be1e439e126ae53d8ca64017bc16b7daf6d40dfc748c76d8a18d1d0d8d9c514ec41ca1ddc3d3a3756b016599", 0x6f, 0x80000000, 0x0, 0x2}]) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m5.24029837s ago: executing program 35 (id=1356): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="070000000400000008000000d90000000000000000a3c36e271b7e1c838ddb3b973f90f3d34aac9ccc2cf58a6a10ab6df04a4f5d5792b70827ba7601ebb1c2d1a0677a13fb1f9e98345fb2f734854b3d0049296f7d9a033ecc72c733be9edc09f65ef9468e7267979b0f8e48", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60f4ad0100082c00fc020000000000000000000000000001ff020000000000000000000000000001850090"], 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x38, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000002200000427bd7000fedbdf2500000000cba32d702c9f4be4709d45b79fd7fcce9932fd6ff03f58d34cf7a9a43147d020aa865042b1949ffdd81fa5896bbcfe8712252fadefaec9556497742a492e066a334f8e3cf9488009a98e1a2511639a831f10ea573d06afbe759246a0458519962edafff1ce0920c73be760ba02c5036c86128ad935ec0803cb35af2f68a4c5c66c6f8ae40a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfeff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r8 = eventfd(0x5) r9 = eventfd2(0x1bb9fffe, 0x1) open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x1) io_submit(0x0, 0x8, &(0x7f0000000b80)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="7d4f9e53129921a4e847302d3e4370ca6a", 0x11, 0x80000000008}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x7ff, r6, &(0x7f0000000380)="61ce99145e00ca55de1f8231c02f46fdc68fa75b191da7c56dbf6c1610bf5699aa1d60db439dd9e69b51dc34fbe7dab562cae4f7334432e1edf2da1b82a0d51b865d6a45b58cfd3a84e0ac5157cb47b743aa77ee37042d9f", 0x58, 0x7, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x7, r7, &(0x7f0000000dc0)="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", 0x6e, 0x1, 0x0, 0x3, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x9, r8, &(0x7f0000001dc0)="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", 0x1000, 0x4ab, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x7, r3, &(0x7f0000000840)="54d734ae5c2426cf380b858d11293748def7", 0x12, 0x2, 0x0, 0x3, r9}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x3, 0x7ff, r4, &(0x7f0000000900)="b1e5fb7d5e5035a6c1419400", 0xfffffffffffffed3, 0x93, 0x0, 0x3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0xc6, r0, &(0x7f0000000a00)="e0f1ccbcf0cec6545e7d3a09761f9416160affc69026dc11d6a3dd0bea451b0043ed012f8a4232e873efe6f0e1ac24190cd7e8d87e84524a6963cbc6625e7a9b3fe5787d81b9ccdff4954703000aea00973fb6cb07978e4047d47ee8e31347652ae48036c8c63051b2d1541288ff8b28167c3da9b0eabc6404367c5829292490cf7af53da6349137589cfa35f1c2", 0x8e, 0x7, 0x0, 0x2}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0xb, r5, &(0x7f0000001c80)="1e743ea2963f3e674b68434ad2c764012d92133711694270563b0d8590f7079fbc0e2d94996c4e9bdce192f4c1f1fcc2e71d2d1b6f29795daba5b8d928dbda10f332b2be1e439e126ae53d8ca64017bc16b7daf6d40dfc748c76d8a18d1d0d8d9c514ec41ca1ddc3d3a3756b016599", 0x6f, 0x80000000, 0x0, 0x2}]) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 39.024806463s ago: executing program 2 (id=1492): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r0) 38.568853s ago: executing program 2 (id=1496): syz_mount_image$fuse(0x0, &(0x7f0000000dc0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f00000003c0)=ANY=[], 0x0, 0x1400) 38.198946951s ago: executing program 2 (id=1501): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setreuid(0xffffffffffffffff, 0xee01) keyctl$clear(0x7, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000021fd6a9a58e900f3140c128009000100766574680000004004000280"], 0x3c}}, 0x0) 35.691922091s ago: executing program 2 (id=1511): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 34.568046047s ago: executing program 2 (id=1516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 33.12666987s ago: executing program 2 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 32.45519266s ago: executing program 36 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 5.385553788s ago: executing program 1 (id=1713): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.910928941s ago: executing program 1 (id=1716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0x6d, 0x0, &(0x7f0000000140)="b9ff03076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.567644336s ago: executing program 1 (id=1721): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x40002063, 0x0) 3.971936157s ago: executing program 1 (id=1725): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) futex(&(0x7f0000000000)=0x2, 0x9, 0x2, &(0x7f0000000140), 0x0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xff, 0x4) recvfrom$inet(r1, 0x0, 0x0, 0x700, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.318839389s ago: executing program 6 (id=1734): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 2.011735694s ago: executing program 6 (id=1737): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 1.7543965s ago: executing program 8 (id=1739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000005c0), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x10000001}, 0x18) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0) 1.440155659s ago: executing program 8 (id=1741): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.387928377s ago: executing program 6 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.35897307s ago: executing program 8 (id=1744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/235, 0xeb, 0x0, &(0x7f0000000440)=""/245, 0xf5}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000740), &(0x7f00000007c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x20, &(0x7f0000001b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3c0d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x6e, 0xe, 0x3, 0x8000, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2}}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x55, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x8, 0x5}, 0x10, r3, r2, 0x1, 0x0, &(0x7f0000000580)=[{0x2, 0x2, 0x6, 0xb}], 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) gettid() fcntl$getown(r7, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) umount2(&(0x7f00000002c0)='./file0\x00', 0x800000000000000) close(r5) 1.312887961s ago: executing program 7 (id=1745): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, 0x0) 1.216715177s ago: executing program 7 (id=1747): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 1.153567994s ago: executing program 6 (id=1748): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.138530155s ago: executing program 9 (id=1749): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 1.038410993s ago: executing program 8 (id=1750): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x2000077, 0x20800000000412, 0x6, 0x7, 0x1000000000001000, 0xf67, 0x3ee}) lchown(0x0, 0xee01, 0xffffffffffffffff) 971.904934ms ago: executing program 9 (id=1751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 901.35855ms ago: executing program 9 (id=1752): setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/50, 0x32) 867.395444ms ago: executing program 7 (id=1753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x4c}}, 0x4000004) 780.105271ms ago: executing program 1 (id=1754): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000005c0)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 776.275594ms ago: executing program 9 (id=1755): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x80}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 648.332773ms ago: executing program 6 (id=1756): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 555.197229ms ago: executing program 7 (id=1757): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, 0x0) 554.897151ms ago: executing program 8 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 554.73605ms ago: executing program 9 (id=1759): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x40002063, 0x0) 483.893037ms ago: executing program 1 (id=1760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/235, 0xeb, 0x0, &(0x7f0000000440)=""/245, 0xf5}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000740), &(0x7f00000007c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x20, &(0x7f0000001b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3c0d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x6e, 0xe, 0x3, 0x8000, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2}}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x55, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x8, 0x5}, 0x10, r3, r2, 0x1, 0x0, &(0x7f0000000580)=[{0x2, 0x2, 0x6, 0xb}], 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) gettid() fcntl$getown(r7, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) umount2(&(0x7f00000002c0)='./file0\x00', 0x800000000000000) close(r5) 361.481304ms ago: executing program 7 (id=1761): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 356.116945ms ago: executing program 9 (id=1762): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 128.632885ms ago: executing program 8 (id=1763): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 74.84181ms ago: executing program 7 (id=1764): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) futex(&(0x7f0000000000)=0x2, 0x9, 0x2, &(0x7f0000000140), 0x0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xff, 0x4) recvfrom$inet(r1, 0x0, 0x0, 0x700, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 6 (id=1765): setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/50, 0x32) kernel console output (not intermixed with test programs): 14.646221][T12687] user: buckets=1 sectors=16 fragmented=240 [ 1114.646221][T12687] cached: buckets=0 sectors=0 fragmented=0 [ 1114.646221][T12687] parity: buckets=0 sectors=0 fragmented=0 [ 1114.646221][T12687] stripe: buckets=0 sectors=0 fragmented=0 [ 1114.646221][T12687] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 1114.646221][T12687] need_discard: buckets=0 sectors=0 fragmented=0 [ 1114.646221][T12687] log: [ 1114.646221][T12687] clock: write=1280 [ 1114.646221][T12687] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ve [ 1114.646375][T12687] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 1116.195022][T12696] loop2: detected capacity change from 0 to 32768 [ 1116.763899][T12696] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 1116.763899][T12696] clean (size 2912): [ 1116.763899][T12696] flags: 0 [ 1116.763899][T12696] journal_seq: 10 [ 1116.763899][T12696] usage: type=inodes v=8 [ 1116.763899][T12696] usage: type=key_version v=0 [ 1116.763899][T12696] usage: type=reserved v=0 [ 1116.763899][T12696] usage: type=reserved v=0 [ 1116.763899][T12696] usage: type=reserved v=0 [ 1116.763899][T12696] usage: type=reserved v=0 [ 1116.763899][T12696] data_usage: btree: 1/1 [0]=2816 [ 1116.763899][T12696] data_usage: journal: 1/1 [0]=0 [ 1116.763899][T12696] data_usage: user: 1/1 [0]=16 [ 1116.763899][T12696] dev_usage: dev=0 [ 1116.763899][T12696] free: buckets=83 sectors=0 fragmented=0 [ 1116.763899][T12696] sb: buckets=25 sectors=6152 fragmented=248 [ 1116.763899][T12696] journal: buckets=8 sectors=2048 fragmented=0 [ 1116.763899][T12696] btree: buckets=11 sectors=2816 fragmented=0 [ 1116.763899][T12696] user: buckets=1 sectors=16 fragmented=240 [ 1116.763899][T12696] cached: buckets=0 sectors=0 fragmented=0 [ 1116.763899][T12696] parity: buckets=0 sectors=0 fragmented=0 [ 1116.763899][T12696] stripe: buckets=0 sectors=0 fragmented=0 [ 1116.763899][T12696] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 1116.763899][T12696] need_discard: buckets=0 sectors=0 fragmented=0 [ 1116.763899][T12696] log: [ 1116.763899][T12696] clock: write=1280 [ 1116.763899][T12696] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ve [ 1116.764535][T12696] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 1116.991823][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.004173][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.850460][T12700] loop1: detected capacity change from 0 to 2048 [ 1117.976319][T12700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1120.593558][T12713] loop5: detected capacity change from 0 to 32768 [ 1120.639890][T12713] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 1120.639890][T12713] clean (size 2912): [ 1120.639890][T12713] flags: 0 [ 1120.639890][T12713] journal_seq: 10 [ 1120.639890][T12713] usage: type=inodes v=8 [ 1120.639890][T12713] usage: type=key_version v=0 [ 1120.639890][T12713] usage: type=reserved v=0 [ 1120.639890][T12713] usage: type=reserved v=0 [ 1120.639890][T12713] usage: type=reserved v=0 [ 1120.639890][T12713] usage: type=reserved v=0 [ 1120.639890][T12713] data_usage: btree: 1/1 [0]=2816 [ 1120.639890][T12713] data_usage: journal: 1/1 [0]=0 [ 1120.639890][T12713] data_usage: user: 1/1 [0]=16 [ 1120.639890][T12713] dev_usage: dev=0 [ 1120.639890][T12713] free: buckets=83 sectors=0 fragmented=0 [ 1120.639890][T12713] sb: buckets=25 sectors=6152 fragmented=248 [ 1120.639890][T12713] journal: buckets=8 sectors=2048 fragmented=0 [ 1120.639890][T12713] btree: buckets=11 sectors=2816 fragmented=0 [ 1120.639890][T12713] user: buckets=1 sectors=16 fragmented=240 [ 1120.639890][T12713] cached: buckets=0 sectors=0 fragmented=0 [ 1120.639890][T12713] parity: buckets=0 sectors=0 fragmented=0 [ 1120.639890][T12713] stripe: buckets=0 sectors=0 fragmented=0 [ 1120.639890][T12713] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 1120.639890][T12713] need_discard: buckets=0 sectors=0 fragmented=0 [ 1120.639890][T12713] log: [ 1120.639890][T12713] clock: write=1280 [ 1120.639890][T12713] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ve [ 1120.640044][T12713] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 1120.903093][T12710] loop2: detected capacity change from 0 to 40427 [ 1120.982676][T12710] F2FS-fs (loop2): invalid crc value [ 1121.249278][T12720] loop6: detected capacity change from 0 to 32768 [ 1121.311954][T12720] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1121.387130][T12710] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1121.494721][T12710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1121.590839][ T5870] syz-executor: attempt to access beyond end of device [ 1121.590839][ T5870] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1121.770148][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1121.770178][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1121.770191][ T5870] Call Trace: [ 1121.770199][ T5870] [ 1121.770208][ T5870] dump_stack_lvl+0x189/0x250 [ 1121.770237][ T5870] ? preempt_schedule_thunk+0x16/0x30 [ 1121.770260][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1121.770284][ T5870] ? __pfx_queue_work_on+0x10/0x10 [ 1121.770311][ T5870] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1121.770339][ T5870] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1121.770382][ T5870] f2fs_handle_critical_error+0x37c/0x540 [ 1121.770418][ T5870] f2fs_write_end_io+0x886/0xb60 [ 1121.770470][ T5870] __submit_merged_bio+0x27a/0x6a0 [ 1121.770502][ T5870] __submit_merged_write_cond+0x255/0x530 [ 1121.770537][ T5870] f2fs_write_data_pages+0x261d/0x3000 [ 1121.770605][ T5870] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1121.770721][ T5870] ? __lock_acquire+0xab9/0xd20 [ 1121.770767][ T5870] ? do_raw_spin_lock+0x121/0x290 [ 1121.770803][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 1121.770824][ T5870] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1121.770854][ T5870] do_writepages+0x32e/0x550 [ 1121.770890][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 1121.770917][ T5870] filemap_fdatawrite+0x199/0x240 [ 1121.770944][ T5870] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1121.771028][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 1121.771055][ T5870] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1121.771103][ T5870] f2fs_write_checkpoint+0x93e/0x2440 [ 1121.771131][ T5870] ? __lock_acquire+0xab9/0xd20 [ 1121.771191][ T5870] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1121.771289][ T5870] kill_f2fs_super+0x2cc/0x6d0 [ 1121.771325][ T5870] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1121.771376][ T5870] ? shrinker_free+0x2ce/0x3e0 [ 1121.771399][ T5870] deactivate_locked_super+0xbc/0x130 [ 1121.771422][ T5870] cleanup_mnt+0x425/0x4c0 [ 1121.771441][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 1121.771473][ T5870] task_work_run+0x1d4/0x260 [ 1121.771499][ T5870] ? __pfx_task_work_run+0x10/0x10 [ 1121.771517][ T5870] ? __x64_sys_umount+0x122/0x160 [ 1121.771544][ T5870] ? exit_to_user_mode_loop+0x40/0x130 [ 1121.771574][ T5870] exit_to_user_mode_loop+0xec/0x130 [ 1121.771599][ T5870] do_syscall_64+0x2bd/0xfa0 [ 1121.771614][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 1121.771641][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.771659][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 1121.771682][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.771697][ T5870] RIP: 0033:0x7f06ad18fed7 [ 1121.771714][ T5870] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1121.771734][ T5870] RSP: 002b:00007ffe822ed008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1121.771756][ T5870] RAX: 0000000000000000 RBX: 00007f06ad211c05 RCX: 00007f06ad18fed7 [ 1121.771769][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe822ed0c0 [ 1121.771779][ T5870] RBP: 00007ffe822ed0c0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.771790][ T5870] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe822ee150 [ 1121.771801][ T5870] R13: 00007f06ad211c05 R14: 0000000000111cde R15: 00007ffe822ee190 [ 1121.771834][ T5870] [ 1121.771843][ T5870] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1121.896089][T12720] XFS (loop6): Ending clean mount [ 1122.307631][ T8909] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1122.510176][ T8909] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1122.529965][ T8909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.120865][T11492] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1123.386010][ T8909] usb 2-1: config 0 descriptor?? [ 1123.469553][ T8909] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1123.623578][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.632264][ T8909] gspca_sn9c2028: read1 error -32 [ 1123.697930][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.788716][ T8909] gspca_sn9c2028: read1 error 0 [ 1123.855534][ T30] audit: type=1326 audit(1757467352.949:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1123.911954][T12758] loop2: detected capacity change from 0 to 512 [ 1123.937828][ T30] audit: type=1326 audit(1757467352.979:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1123.960873][T12758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1124.000796][ T8909] gspca_sn9c2028: read1 error -71 [ 1124.009958][ T30] audit: type=1326 audit(1757467352.979:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1124.034655][ T8909] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1124.077705][ T8909] usb 2-1: USB disconnect, device number 4 [ 1124.082433][T12758] EXT4-fs (loop2): 1 truncate cleaned up [ 1124.091851][ T30] audit: type=1326 audit(1757467352.979:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06ad18ebe3 code=0x7ffc0000 [ 1124.151818][T12758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.180629][ T30] audit: type=1326 audit(1757467352.979:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06ad18d65f code=0x7ffc0000 [ 1124.252064][ T30] audit: type=1326 audit(1757467352.979:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f06ad18ec37 code=0x7ffc0000 [ 1124.288752][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.324043][ T30] audit: type=1326 audit(1757467352.979:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06ad18d510 code=0x7ffc0000 [ 1124.382344][ T30] audit: type=1326 audit(1757467352.979:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06ad18e7ab code=0x7ffc0000 [ 1124.467877][ T30] audit: type=1326 audit(1757467353.029:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06ad18d80a code=0x7ffc0000 [ 1124.743480][ T30] audit: type=1326 audit(1757467353.029:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06ad18d80a code=0x7ffc0000 [ 1124.821309][ T8333] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1125.127763][ T8333] usb 1-1: Using ep0 maxpacket: 32 [ 1125.143352][ T8333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.167066][ T8333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.199323][ T8333] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1125.259366][ T8333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.304642][ T8333] usb 1-1: config 0 descriptor?? [ 1126.194184][ T8333] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1127.296962][T12765] loop0: detected capacity change from 0 to 2048 [ 1127.353317][T12789] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1127.378064][T12765] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1127.394319][T12765] Remounting filesystem read-only [ 1127.639299][ T5929] usb 1-1: USB disconnect, device number 4 [ 1127.955984][T12787] loop2: detected capacity change from 0 to 256 [ 1128.049856][T12783] fido_id[12783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1128.081910][T12787] exfat: Deprecated parameter 'utf8' [ 1128.087262][T12787] exfat: Deprecated parameter 'namecase' [ 1128.245497][T12787] exfat: Deprecated parameter 'namecase' [ 1128.308693][T12787] exfat: Deprecated parameter 'utf8' [ 1128.418708][T12787] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 1129.813831][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 1129.935890][T12800] loop2: detected capacity change from 0 to 512 [ 1132.362893][T12821] loop5: detected capacity change from 0 to 256 [ 1133.044974][T12821] exfat: Deprecated parameter 'utf8' [ 1133.066468][T12821] exfat: Deprecated parameter 'namecase' [ 1133.077780][T12821] exfat: Deprecated parameter 'namecase' [ 1133.102056][T12821] exfat: Deprecated parameter 'utf8' [ 1133.454364][T12829] loop0: detected capacity change from 0 to 256 [ 1133.512805][T12829] exfat: Deprecated parameter 'utf8' [ 1133.553853][T12829] exfat: Deprecated parameter 'namecase' [ 1133.564246][T12821] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 1133.582182][T12829] exfat: Deprecated parameter 'namecase' [ 1133.582937][T12831] loop2: detected capacity change from 0 to 16 [ 1133.594376][T12829] exfat: Deprecated parameter 'utf8' [ 1133.942051][T12829] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 1133.960215][T12821] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 1133.975895][T12831] erofs (device loop2): mounted with root inode @ nid 36. [ 1134.065731][T12831] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 1134.152557][T12831] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 1134.375623][T12831] erofs (device loop2): read error -117 @ 1 of nid 89 [ 1134.420223][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1134.420241][ T30] audit: type=1800 audit(1757467363.519:161): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1262" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 1134.646682][T12817] loop6: detected capacity change from 0 to 32768 [ 1134.690592][T12817] bcachefs (/dev/loop6): error reading default superblock: Bad minimum version 0.24: unwritten_extents, greater than version field 0.9: (unknown version) [ 1134.758403][T12817] bcachefs (/dev/loop6): error validating superblock: Invalid option metadata_replicas_required: too small (min 1) [ 1134.807749][T12817] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_small [ 1135.772732][T12842] loop2: detected capacity change from 0 to 256 [ 1135.937252][T12842] exfat: Deprecated parameter 'utf8' [ 1135.975648][T12842] exfat: Deprecated parameter 'namecase' [ 1136.008716][T12842] exfat: Deprecated parameter 'namecase' [ 1136.049700][T12842] exfat: Deprecated parameter 'utf8' [ 1136.167193][T12842] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 1136.688209][T12842] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 1136.918413][T12851] loop1: detected capacity change from 0 to 4096 [ 1136.934150][T12851] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1137.278406][T12851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.439988][T12853] fuse: Bad value for 'fd' [ 1137.549166][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.588562][T12857] FAULT_INJECTION: forcing a failure. [ 1137.588562][T12857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.630099][T12857] CPU: 1 UID: 0 PID: 12857 Comm: syz.0.1268 Not tainted syzkaller #0 PREEMPT(full) [ 1137.630124][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1137.630134][T12857] Call Trace: [ 1137.630142][T12857] [ 1137.630150][T12857] dump_stack_lvl+0x189/0x250 [ 1137.630179][T12857] ? __pfx____ratelimit+0x10/0x10 [ 1137.630205][T12857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1137.630228][T12857] ? __pfx__printk+0x10/0x10 [ 1137.630255][T12857] ? __might_fault+0xb0/0x130 [ 1137.630292][T12857] should_fail_ex+0x414/0x560 [ 1137.630327][T12857] _copy_from_iter+0x1de/0x1790 [ 1137.630356][T12857] ? rcu_is_watching+0x15/0xb0 [ 1137.630384][T12857] ? kmalloc_reserve+0xbd/0x290 [ 1137.630403][T12857] ? __pfx__copy_from_iter+0x10/0x10 [ 1137.630423][T12857] ? __build_skb_around+0x262/0x3f0 [ 1137.630455][T12857] ? netlink_sendmsg+0x642/0xb30 [ 1137.630470][T12857] ? skb_put+0x11b/0x210 [ 1137.630493][T12857] netlink_sendmsg+0x6b2/0xb30 [ 1137.630522][T12857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.630545][T12857] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1137.630577][T12857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1137.630597][T12857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.630616][T12857] __sock_sendmsg+0x21c/0x270 [ 1137.630646][T12857] ____sys_sendmsg+0x505/0x830 [ 1137.630675][T12857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1137.630707][T12857] ? import_iovec+0x74/0xa0 [ 1137.630744][T12857] ___sys_sendmsg+0x21f/0x2a0 [ 1137.630768][T12857] ? __pfx____sys_sendmsg+0x10/0x10 [ 1137.630832][T12857] ? __fget_files+0x2a/0x420 [ 1137.630856][T12857] ? __fget_files+0x3a0/0x420 [ 1137.630894][T12857] __x64_sys_sendmsg+0x19b/0x260 [ 1137.630917][T12857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1137.630950][T12857] ? __pfx_ksys_write+0x10/0x10 [ 1137.630978][T12857] ? do_syscall_64+0xbe/0xfa0 [ 1137.631000][T12857] do_syscall_64+0xfa/0xfa0 [ 1137.631015][T12857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1137.631043][T12857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.631061][T12857] ? clear_bhb_loop+0x60/0xb0 [ 1137.631084][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.631100][T12857] RIP: 0033:0x7fd1d0d8eba9 [ 1137.631118][T12857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.631134][T12857] RSP: 002b:00007fd1d1cee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.631155][T12857] RAX: ffffffffffffffda RBX: 00007fd1d0fd5fa0 RCX: 00007fd1d0d8eba9 [ 1137.631168][T12857] RDX: 0000000004000804 RSI: 0000200000000140 RDI: 0000000000000003 [ 1137.631180][T12857] RBP: 00007fd1d1cee090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.631192][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.631203][T12857] R13: 00007fd1d0fd6038 R14: 00007fd1d0fd5fa0 R15: 00007ffdc9fea7d8 [ 1137.631239][T12857] [ 1137.980165][T12846] loop6: detected capacity change from 0 to 40427 [ 1137.994535][T12846] F2FS-fs (loop6): Invalid segment/section count (24 != 1 * 1) [ 1138.007781][T12846] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1138.061282][T12846] F2FS-fs (loop6): invalid crc value [ 1138.589104][T12846] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1138.619987][T12846] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1138.648150][T12846] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1138.709759][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1265'. [ 1138.923994][T11492] syz-executor: attempt to access beyond end of device [ 1138.923994][T11492] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1138.946333][T11492] CPU: 0 UID: 0 PID: 11492 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1138.946363][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1138.946376][T11492] Call Trace: [ 1138.946384][T11492] [ 1138.946394][T11492] dump_stack_lvl+0x189/0x250 [ 1138.946428][T11492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.946452][T11492] ? __pfx_queue_work_on+0x10/0x10 [ 1138.946479][T11492] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1138.946507][T11492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1138.946552][T11492] f2fs_handle_critical_error+0x37c/0x540 [ 1138.946588][T11492] f2fs_write_end_io+0x886/0xb60 [ 1138.946643][T11492] __submit_merged_bio+0x27a/0x6a0 [ 1138.946687][T11492] __submit_merged_write_cond+0x255/0x530 [ 1138.946725][T11492] f2fs_write_data_pages+0x261d/0x3000 [ 1138.946805][T11492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1138.946898][T11492] ? __mod_zone_page_state+0xd7/0x140 [ 1138.946939][T11492] ? folios_put_refs+0x58b/0x670 [ 1138.946976][T11492] ? __pfx_folios_put_refs+0x10/0x10 [ 1138.946993][T11492] ? rcu_is_watching+0x15/0xb0 [ 1138.947035][T11492] ? __lock_acquire+0xab9/0xd20 [ 1138.947086][T11492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1138.947115][T11492] do_writepages+0x32e/0x550 [ 1138.947157][T11492] ? do_raw_spin_unlock+0x122/0x240 [ 1138.947186][T11492] filemap_fdatawrite+0x199/0x240 [ 1138.947213][T11492] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1138.947309][T11492] ? do_raw_spin_unlock+0x122/0x240 [ 1138.947337][T11492] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1138.947389][T11492] f2fs_write_checkpoint+0x93e/0x2440 [ 1138.947416][T11492] ? __lock_acquire+0xab9/0xd20 [ 1138.947487][T11492] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1138.947595][T11492] kill_f2fs_super+0x2cc/0x6d0 [ 1138.947635][T11492] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1138.947702][T11492] ? shrinker_free+0x2ce/0x3e0 [ 1138.947727][T11492] deactivate_locked_super+0xbc/0x130 [ 1138.947753][T11492] cleanup_mnt+0x425/0x4c0 [ 1138.947774][T11492] ? lockdep_hardirqs_on+0x9c/0x150 [ 1138.947808][T11492] task_work_run+0x1d4/0x260 [ 1138.947836][T11492] ? __pfx_task_work_run+0x10/0x10 [ 1138.947856][T11492] ? __x64_sys_umount+0x122/0x160 [ 1138.947885][T11492] ? exit_to_user_mode_loop+0x40/0x130 [ 1138.947917][T11492] exit_to_user_mode_loop+0xec/0x130 [ 1138.947942][T11492] do_syscall_64+0x2bd/0xfa0 [ 1138.947958][T11492] ? lockdep_hardirqs_on+0x9c/0x150 [ 1138.947986][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.948005][T11492] ? clear_bhb_loop+0x60/0xb0 [ 1138.948031][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.948050][T11492] RIP: 0033:0x7fcf9798fed7 [ 1138.948070][T11492] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1138.948086][T11492] RSP: 002b:00007ffef8ff0718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1138.948109][T11492] RAX: 0000000000000000 RBX: 00007fcf97a11c05 RCX: 00007fcf9798fed7 [ 1138.948123][T11492] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef8ff07d0 [ 1138.948134][T11492] RBP: 00007ffef8ff07d0 R08: 0000000000000000 R09: 0000000000000000 [ 1138.948146][T11492] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef8ff1860 [ 1138.948159][T11492] R13: 00007fcf97a11c05 R14: 0000000000116060 R15: 00007ffef8ff18a0 [ 1138.948201][T11492] [ 1139.468866][T11492] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1144.064319][T12903] loop6: detected capacity change from 0 to 1024 [ 1144.266343][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1279'. [ 1144.368298][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'. [ 1144.683894][ T3586] hfsplus: b-tree write err: -5, ino 4 [ 1145.878164][T12923] loop5: detected capacity change from 0 to 1764 [ 1146.039089][T12914] loop2: detected capacity change from 0 to 32768 [ 1146.083933][T12914] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 1146.083933][T12914] clean (size 2912): [ 1146.083933][T12914] flags: 0 [ 1146.083933][T12914] journal_seq: 10 [ 1146.083933][T12914] usage: type=inodes v=8 [ 1146.083933][T12914] usage: type=key_version v=0 [ 1146.083933][T12914] usage: type=reserved v=0 [ 1146.083933][T12914] usage: type=reserved v=0 [ 1146.083933][T12914] usage: type=reserved v=0 [ 1146.083933][T12914] usage: type=reserved v=0 [ 1146.083933][T12914] data_usage: btree: 1/1 [0]=2816 [ 1146.083933][T12914] data_usage: journal: 1/1 [0]=0 [ 1146.083933][T12914] data_usage: user: 1/1 [0]=16 [ 1146.083933][T12914] dev_usage: dev=0 [ 1146.083933][T12914] free: buckets=83 sectors=0 fragmented=0 [ 1146.083933][T12914] sb: buckets=25 sectors=6152 fragmented=248 [ 1146.083933][T12914] journal: buckets=8 sectors=2048 fragmented=0 [ 1146.083933][T12914] btree: buckets=11 sectors=2816 fragmented=0 [ 1146.083933][T12914] user: buckets=1 sectors=16 fragmented=240 [ 1146.083933][T12914] cached: buckets=0 sectors=0 fragmented=0 [ 1146.083933][T12914] parity: buckets=0 sectors=0 fragmented=0 [ 1146.083933][T12914] stripe: buckets=0 sectors=0 fragmented=0 [ 1146.083933][T12914] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 1146.083933][T12914] need_discard: buckets=0 sectors=0 fragmented=0 [ 1146.083933][T12914] log: [ 1146.083933][T12914] clock: write=1280 [ 1146.083933][T12914] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ve [ 1146.084083][T12914] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 1147.040113][ T3586] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.246626][ T3586] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.421180][ T3586] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.532687][T12947] loop6: detected capacity change from 0 to 128 [ 1147.676171][ T30] audit: type=1800 audit(1757467376.769:162): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1296" name="file2" dev="loop6" ino=1048638 res=0 errno=0 [ 1147.807444][ T3586] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.969871][T12955] loop6: detected capacity change from 0 to 128 [ 1148.102443][T12952] loop1: detected capacity change from 0 to 8192 [ 1148.118287][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.118287][T12956] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1148.225654][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.225654][T12956] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1148.279589][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.279589][T12956] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1148.366192][ T3586] bridge_slave_1: left allmulticast mode [ 1148.369201][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.369201][T12956] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1148.389646][ T3586] bridge_slave_1: left promiscuous mode [ 1148.412273][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.467027][ T3586] bridge_slave_0: left allmulticast mode [ 1148.490333][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.490333][T12956] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1148.496057][ T3586] bridge_slave_0: left promiscuous mode [ 1148.522147][T12961] loop1: detected capacity change from 0 to 128 [ 1148.538982][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.583838][ T30] audit: type=1800 audit(1757467377.669:163): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1300" name="file1" dev="loop1" ino=1048642 res=0 errno=0 [ 1148.625842][T12395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1148.641123][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.641123][T12956] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1148.659467][T12395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1148.677003][T12395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1148.693180][T12395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1148.701358][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.701358][T12956] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1148.718354][T12395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1148.727243][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.727243][T12956] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1148.743402][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.743402][T12956] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1148.759698][T12956] syz.6.1299: attempt to access beyond end of device [ 1148.759698][T12956] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1149.303460][T12972] loop6: detected capacity change from 0 to 2048 [ 1149.361169][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 1149.433682][T12972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.749289][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.213927][ T30] audit: type=1326 audit(1757467379.299:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1150.309287][ T30] audit: type=1326 audit(1757467379.299:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1150.387599][ T30] audit: type=1326 audit(1757467379.349:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1150.613824][T13002] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1310'. [ 1150.828886][T12395] Bluetooth: hci1: command tx timeout [ 1150.905543][T13008] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1312'. [ 1150.929864][ T30] audit: type=1326 audit(1757467379.349:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1151.087875][ T30] audit: type=1326 audit(1757467379.349:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1151.147633][ T30] audit: type=1326 audit(1757467379.349:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1151.182979][ T30] audit: type=1326 audit(1757467379.349:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1151.254995][ T30] audit: type=1326 audit(1757467379.349:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.6.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1151.566945][T13015] loop1: detected capacity change from 0 to 512 [ 1151.689036][T13015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.715823][T13015] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.807433][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.830444][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.857991][ T3586] bond0 (unregistering): Released all slaves [ 1152.156032][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.543440][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 1153.044196][T12395] Bluetooth: hci1: command tx timeout [ 1153.316833][T13048] macvtap0: refused to change device tx_queue_len [ 1153.403290][ T3586] hsr_slave_0: left promiscuous mode [ 1153.446004][ T3586] hsr_slave_1: left promiscuous mode [ 1153.474937][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.524016][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.554848][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.573944][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.651848][ T3586] veth1_macvtap: left promiscuous mode [ 1153.668755][ T3586] veth0_macvtap: left promiscuous mode [ 1153.679091][ T3586] veth1_vlan: left promiscuous mode [ 1153.693451][ T3586] veth0_vlan: left promiscuous mode [ 1153.757060][T13076] loop0: detected capacity change from 0 to 1024 [ 1153.790435][T13076] EXT4-fs: Ignoring removed orlov option [ 1153.823049][T13076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.011073][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.332394][T13084] netlink: 'syz.0.1334': attribute type 21 has an invalid length. [ 1154.351638][T13084] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1334'. [ 1155.087328][T12395] Bluetooth: hci1: command tx timeout [ 1155.429361][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 1155.494605][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 1155.507126][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 1155.580301][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 1156.021025][T13115] loop0: detected capacity change from 0 to 512 [ 1156.100353][T13115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.115480][T13115] ext4 filesystem being mounted at /392/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.313875][T13119] loop0: detected capacity change from 512 to 0 [ 1156.317881][ C1] I/O error, dev loop0, sector 60 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1156.329961][T13115] __quota_error: 10 callbacks suppressed [ 1156.329980][T13115] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1156.366613][T13115] EXT4-fs error (device loop0): ext4_write_dquot:6923: comm syz.0.1346: Failed to commit dquot type 0 [ 1156.434910][ C1] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1156.444501][ C1] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1156.461741][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.470101][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.480601][ C1] I/O error, dev loop0, sector 76 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1156.490777][T13115] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1156.505820][T13115] EXT4-fs error (device loop0): ext4_write_dquot:6923: comm syz.0.1346: Failed to commit dquot type 1 [ 1156.528082][ C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1156.537749][ C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1156.547337][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.555654][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.619819][ C0] I/O error, dev loop0, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1156.629760][ C0] I/O error, dev loop0, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1156.640796][ C1] I/O error, dev loop0, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1156.651010][T13115] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #19: block 35: comm syz.0.1346: unable to read itable block [ 1156.671473][ C1] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1156.681151][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.691763][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.702320][T13115] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure [ 1156.715410][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.723949][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.734165][T13115] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #19: comm syz.0.1346: mark_inode_dirty error [ 1156.736295][T13072] lo speed is unknown, defaulting to 1000 [ 1156.757594][T13102] bridge0: entered allmulticast mode [ 1156.795626][T13103] bridge_slave_1: left allmulticast mode [ 1156.813415][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.822141][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.827959][T13103] bridge_slave_1: left promiscuous mode [ 1156.839578][T13115] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #19: block 35: comm syz.0.1346: unable to read itable block [ 1156.850892][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.863145][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.871690][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.883313][T13115] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure [ 1156.895880][T13103] bridge_slave_0: left allmulticast mode [ 1156.901091][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.907545][T13103] bridge_slave_0: left promiscuous mode [ 1156.918087][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.924843][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.930669][T13115] EXT4-fs error (device loop0): ext4_truncate:4666: inode #19: comm syz.0.1346: mark_inode_dirty error [ 1156.952014][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1156.964249][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1156.986959][T13115] EXT4-fs error (device loop0): ext4_check_bdev_write_error:228: comm syz.0.1346: Error while async write back metadata [ 1157.003410][T13103] bridge0 (unregistering): left allmulticast mode [ 1157.011261][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1157.025334][T13115] EXT4-fs (loop0): I/O error while writing superblock [ 1157.029207][T13123] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1347'. [ 1157.037288][ C1] Buffer I/O error on dev loop0, logical block 47, lost sync page write [ 1157.049875][T13115] EXT4-fs error (device loop0): ext4_split_extent_at:3230: inode #19: block 47: comm syz.0.1346: IO error syncing itable block [ 1157.093776][T13072] lo speed is unknown, defaulting to 1000 [ 1157.127308][T13072] lo speed is unknown, defaulting to 1000 [ 1157.148778][T12395] Bluetooth: hci1: command tx timeout [ 1157.229535][T13072] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1157.307168][T13072] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1157.889837][T13072] lo speed is unknown, defaulting to 1000 [ 1158.265703][T13072] lo speed is unknown, defaulting to 1000 [ 1158.302446][T12962] chnl_net:caif_netlink_parms(): no params data found [ 1158.343400][T13072] lo speed is unknown, defaulting to 1000 [ 1158.392561][T13072] lo speed is unknown, defaulting to 1000 [ 1158.496210][T13072] lo speed is unknown, defaulting to 1000 [ 1158.527887][T13072] lo speed is unknown, defaulting to 1000 [ 1158.706075][ T30] audit: type=1326 audit(1757467387.799:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1158.746068][ T30] audit: type=1326 audit(1757467387.799:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1158.773715][ T30] audit: type=1326 audit(1757467387.799:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1158.819128][ T30] audit: type=1326 audit(1757467387.799:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1158.899922][ T30] audit: type=1326 audit(1757467387.799:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1158.927390][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.937812][T12962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.945230][T12962] bridge_slave_0: entered allmulticast mode [ 1158.954792][T12962] bridge_slave_0: entered promiscuous mode [ 1158.962424][ T30] audit: type=1326 audit(1757467387.799:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1158.986937][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.995196][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.003074][T12962] bridge_slave_1: entered allmulticast mode [ 1159.012051][T12962] bridge_slave_1: entered promiscuous mode [ 1159.202762][T12962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.289118][T12962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.344060][T13178] hub 2-0:1.0: USB hub found [ 1159.378028][T13178] hub 2-0:1.0: 1 port detected [ 1159.543489][ T3586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.666061][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1159.679676][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1159.692197][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1159.707850][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1159.727876][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1160.019149][T13199] loop2: detected capacity change from 0 to 512 [ 1160.092714][T12962] team0: Port device team_slave_0 added [ 1160.099723][T13199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.138994][T13199] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.146096][T13204] loop6: detected capacity change from 0 to 512 [ 1160.216732][ T3586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.266893][T13204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.303240][T12962] team0: Port device team_slave_1 added [ 1160.309386][T13204] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.412381][T13204] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1370: corrupted inode contents [ 1160.485089][T13216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1370'. [ 1160.525973][ T3586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.526424][T13204] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1370: mark_inode_dirty error [ 1160.557137][T13204] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1370: bg 0: block 328: padding at end of block bitmap is not set [ 1160.579868][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.590852][T12962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.606726][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.651036][T12962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.727167][T12962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.750768][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.798911][T12962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.812337][T13188] lo speed is unknown, defaulting to 1000 [ 1160.917218][ T3586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.919775][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.025277][ T30] audit: type=1326 audit(1757467390.119:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1161.030703][T13225] loop8: detected capacity change from 0 to 16384 [ 1161.151984][ T30] audit: type=1326 audit(1757467390.119:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1161.241675][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 1161.275174][T12962] hsr_slave_0: entered promiscuous mode [ 1161.310564][T12962] hsr_slave_1: entered promiscuous mode [ 1161.380453][T13233] loop6: detected capacity change from 0 to 512 [ 1161.450798][T13233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.500883][T13233] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.535470][T13237] loop1: detected capacity change from 0 to 512 [ 1161.575841][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1161.575860][ T30] audit: type=1800 audit(1757467390.669:205): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1376" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1161.699901][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.700626][T13237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.756056][T13237] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.787868][T12395] Bluetooth: hci2: command tx timeout [ 1161.971011][T13251] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1161.971011][T13251] The task syz.2.1380 (13251) triggered the difference, watch for misbehavior. [ 1162.040984][T13252] process 'syz.6.1381' launched '/dev/fd/4' with NULL argv: empty string added [ 1162.055998][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.257906][ T3586] bridge_slave_1: left allmulticast mode [ 1162.277931][T13256] loop1: detected capacity change from 0 to 1024 [ 1162.286121][ T3586] bridge_slave_1: left promiscuous mode [ 1162.293430][T13256] EXT4-fs: Ignoring removed bh option [ 1162.302929][T13256] EXT4-fs: inline encryption not supported [ 1162.310376][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.326643][ T3586] bridge_slave_0: left allmulticast mode [ 1162.335613][T13256] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1162.335650][ T3586] bridge_slave_0: left promiscuous mode [ 1162.352934][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.384874][T13256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1162.441515][T13256] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1382: lblock 2 mapped to illegal pblock 2 (length 1) [ 1162.472317][T13256] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1162.482519][T13256] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1382: lblock 0 mapped to illegal pblock 48 (length 1) [ 1162.503065][T13256] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1162.531329][T13256] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.1382: Failed to acquire dquot type 0 [ 1162.549320][T13256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1162.596280][T13256] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1382: mark_inode_dirty error [ 1162.614321][T13256] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1162.634381][T13256] EXT4-fs (loop1): 1 orphan inode deleted [ 1162.644799][T13256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.659188][T10075] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1162.683408][T10075] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1162.696757][T10075] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 1162.743452][T13256] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1162.839880][T13259] hub 9-0:1.0: USB hub found [ 1162.859858][T13259] hub 9-0:1.0: 1 port detected [ 1162.869669][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.392276][T13276] loop6: detected capacity change from 0 to 128 [ 1163.495011][T13276] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1163.529258][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 1163.551106][T13276] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.601353][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 1163.664476][T11492] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1163.935908][T13285] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1392'. [ 1163.947865][T12395] Bluetooth: hci2: command tx timeout [ 1164.551559][T13288] loop2: detected capacity change from 0 to 2048 [ 1164.586724][ T43] IPVS: starting estimator thread 0... [ 1164.625997][T13288] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 1164.636127][T13288] FAT-fs (loop2): Filesystem has been set read-only [ 1164.658502][ T30] audit: type=1326 audit(1757467393.749:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.6.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1164.726818][ T30] audit: type=1326 audit(1757467393.779:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.6.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1164.751260][T13289] IPVS: using max 26 ests per chain, 62400 per kthread [ 1164.763735][ T30] audit: type=1326 audit(1757467393.779:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.6.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1164.825017][ T30] audit: type=1326 audit(1757467393.779:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.6.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1164.872165][ T30] audit: type=1326 audit(1757467393.789:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.6.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1164.928993][ T30] audit: type=1326 audit(1757467393.789:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.6.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1165.016103][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.032082][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.044708][ T3586] bond0 (unregistering): Released all slaves [ 1165.196982][ T3586] tipc: Disabling bearer [ 1165.210584][ T3586] tipc: Left network mode [ 1165.212432][T13279] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1165.620273][T13306] loop1: detected capacity change from 0 to 512 [ 1165.732612][T13310] loop2: detected capacity change from 0 to 1024 [ 1165.779779][T13306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.859822][T13310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.867850][T13306] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1165.926086][T13310] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1401: Allocating blocks 385-513 which overlap fs metadata [ 1165.975843][T13310] EXT4-fs (loop2): pa ffff88804dc212b8: logic 16, phys. 129, len 24 [ 1165.975929][T13310] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1166.029030][T12395] Bluetooth: hci2: command tx timeout [ 1166.029241][T13310] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 1166.029333][T13310] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1166.029333][T13310] [ 1166.029351][T13310] EXT4-fs (loop2): Total free blocks count 0 [ 1166.029367][T13310] EXT4-fs (loop2): Free/Dirty block details [ 1166.029403][T13310] EXT4-fs (loop2): free_blocks=128 [ 1166.029441][T13310] EXT4-fs (loop2): dirty_blocks=0 [ 1166.029455][T13310] EXT4-fs (loop2): Block reservation details [ 1166.029470][T13310] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 1166.095074][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.099688][T13320] netlink: 'syz.6.1402': attribute type 10 has an invalid length. [ 1166.411352][T13320] team0: Port device dummy0 added [ 1166.442561][T13325] siw: device registration error -23 [ 1166.633727][ T3586] hsr_slave_0: left promiscuous mode [ 1166.634772][ T3586] hsr_slave_1: left promiscuous mode [ 1166.637277][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.677140][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.678952][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.678977][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.705392][ T3586] veth1_macvtap: left promiscuous mode [ 1166.705539][ T3586] veth0_macvtap: left promiscuous mode [ 1166.705748][ T3586] veth1_vlan: left promiscuous mode [ 1166.705900][ T3586] veth0_vlan: left promiscuous mode [ 1167.889412][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 1167.960335][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 1168.096147][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'. [ 1168.111209][T12395] Bluetooth: hci2: command tx timeout [ 1169.461268][T13351] syz.2.1414: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1169.483681][T13351] CPU: 0 UID: 0 PID: 13351 Comm: syz.2.1414 Not tainted syzkaller #0 PREEMPT(full) [ 1169.483711][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1169.483723][T13351] Call Trace: [ 1169.483731][T13351] [ 1169.483741][T13351] dump_stack_lvl+0x189/0x250 [ 1169.483775][T13351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.483800][T13351] ? __pfx__printk+0x10/0x10 [ 1169.483827][T13351] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1169.483848][T13351] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1169.483870][T13351] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1169.483894][T13351] warn_alloc+0x214/0x310 [ 1169.483927][T13351] ? __pfx_warn_alloc+0x10/0x10 [ 1169.483965][T13351] ? __get_vm_area_node+0x28f/0x300 [ 1169.483989][T13351] ? hash_netport4_resize+0x235/0x1b60 [ 1169.484020][T13351] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1169.484043][T13351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.484089][T13351] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1169.484121][T13351] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1169.484151][T13351] ? rcu_is_watching+0x15/0xb0 [ 1169.484180][T13351] ? hash_netport4_resize+0x235/0x1b60 [ 1169.484202][T13351] __kvmalloc_node_noprof+0x674/0x910 [ 1169.484227][T13351] ? hash_netport4_resize+0x235/0x1b60 [ 1169.484258][T13351] hash_netport4_resize+0x235/0x1b60 [ 1169.484279][T13351] ? hash_netport4_uadt+0xc97/0xf30 [ 1169.484306][T13351] ? __pfx_hash_netport4_add+0x10/0x10 [ 1169.484327][T13351] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 1169.484359][T13351] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1169.484402][T13351] call_ad+0x44e/0xb00 [ 1169.484439][T13351] ? __pfx_call_ad+0x10/0x10 [ 1169.484493][T13351] ? __nla_parse+0x40/0x60 [ 1169.484520][T13351] ip_set_ad+0x791/0x930 [ 1169.484557][T13351] ? __pfx_ip_set_ad+0x10/0x10 [ 1169.484633][T13351] nfnetlink_rcv_msg+0xb4a/0x1130 [ 1169.484661][T13351] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1169.484712][T13351] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1169.484735][T13351] ? kmem_cache_free+0x19a/0x690 [ 1169.484817][T13351] netlink_rcv_skb+0x205/0x470 [ 1169.484848][T13351] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1169.484877][T13351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1169.484919][T13351] ? bpf_lsm_capable+0x9/0x20 [ 1169.484942][T13351] ? security_capable+0x7e/0x2e0 [ 1169.484976][T13351] nfnetlink_rcv+0x26a/0x2520 [ 1169.485007][T13351] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1169.485029][T13351] ? kasan_save_track+0x3e/0x80 [ 1169.485051][T13351] ? __kasan_slab_alloc+0x6c/0x80 [ 1169.485075][T13351] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 1169.485109][T13351] ? __dev_queue_xmit+0x27b/0x3b50 [ 1169.485175][T13351] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1169.485202][T13351] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1169.485242][T13351] ? ref_tracker_free+0x63a/0x7d0 [ 1169.485262][T13351] ? __asan_memcpy+0x40/0x70 [ 1169.485285][T13351] ? __pfx_ref_tracker_free+0x10/0x10 [ 1169.485325][T13351] ? skb_clone+0x246/0x3a0 [ 1169.485352][T13351] ? __netlink_deliver_tap+0x807/0x850 [ 1169.485382][T13351] ? netlink_deliver_tap+0x2e/0x1b0 [ 1169.485420][T13351] ? netlink_deliver_tap+0x2e/0x1b0 [ 1169.485468][T13351] netlink_unicast+0x82c/0x9e0 [ 1169.485505][T13351] ? __pfx_netlink_unicast+0x10/0x10 [ 1169.485533][T13351] ? netlink_sendmsg+0x642/0xb30 [ 1169.485547][T13351] ? skb_put+0x11b/0x210 [ 1169.485570][T13351] netlink_sendmsg+0x805/0xb30 [ 1169.485600][T13351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.485623][T13351] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1169.485654][T13351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1169.485671][T13351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.485690][T13351] __sock_sendmsg+0x21c/0x270 [ 1169.485721][T13351] ____sys_sendmsg+0x505/0x830 [ 1169.485749][T13351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1169.485781][T13351] ? import_iovec+0x74/0xa0 [ 1169.485811][T13351] ___sys_sendmsg+0x21f/0x2a0 [ 1169.485834][T13351] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.485903][T13351] ? __fget_files+0x2a/0x420 [ 1169.485929][T13351] ? __fget_files+0x3a0/0x420 [ 1169.485968][T13351] __x64_sys_sendmsg+0x19b/0x260 [ 1169.485992][T13351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1169.486034][T13351] ? do_syscall_64+0xbe/0xfa0 [ 1169.486057][T13351] do_syscall_64+0xfa/0xfa0 [ 1169.486072][T13351] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.486099][T13351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.486119][T13351] ? clear_bhb_loop+0x60/0xb0 [ 1169.486143][T13351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.486162][T13351] RIP: 0033:0x7f06ad18eba9 [ 1169.486182][T13351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.486199][T13351] RSP: 002b:00007f06ab3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.486221][T13351] RAX: ffffffffffffffda RBX: 00007f06ad3d6090 RCX: 00007f06ad18eba9 [ 1169.486236][T13351] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000d [ 1169.486249][T13351] RBP: 00007f06ad211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1169.486261][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.486273][T13351] R13: 00007f06ad3d6128 R14: 00007f06ad3d6090 R15: 00007ffe822edd78 [ 1169.486310][T13351] [ 1170.007743][T13351] Mem-Info: [ 1170.010936][T13351] active_anon:10495 inactive_anon:0 isolated_anon:0 [ 1170.010936][T13351] active_file:16489 inactive_file:40322 isolated_file:0 [ 1170.010936][T13351] unevictable:768 dirty:83 writeback:0 [ 1170.010936][T13351] slab_reclaimable:6612 slab_unreclaimable:96720 [ 1170.010936][T13351] mapped:33157 shmem:4579 pagetables:1414 [ 1170.010936][T13351] sec_pagetables:0 bounce:0 [ 1170.010936][T13351] kernel_misc_reclaimable:0 [ 1170.010936][T13351] free:1313472 free_pcp:11969 free_cma:0 [ 1170.058324][T13351] Node 0 active_anon:42044kB inactive_anon:0kB active_file:65956kB inactive_file:161088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132636kB dirty:332kB writeback:0kB shmem:16780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12268kB pagetables:5616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1170.092181][T13351] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1170.122623][T13351] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.154515][T13351] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1170.156312][T13188] chnl_net:caif_netlink_parms(): no params data found [ 1170.160560][T13351] Node 0 DMA32 free:1344828kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41968kB inactive_anon:0kB active_file:65956kB inactive_file:159768kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2557032kB mlocked:0kB bounce:0kB free_pcp:28788kB local_pcp:12584kB free_cma:0kB [ 1170.235260][T13351] lowmem_reserve[]: 0 0 1 1 1 [ 1170.240316][T13351] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1170.276923][T13351] lowmem_reserve[]: 0 0 0 0 0 [ 1170.281803][T13351] Node 1 Normal free:3893688kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19200kB local_pcp:7680kB free_cma:0kB [ 1170.314347][T13351] lowmem_reserve[]: 0 0 0 0 0 [ 1170.319463][T13351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1170.332540][T13351] Node 0 DMA32: 131*4kB (UE) 728*8kB (UME) 605*16kB (UME) 1751*32kB (UME) 1357*64kB (UME) 465*128kB (UME) 199*256kB (UME) 62*512kB (UME) 29*1024kB (UM) 5*2048kB (UME) 245*4096kB (UM) = 1344572kB [ 1170.340413][T12962] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1170.352116][T13351] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1170.382374][T13351] Node 1 Normal: 184*4kB (UE) 49*8kB (UME) 53*16kB (UME) 112*32kB (UME) 38*64kB (UME) 9*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3893688kB [ 1170.400974][T13351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.410759][T13351] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1170.420553][T13351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.430638][T13351] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1170.440507][T13351] 60921 total pagecache pages [ 1170.445212][T13351] 0 pages in swap cache [ 1170.449576][T13351] Free swap = 124996kB [ 1170.453837][T13351] Total swap = 124996kB [ 1170.458059][T13351] 2097051 pages RAM [ 1170.461884][T13351] 0 pages HighMem/MovableOnly [ 1170.466597][T13351] 425831 pages reserved [ 1170.470864][T13351] 0 pages cma reserved [ 1170.535443][T12962] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1170.717263][T12962] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1170.734408][T12962] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1170.846698][T13373] loop2: detected capacity change from 0 to 2048 [ 1171.047085][T12698] Alternate GPT is invalid, using primary GPT. [ 1171.083010][T12698] loop2: p2 p3 p7 [ 1171.164746][T13373] Alternate GPT is invalid, using primary GPT. [ 1171.172602][T13373] loop2: p2 p3 p7 [ 1171.197690][T13188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.205110][T13188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.239443][T13188] bridge_slave_0: entered allmulticast mode [ 1171.264807][T13188] bridge_slave_0: entered promiscuous mode [ 1171.317880][T13188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.330612][T13188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.362259][T13188] bridge_slave_1: entered allmulticast mode [ 1171.432467][T13188] bridge_slave_1: entered promiscuous mode [ 1171.581475][T12958] udevd[12958]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1171.586375][T12691] udevd[12691]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1171.611325][T12698] udevd[12698]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1171.757323][T13188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.799772][T12691] udevd[12691]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1171.804182][T12958] udevd[12958]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1171.824264][T12698] udevd[12698]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1171.832691][T13188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.882518][ T3586] IPVS: stop unused estimator thread 0... [ 1172.064878][T13188] team0: Port device team_slave_0 added [ 1172.088725][T13188] team0: Port device team_slave_1 added [ 1172.230505][T13188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.246665][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.299776][T13188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.325302][T13188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.349027][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.371861][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 1172.406447][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 1172.406680][T13188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.437793][T13407] lo speed is unknown, defaulting to 1000 [ 1172.634383][T13420] rdma_op ffff8880332e89f0 conn xmit_rdma 0000000000000000 [ 1172.782549][T13188] hsr_slave_0: entered promiscuous mode [ 1172.802359][T13424] loop1: detected capacity change from 0 to 128 [ 1172.819680][T13188] hsr_slave_1: entered promiscuous mode [ 1172.845407][T13188] debugfs: 'hsr0' already exists in 'hsr' [ 1172.878913][T13188] Cannot create hsr debugfs directory [ 1173.524006][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'. [ 1173.662590][T12962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.377993][T12962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.750030][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.757240][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.981821][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.989132][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.694593][T13188] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1175.774325][T13188] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1175.836576][T13188] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1175.999752][T13188] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1176.175109][T13478] loop1: detected capacity change from 0 to 512 [ 1176.228130][T13482] rdma_op ffff8880285cf1f0 conn xmit_rdma 0000000000000000 [ 1176.350082][T13478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.420256][T13478] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.457555][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1176.457575][ T30] audit: type=1800 audit(1757467405.549:225): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1452" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1176.651885][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.669800][T13497] siw: device registration error -23 [ 1176.730452][T13188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.754929][T13495] lo speed is unknown, defaulting to 1000 [ 1176.833252][T13188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.928924][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.936200][T10075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.989230][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.996445][T10075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.183208][T12962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.482685][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.489151][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.674476][T13524] netlink: 'syz.2.1460': attribute type 21 has an invalid length. [ 1177.718069][T13524] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1460'. [ 1177.755969][T13526] loop1: detected capacity change from 0 to 512 [ 1177.878286][T13526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.027983][T13526] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.472717][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.561492][T12962] veth0_vlan: entered promiscuous mode [ 1178.641455][T12962] veth1_vlan: entered promiscuous mode [ 1178.704436][T13553] siw: device registration error -23 [ 1178.872202][ T30] audit: type=1326 audit(1757467407.969:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1178.889417][T13552] lo speed is unknown, defaulting to 1000 [ 1178.913957][T12962] veth0_macvtap: entered promiscuous mode [ 1178.961013][T13188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.978624][T13561] loop2: detected capacity change from 0 to 512 [ 1178.990981][ T30] audit: type=1326 audit(1757467407.989:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1179.077817][ T30] audit: type=1326 audit(1757467407.999:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1179.139076][T13561] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1179.151819][T12962] veth1_macvtap: entered promiscuous mode [ 1179.175633][T13561] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1179.230269][ T30] audit: type=1326 audit(1757467407.999:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06ad18ebe3 code=0x7ffc0000 [ 1179.305176][T13561] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1179.321619][T12962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.350594][ T30] audit: type=1326 audit(1757467407.999:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06ad18d65f code=0x7ffc0000 [ 1179.384013][T13561] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1179.387021][T12962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.397686][T13561] System zones: 0-2, 18-18, 34-35 [ 1179.466288][T13561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.495466][ T30] audit: type=1326 audit(1757467408.069:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f06ad18ec37 code=0x7ffc0000 [ 1179.563286][ T30] audit: type=1326 audit(1757467408.069:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06ad18d510 code=0x7ffc0000 [ 1179.627960][ T30] audit: type=1326 audit(1757467408.079:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06ad18e7ab code=0x7ffc0000 [ 1179.680993][ T30] audit: type=1326 audit(1757467408.119:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06ad18d80a code=0x7ffc0000 [ 1179.792699][T13582] netlink: 'syz.1.1470': attribute type 21 has an invalid length. [ 1179.821973][ T6389] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.838478][T13582] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1470'. [ 1179.843336][ T6389] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.858961][ T6389] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.908603][ T6389] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.340276][T11915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.380102][T11915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.523039][T13188] veth0_vlan: entered promiscuous mode [ 1180.556604][T10740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.600130][T10740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.638300][T13188] veth1_vlan: entered promiscuous mode [ 1180.746424][T13188] veth0_macvtap: entered promiscuous mode [ 1180.759433][T13188] veth1_macvtap: entered promiscuous mode [ 1180.894834][T13188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.911184][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1475'. [ 1180.966054][T13188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.068932][T10740] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.078882][T13601] loop1: detected capacity change from 0 to 2048 [ 1181.089045][ T6389] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.168019][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.212637][T12698] Alternate GPT is invalid, using primary GPT. [ 1181.224953][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.237423][T12698] loop1: p2 p3 p7 [ 1181.281883][T13610] loop6: detected capacity change from 0 to 1024 [ 1181.338064][T13601] Alternate GPT is invalid, using primary GPT. [ 1181.345961][T13610] EXT4-fs: Ignoring removed orlov option [ 1181.374617][T13601] loop1: p2 p3 p7 [ 1181.447324][T13610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.499073][ T6389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.507078][ T6389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.547747][T13573] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1181.830669][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.850317][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.866483][T12691] udevd[12691]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1181.876909][T12698] udevd[12698]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1181.909624][T12958] udevd[12958]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1182.207383][T12698] udevd[12698]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1182.212066][T12691] udevd[12691]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1182.241811][T12958] udevd[12958]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1182.508860][T13633] siw: device registration error -23 [ 1182.536819][T13632] lo speed is unknown, defaulting to 1000 [ 1182.597099][T13635] loop8: detected capacity change from 0 to 512 [ 1182.672771][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.808065][T13635] __quota_error: 19 callbacks suppressed [ 1182.808087][T13635] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1182.866830][T13635] EXT4-fs warning (device loop8): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1182.963098][T13635] EXT4-fs (loop8): mount failed [ 1183.582450][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.594385][T13662] loop1: detected capacity change from 0 to 1024 [ 1183.699084][T13662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1183.746223][ T30] audit: type=1326 audit(1757467412.839:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1183.777966][ T30] audit: type=1326 audit(1757467412.839:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1183.802004][ T30] audit: type=1326 audit(1757467412.869:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1183.825220][ T30] audit: type=1326 audit(1757467412.869:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1183.848295][ T30] audit: type=1326 audit(1757467412.869:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1183.968530][T13662] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1489: Allocating blocks 385-513 which overlap fs metadata [ 1184.057944][ T30] audit: type=1326 audit(1757467412.869:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1184.340610][T13676] lo speed is unknown, defaulting to 1000 [ 1184.881938][ T30] audit: type=1326 audit(1757467412.989:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1184.904965][ T30] audit: type=1326 audit(1757467413.009:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1184.929860][ T30] audit: type=1326 audit(1757467413.009:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.2.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ad18eba9 code=0x7ffc0000 [ 1184.964366][T13662] EXT4-fs (loop1): pa ffff88804dc213a0: logic 16, phys. 129, len 24 [ 1184.972950][T13662] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1185.527172][T13697] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.622560][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.957851][T13706] loop6: detected capacity change from 0 to 2048 [ 1185.965691][T13706] EXT4-fs: inline encryption not supported [ 1186.102561][T13706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.140354][T13712] loop1: detected capacity change from 0 to 512 [ 1186.210746][T13712] EXT4-fs: Ignoring removed mblk_io_submit option [ 1186.362733][T13721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1501'. [ 1186.581128][T13712] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1186.969912][T13712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 1186.996660][T13712] System zones: 1-12 [ 1187.037306][T13712] EXT4-fs (loop1): 1 truncate cleaned up [ 1187.055291][T13712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.104227][T13730] loop7: detected capacity change from 0 to 128 [ 1187.177222][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.291085][T13730] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1187.457434][T13730] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.226293][T13742] loop8: detected capacity change from 0 to 1024 [ 1188.331645][T13745] loop2: detected capacity change from 0 to 512 [ 1188.350540][T13742] EXT4-fs: Ignoring removed bh option [ 1188.386709][T13742] EXT4-fs: inline encryption not supported [ 1188.395433][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.473634][T13742] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1188.535506][T13742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1188.539019][T12962] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1188.622838][T13742] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1510: lblock 2 mapped to illegal pblock 2 (length 1) [ 1188.626000][T13745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.642454][T13742] __quota_error: 4 callbacks suppressed [ 1188.642473][T13742] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1188.665620][T13742] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1510: lblock 0 mapped to illegal pblock 48 (length 1) [ 1188.686212][T13745] ext4 filesystem being mounted at /417/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.713138][T13742] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1188.804999][T13742] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.1510: Failed to acquire dquot type 0 [ 1188.858793][T13742] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1188.949423][T13742] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1510: mark_inode_dirty error [ 1189.025265][T13742] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1189.068192][T13745] loop2: detected capacity change from 512 to 0 [ 1189.107647][T13742] EXT4-fs (loop8): 1 orphan inode deleted [ 1189.154317][T13742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.172940][ T1337] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1189.241022][ C1] blk_print_req_error: 50 callbacks suppressed [ 1189.241044][ C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1189.279151][ C0] I/O error, dev loop2, sector 140 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1189.289797][ C0] I/O error, dev loop2, sector 136 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1189.300129][ T1337] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1189.314453][ T5870] EXT4-fs error (device loop2): ext4_get_inode_loc:4999: inode #2: block 34: comm syz-executor: unable to read itable block [ 1189.348336][ T1337] EXT4-fs error (device loop8): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 1189.373253][ C0] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1189.382917][ C0] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1189.392467][ C0] buffer_io_error: 14 callbacks suppressed [ 1189.392486][ C0] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1189.406657][ T5870] EXT4-fs (loop2): I/O error while writing superblock [ 1189.424805][T13741] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1510: lblock 0 mapped to illegal pblock 48 (length 1) [ 1189.457622][ T5870] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: IO failure [ 1189.472034][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1189.477879][T13741] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 1189.481726][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1189.500730][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1189.509048][ T5870] EXT4-fs (loop2): I/O error while writing superblock [ 1189.546775][ T5870] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 1189.584984][ C0] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1189.594606][ C0] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1189.604457][ C0] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1189.616221][ T5870] EXT4-fs (loop2): I/O error while writing superblock [ 1189.790819][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.791924][ C1] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x83700 phys_seg 1 prio class 2 [ 1189.837918][T13751] EXT4-fs error (device loop2): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 1189.969397][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1189.986786][T13751] EXT4-fs (loop2): I/O error while writing superblock [ 1190.031351][ T12] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4984: inode #2: block 34: comm kworker/u8:0: unable to read itable block [ 1190.073729][ C0] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1190.082174][ T12] EXT4-fs (loop2): I/O error while writing superblock [ 1190.125623][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.139281][T13779] loop7: detected capacity change from 0 to 512 [ 1190.184100][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1190.194032][ T5870] EXT4-fs (loop2): I/O error while writing superblock [ 1190.234962][ C0] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1190.340200][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 1190.361750][T13779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.394222][T13779] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.424058][ T30] audit: type=1800 audit(1757467419.519:267): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1521" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1190.537707][T13788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.546057][T13788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.557061][T12962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.599945][T13788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.607388][T13788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.871738][T13795] loop7: detected capacity change from 0 to 2048 [ 1190.944101][T13795] Alternate GPT is invalid, using primary GPT. [ 1190.965710][ T3586] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.967153][T13795] loop7: p2 p3 p7 [ 1191.276065][ T3586] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.281353][T12958] udevd[12958]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1191.327921][T12691] udevd[12691]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 1191.339341][T12698] udevd[12698]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1191.519940][ T3586] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.834758][ T3586] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.939846][T13814] smc: net device bond0 applied user defined pnetid SYZ0 [ 1191.947390][T13811] syzkaller1: entered promiscuous mode [ 1191.957305][T13811] syzkaller1: entered allmulticast mode [ 1192.228539][T13827] syz.1.1536 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1193.186665][ T3586] bridge_slave_1: left allmulticast mode [ 1193.210546][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1193.225336][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1193.236532][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1193.248243][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1193.269198][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1193.279594][ T3586] bridge_slave_1: left promiscuous mode [ 1193.284067][T13853] overlayfs: failed to resolve './bus': -2 [ 1193.289734][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.329762][T13846] netlink: 'syz.1.1544': attribute type 10 has an invalid length. [ 1193.376620][ T3586] bridge_slave_0: left allmulticast mode [ 1193.394392][ T3586] bridge_slave_0: left promiscuous mode [ 1193.410167][ T30] audit: type=1326 audit(1757467422.499:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.447859][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.529305][ T30] audit: type=1326 audit(1757467422.499:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.580691][ T30] audit: type=1326 audit(1757467422.559:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.625619][ T30] audit: type=1326 audit(1757467422.559:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.687216][ T30] audit: type=1326 audit(1757467422.559:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.723178][ T30] audit: type=1326 audit(1757467422.559:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.750816][ T30] audit: type=1326 audit(1757467422.559:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.784639][ T30] audit: type=1326 audit(1757467422.559:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.811050][ T30] audit: type=1326 audit(1757467422.559:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.846958][ T30] audit: type=1326 audit(1757467422.569:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.891726][ T30] audit: type=1326 audit(1757467422.569:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.914446][ T30] audit: type=1326 audit(1757467422.569:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.937882][ T30] audit: type=1326 audit(1757467422.569:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1193.964112][ T30] audit: type=1326 audit(1757467422.569:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.7.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71318eba9 code=0x7ffc0000 [ 1194.370253][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.385661][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.401458][ T3586] bond0 (unregistering): Released all slaves [ 1194.606586][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1551'. [ 1194.893493][ T3586] tipc: Left network mode [ 1194.898160][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.905572][T13871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.945427][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.989807][T13871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.011485][T13880] loop7: detected capacity change from 0 to 1024 [ 1195.086365][T13880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.139469][T13880] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1555: Allocating blocks 385-513 which overlap fs metadata [ 1195.272457][T13880] EXT4-fs (loop7): pa ffff88804dc21570: logic 16, phys. 129, len 24 [ 1195.281278][T13880] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1195.388381][ T5871] Bluetooth: hci4: command tx timeout [ 1195.425273][T13893] overlayfs: failed to resolve './bus': -2 [ 1195.517334][T13850] lo speed is unknown, defaulting to 1000 [ 1195.702117][T12962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.037270][ T3586] hsr_slave_0: left promiscuous mode [ 1196.054414][ T3586] hsr_slave_1: left promiscuous mode [ 1196.064555][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.083146][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.099101][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.117122][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.167052][ T3586] veth1_macvtap: left promiscuous mode [ 1196.198154][ T3586] veth0_macvtap: left promiscuous mode [ 1196.214162][ T3586] veth1_vlan: left promiscuous mode [ 1196.245122][ T3586] veth0_vlan: left promiscuous mode [ 1197.325354][T13933] overlayfs: failed to resolve './bus': -2 [ 1197.477853][ T5871] Bluetooth: hci4: command tx timeout [ 1197.624592][T13940] loop8: detected capacity change from 0 to 512 [ 1197.699952][T13940] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1197.746938][T13940] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.985145][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.565018][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 1198.821788][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 1199.462469][T13961] loop8: detected capacity change from 0 to 1024 [ 1199.488796][T13961] EXT4-fs: Ignoring removed orlov option [ 1199.522374][T13961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.560946][ T5871] Bluetooth: hci4: command tx timeout [ 1199.796411][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.124891][T13968] program syz.8.1584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1200.742725][T13324] lo speed is unknown, defaulting to 1000 [ 1200.764437][T13324] syz0: Port: 1 Link DOWN [ 1200.905232][T13979] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1200.905232][T13979] program }\)\ not setting count and/or reply_len properly [ 1201.405127][T13850] chnl_net:caif_netlink_parms(): no params data found [ 1201.413419][T13993] 9pnet_fd: Insufficient options for proto=fd [ 1201.468514][ T3586] IPVS: stop unused estimator thread 0... [ 1201.627711][ T5871] Bluetooth: hci4: command tx timeout [ 1202.020304][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.060685][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.091022][T13850] bridge_slave_0: entered allmulticast mode [ 1202.151961][T13850] bridge_slave_0: entered promiscuous mode [ 1202.189078][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.207737][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.246942][T13850] bridge_slave_1: entered allmulticast mode [ 1202.288106][T13850] bridge_slave_1: entered promiscuous mode [ 1202.555322][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.632619][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.947106][T13850] team0: Port device team_slave_0 added [ 1202.972254][T13850] team0: Port device team_slave_1 added [ 1203.221015][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.237887][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.297582][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.346087][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.363744][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.419851][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.678617][T13850] hsr_slave_0: entered promiscuous mode [ 1203.705097][T13850] hsr_slave_1: entered promiscuous mode [ 1203.744826][T13850] debugfs: 'hsr0' already exists in 'hsr' [ 1203.763769][T14043] syz.1.1605 uses obsolete (PF_INET,SOCK_PACKET) [ 1203.779459][T13850] Cannot create hsr debugfs directory [ 1203.801914][T14046] loop8: detected capacity change from 0 to 512 [ 1203.884542][T14046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.957746][T14046] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.182240][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.502393][T14062] 9pnet_fd: Insufficient options for proto=fd [ 1204.671625][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 1204.671646][ T30] audit: type=1326 audit(1757467433.769:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361e98eba9 code=0x7ffc0000 [ 1204.795606][ T30] audit: type=1326 audit(1757467433.769:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361e98eba9 code=0x7ffc0000 [ 1204.897783][ T30] audit: type=1326 audit(1757467433.779:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f361e98eba9 code=0x7ffc0000 [ 1204.934112][T14073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'. [ 1204.995857][ T30] audit: type=1326 audit(1757467433.779:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361e98eba9 code=0x7ffc0000 [ 1205.056338][ T30] audit: type=1326 audit(1757467433.779:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361e98eba9 code=0x7ffc0000 [ 1205.083789][ T30] audit: type=1326 audit(1757467433.779:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f361e98eba9 code=0x7ffc0000 [ 1205.134556][T14076] loop6: detected capacity change from 0 to 128 [ 1205.162766][ T30] audit: type=1326 audit(1757467433.779:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361e98eba9 code=0x7ffc0000 [ 1205.216051][T14076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1205.318542][T13850] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1205.325461][ T30] audit: type=1326 audit(1757467434.069:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1205.329841][T14076] System zones: [ 1205.349132][ T30] audit: type=1326 audit(1757467434.069:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1205.421360][ T30] audit: type=1326 audit(1757467434.069:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9798eba9 code=0x7ffc0000 [ 1205.459702][T14076] 1-3, 19-19, 35-36 [ 1205.465644][T13850] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1205.472627][T14076] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1205.500473][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x13d [ 1205.532058][T13850] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1205.542360][T14076] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.606915][T13850] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1205.692853][T11492] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1205.912983][T14097] loop6: detected capacity change from 0 to 1024 [ 1206.056208][T14097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.375853][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.587291][T14121] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1626'. [ 1206.862752][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.986810][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.048449][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.055707][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.104877][T14135] loop6: detected capacity change from 0 to 2048 [ 1207.157023][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.164311][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.255665][T14135] Alternate GPT is invalid, using primary GPT. [ 1207.302877][T14135] loop6: p2 p3 p7 [ 1207.551505][T12698] udevd[12698]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1207.581271][T12958] udevd[12958]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1207.584536][T12691] udevd[12691]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 1207.895658][T14156] loop7: detected capacity change from 0 to 512 [ 1208.069982][T14162] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1640'. [ 1208.185970][T14156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.327742][T14156] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.420332][T14176] lo speed is unknown, defaulting to 1000 [ 1208.536581][T14176] lo speed is unknown, defaulting to 1000 [ 1208.634145][T14176] lo speed is unknown, defaulting to 1000 [ 1208.654164][T12962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.703558][T14176] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1208.775754][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.830840][T14176] lo speed is unknown, defaulting to 1000 [ 1208.844363][T14176] lo speed is unknown, defaulting to 1000 [ 1208.854354][T14176] lo speed is unknown, defaulting to 1000 [ 1208.989831][T14176] lo speed is unknown, defaulting to 1000 [ 1209.022186][T14176] lo speed is unknown, defaulting to 1000 [ 1209.045319][T14176] lo speed is unknown, defaulting to 1000 [ 1209.066240][T14195] loop6: detected capacity change from 0 to 164 [ 1209.217665][T14195] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1209.371868][T14195] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1209.763493][T14210] loop8: detected capacity change from 0 to 512 [ 1209.894004][T14210] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c098, mo2=0002] [ 1209.918118][T14210] System zones: 0-2, 18-18, 34-34 [ 1210.009754][T14210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.069849][T14210] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.171242][T14210] EXT4-fs error (device loop8): ext4_xattr_block_list:762: inode #15: comm syz.8.1652: corrupted xattr block 19: overlapping e_value [ 1210.320897][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.701383][T13850] veth0_vlan: entered promiscuous mode [ 1210.800997][T13850] veth1_vlan: entered promiscuous mode [ 1210.933028][T14241] lo speed is unknown, defaulting to 1000 [ 1211.009275][T14248] loop7: detected capacity change from 0 to 512 [ 1211.049679][T14248] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1663: casefold flag without casefold feature [ 1211.160266][T14248] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1663: couldn't read orphan inode 15 (err -117) [ 1211.179005][T13850] veth0_macvtap: entered promiscuous mode [ 1211.280089][T14248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.332710][T13850] veth1_macvtap: entered promiscuous mode [ 1211.377765][T14243] lo speed is unknown, defaulting to 1000 [ 1211.485280][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.547212][T12962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.586460][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.981075][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.008625][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.252155][T10740] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.282254][ T3586] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.311065][T14308] loop7: detected capacity change from 0 to 2048 [ 1214.362879][ T6389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.418916][T14308] Alternate GPT is invalid, using primary GPT. [ 1214.425283][T14308] loop7: p2 p3 p7 [ 1214.426266][ T6389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.596129][T14314] loop8: detected capacity change from 0 to 1024 [ 1214.616960][ T6389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.649096][T14314] EXT4-fs: Ignoring removed bh option [ 1214.654585][T14314] EXT4-fs: inline encryption not supported [ 1214.682177][ T6389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.701675][T14314] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1214.794379][T12691] udevd[12691]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 1214.801968][T12698] udevd[12698]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1214.811278][T12958] udevd[12958]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1214.857855][T14314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1214.972815][T14314] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1680: lblock 2 mapped to illegal pblock 2 (length 1) [ 1215.059337][T14314] __quota_error: 38 callbacks suppressed [ 1215.059359][T14314] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1215.135712][T14314] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1680: lblock 0 mapped to illegal pblock 48 (length 1) [ 1215.223642][T14314] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1215.264044][T14314] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.1680: Failed to acquire dquot type 0 [ 1215.357119][T14314] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1215.405656][T14314] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1680: mark_inode_dirty error [ 1215.483831][T14314] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1215.560502][T14314] EXT4-fs (loop8): 1 orphan inode deleted [ 1215.597620][ T3586] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1215.615886][T14314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.658063][ T3586] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1215.715159][ T3586] EXT4-fs error (device loop8): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 1215.736767][T14349] loop6: detected capacity change from 0 to 512 [ 1215.738277][T14350] siw: device registration error -23 [ 1215.794784][T14342] lo speed is unknown, defaulting to 1000 [ 1215.808091][T14314] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1680: lblock 0 mapped to illegal pblock 48 (length 1) [ 1215.872710][T14314] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 1215.974798][T14349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1216.107798][T14349] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.178377][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.394490][T14363] IPv6: Can't replace route, no match found [ 1216.445365][ T30] audit: type=1326 audit(1757467445.539:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14364 comm="syz.8.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d418eba9 code=0x7ffc0000 [ 1216.469657][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.477123][ T30] audit: type=1326 audit(1757467445.569:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14364 comm="syz.8.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d418eba9 code=0x7ffc0000 [ 1216.521524][ T30] audit: type=1326 audit(1757467445.569:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14364 comm="syz.8.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d418eba9 code=0x7ffc0000 [ 1216.581394][ T30] audit: type=1326 audit(1757467445.569:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14364 comm="syz.8.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d418eba9 code=0x7ffc0000 [ 1216.629480][ T30] audit: type=1326 audit(1757467445.569:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14364 comm="syz.8.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d418eba9 code=0x7ffc0000 [ 1216.696395][ T30] audit: type=1326 audit(1757467445.569:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14364 comm="syz.8.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d418eba9 code=0x7ffc0000 [ 1216.833639][T14373] loop6: detected capacity change from 0 to 1024 [ 1216.891353][T14373] EXT4-fs: inline encryption not supported [ 1216.935866][T14379] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1216.980136][T14373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.382147][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.407181][T14390] loop9: detected capacity change from 0 to 1024 [ 1217.430923][T14390] EXT4-fs: Ignoring removed bh option [ 1217.436423][T14390] EXT4-fs: inline encryption not supported [ 1217.477306][T14391] batadv1: entered promiscuous mode [ 1217.536130][T14390] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1217.676628][T14390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1217.795642][T14390] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.1703: lblock 2 mapped to illegal pblock 2 (length 1) [ 1217.873162][T14396] ref_ctr_offset mismatch. inode: 0x171 offset: 0x0 ref_ctr_offset(old): 0x8000000 ref_ctr_offset(new): 0x4a000000 [ 1217.996765][T14390] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1703: lblock 0 mapped to illegal pblock 48 (length 1) [ 1218.049982][T14390] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.1703: Failed to acquire dquot type 0 [ 1218.109037][T14390] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1218.160301][T14390] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.1703: mark_inode_dirty error [ 1218.214026][T14406] lo speed is unknown, defaulting to 1000 [ 1218.260830][T14390] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1218.330107][T14390] EXT4-fs (loop9): 1 orphan inode deleted [ 1218.394277][ T6389] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 1218.498775][T14390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.544267][T14416] netlink: 'syz.6.1711': attribute type 1 has an invalid length. [ 1218.604704][ T6389] EXT4-fs error (device loop9): ext4_release_dquot:6979: comm kworker/u8:14: Failed to release dquot type 0 [ 1218.764388][T14390] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1703: lblock 0 mapped to illegal pblock 48 (length 1) [ 1219.111834][T13850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.132347][T14432] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1718'. [ 1219.217993][T14432] ksmbd: Unknown IPC event: 4, ignore. [ 1219.493739][T14440] loop9: detected capacity change from 0 to 512 [ 1219.522189][T14440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1219.658305][T14440] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1219.666275][T14440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 1219.747894][T14440] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (80) [ 1219.822354][T14440] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1219.966204][T14440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1220.015496][T14451] lo speed is unknown, defaulting to 1000 [ 1220.063393][T14453] siw: device registration error -23 [ 1220.075180][T14440] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1719: dx entry: limit 65535 != root limit 120 [ 1220.181477][T14440] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1719: Corrupt directory, running e2fsck is recommended [ 1220.660495][T13850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.092226][T14468] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1722'. [ 1221.121001][T14469] loop8: detected capacity change from 0 to 1024 [ 1221.132297][T14469] EXT4-fs: Ignoring removed bh option [ 1221.143267][T14469] EXT4-fs: inline encryption not supported [ 1221.223266][T14469] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1221.265132][T14469] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1221.341420][T14469] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1730: lblock 2 mapped to illegal pblock 2 (length 1) [ 1221.394019][T14469] __quota_error: 12 callbacks suppressed [ 1221.394041][T14469] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1221.424214][T14469] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1730: lblock 0 mapped to illegal pblock 48 (length 1) [ 1221.454096][T14469] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1221.483751][T14469] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.1730: Failed to acquire dquot type 0 [ 1221.534305][T14469] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1221.561095][T14469] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1730: mark_inode_dirty error [ 1221.585270][T14469] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1221.597859][T14469] EXT4-fs (loop8): 1 orphan inode deleted [ 1221.617807][T14469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1221.637758][T10740] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1221.664311][T10740] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1221.685012][T10740] EXT4-fs error (device loop8): ext4_release_dquot:6979: comm kworker/u8:3: Failed to release dquot type 0 [ 1221.839858][T14469] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1730: lblock 0 mapped to illegal pblock 48 (length 1) [ 1221.909946][T14469] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 1221.923512][T14487] loop9: detected capacity change from 0 to 512 [ 1221.928186][T14486] loop6: detected capacity change from 0 to 512 [ 1221.966555][T14486] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1222.011578][T14487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.055251][T14486] EXT4-fs (loop6): 1 truncate cleaned up [ 1222.078636][T14487] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.108757][T14486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.133497][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.330021][T13850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.408746][T14495] IPv6: Can't replace route, no match found [ 1222.449677][T11492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.585599][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1743'. [ 1222.624671][T14502] lo speed is unknown, defaulting to 1000 [ 1222.824245][T14517] loop8: detected capacity change from 0 to 512 [ 1223.037354][T14517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1223.066836][T14517] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.094549][T14525] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 1223.117812][T14525] netlink: 'syz.1.1754': attribute type 4 has an invalid length. [ 1223.125683][T14525] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1754'. [ 1223.316690][T13188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.458828][T14533] batadv0: entered promiscuous mode [ 1223.516362][T14538] siw: device registration error -23 [ 1223.586628][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1758'. [ 1223.622653][T14537] lo speed is unknown, defaulting to 1000 [ 1223.644506][T14545] loop9: detected capacity change from 0 to 512 [ 1223.704655][T14545] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1762: bg 0: block 127: padding at end of block bitmap is not set [ 1223.794558][T14545] ------------[ cut here ]------------ [ 1223.800563][T14545] EA inode 11 i_nlink=2 [ 1223.805699][T14545] WARNING: fs/ext4/xattr.c:1053 at ext4_xattr_inode_update_ref+0x534/0x5d0, CPU#1: syz.9.1762/14545 [ 1223.821189][T14545] Modules linked in: [ 1223.826506][T14545] CPU: 1 UID: 0 PID: 14545 Comm: syz.9.1762 Not tainted syzkaller #0 PREEMPT(full) [ 1223.836839][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1223.847494][T14545] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1223.854141][T14545] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 dd bf 8b 4c 89 fe e8 9d 63 fc fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 b7 [ 1223.874728][T14545] RSP: 0018:ffffc9000acef2a0 EFLAGS: 00010246 [ 1223.880902][T14545] RAX: efd0a16effaa0200 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1223.888978][T14545] RDX: ffffc9000d55f000 RSI: 0000000000008d3b RDI: 0000000000008d3c [ 1223.896982][T14545] RBP: ffffc9000acef390 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 1223.905400][T14545] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff88807df6a920 [ 1223.913649][T14545] R13: 1ffff1100fbed524 R14: 00000000ffffffff R15: 000000000000000b [ 1223.921720][T14545] FS: 00007ffa465ff6c0(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000 [ 1223.931257][T14545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1223.938356][T14545] CR2: 00007ffef8feff68 CR3: 000000004f582000 CR4: 00000000003526f0 [ 1223.946364][T14545] Call Trace: [ 1223.949762][T14545] [ 1223.952729][T14545] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1223.959292][T14545] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1223.964884][T14545] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1223.971039][T14545] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 1223.976993][T14545] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1223.982800][T14545] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 1223.989371][T14545] ? __ext4_journal_get_write_access+0x272/0x570 [ 1223.995759][T14545] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1224.002559][T14545] ext4_xattr_delete_inode+0xa4c/0xc10 [ 1224.008204][T14545] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 1224.014291][T14545] ext4_evict_inode+0xac9/0xee0 [ 1224.019268][T14545] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1224.024690][T14545] ? do_raw_spin_unlock+0x122/0x240 [ 1224.030545][T14545] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1224.036053][T14545] evict+0x501/0x9c0 [ 1224.040502][T14545] ? __pfx_evict+0x10/0x10 [ 1224.045084][T14545] ? do_raw_spin_unlock+0x122/0x240 [ 1224.050401][T14545] ? _raw_spin_unlock+0x28/0x50 [ 1224.055309][T14545] ? iput+0x6d8/0x9d0 [ 1224.059519][T14545] ext4_orphan_cleanup+0xc20/0x1460 [ 1224.064824][T14545] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1224.070538][T14545] ? ext4_register_li_request+0x259/0x720 [ 1224.076295][T14545] ? errseq_check_and_advance+0x66/0x120 [ 1224.082199][T14545] ext4_fill_super+0x57df/0x6090 [ 1224.087208][T14545] ? __pfx_ext4_fill_super+0x10/0x10 [ 1224.092583][T14545] ? set_blocksize+0x21e/0x500 [ 1224.097397][T14545] ? sb_set_blocksize+0x104/0x180 [ 1224.102536][T14545] ? setup_bdev_super+0x4c1/0x5b0 [ 1224.107718][T14545] get_tree_bdev_flags+0x40b/0x4d0 [ 1224.112969][T14545] ? __pfx_ext4_fill_super+0x10/0x10 [ 1224.118612][T14545] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1224.124841][T14545] vfs_get_tree+0x8f/0x2b0 [ 1224.129378][T14545] do_new_mount+0x302/0xa10 [ 1224.134353][T14545] ? apparmor_capable+0x137/0x1b0 [ 1224.139926][T14545] ? __pfx_do_new_mount+0x10/0x10 [ 1224.145008][T14545] ? ns_capable+0x8a/0xf0 [ 1224.149423][T14545] ? kmem_cache_free+0x19a/0x690 [ 1224.154419][T14545] __se_sys_mount+0x313/0x410 [ 1224.159323][T14545] ? __pfx___se_sys_mount+0x10/0x10 [ 1224.164587][T14545] ? do_syscall_64+0xbe/0xfa0 [ 1224.169378][T14545] ? __x64_sys_mount+0x20/0xc0 [ 1224.174195][T14545] do_syscall_64+0xfa/0xfa0 [ 1224.178779][T14545] ? lockdep_hardirqs_on+0x9c/0x150 [ 1224.184037][T14545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.190363][T14545] ? clear_bhb_loop+0x60/0xb0 [ 1224.195087][T14545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.201134][T14545] RIP: 0033:0x7ffa4579034a [ 1224.205588][T14545] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.225352][T14545] RSP: 002b:00007ffa465fee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1224.234400][T14545] RAX: ffffffffffffffda RBX: 00007ffa465feef0 RCX: 00007ffa4579034a [ 1224.242947][T14545] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffa465feeb0 [ 1224.251204][T14545] RBP: 0000200000000180 R08: 00007ffa465feef0 R09: 0000000000800700 [ 1224.259277][T14545] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1224.267295][T14545] R13: 00007ffa465feeb0 R14: 0000000000000473 R15: 0000200000000680 [ 1224.275594][T14545] [ 1224.278706][T14545] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1224.286016][T14545] CPU: 1 UID: 0 PID: 14545 Comm: syz.9.1762 Not tainted syzkaller #0 PREEMPT(full) [ 1224.295519][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1224.305600][T14545] Call Trace: [ 1224.308906][T14545] [ 1224.311882][T14545] dump_stack_lvl+0x99/0x250 [ 1224.316517][T14545] ? __asan_memcpy+0x40/0x70 [ 1224.321223][T14545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1224.326717][T14545] ? __pfx__printk+0x10/0x10 [ 1224.331361][T14545] vpanic+0x237/0x6d0 [ 1224.335544][T14545] ? __pfx_vpanic+0x10/0x10 [ 1224.340073][T14545] ? is_bpf_text_address+0x292/0x2b0 [ 1224.345394][T14545] ? is_bpf_text_address+0x26/0x2b0 [ 1224.350633][T14545] panic+0xb9/0xc0 [ 1224.354401][T14545] ? __pfx_panic+0x10/0x10 [ 1224.358878][T14545] __warn+0x334/0x4c0 [ 1224.362893][T14545] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1224.368906][T14545] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1224.374900][T14545] report_bug+0x2be/0x4f0 [ 1224.379250][T14545] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1224.385325][T14545] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1224.391313][T14545] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 1224.397336][T14545] handle_bug+0x84/0x160 [ 1224.401588][T14545] exc_invalid_op+0x1a/0x50 [ 1224.406131][T14545] asm_exc_invalid_op+0x1a/0x20 [ 1224.410987][T14545] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1224.417593][T14545] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 dd bf 8b 4c 89 fe e8 9d 63 fc fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 b7 [ 1224.437421][T14545] RSP: 0018:ffffc9000acef2a0 EFLAGS: 00010246 [ 1224.443521][T14545] RAX: efd0a16effaa0200 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1224.451697][T14545] RDX: ffffc9000d55f000 RSI: 0000000000008d3b RDI: 0000000000008d3c [ 1224.459707][T14545] RBP: ffffc9000acef390 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 1224.467689][T14545] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff88807df6a920 [ 1224.475664][T14545] R13: 1ffff1100fbed524 R14: 00000000ffffffff R15: 000000000000000b [ 1224.483681][T14545] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1224.490312][T14545] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1224.495895][T14545] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1224.501977][T14545] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 1224.507977][T14545] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1224.513710][T14545] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 1224.520241][T14545] ? __ext4_journal_get_write_access+0x272/0x570 [ 1224.527218][T14545] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1224.534056][T14545] ext4_xattr_delete_inode+0xa4c/0xc10 [ 1224.539543][T14545] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 1224.545555][T14545] ext4_evict_inode+0xac9/0xee0 [ 1224.550426][T14545] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1224.555977][T14545] ? do_raw_spin_unlock+0x122/0x240 [ 1224.561268][T14545] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1224.566903][T14545] evict+0x501/0x9c0 [ 1224.570812][T14545] ? __pfx_evict+0x10/0x10 [ 1224.575319][T14545] ? do_raw_spin_unlock+0x122/0x240 [ 1224.580525][T14545] ? _raw_spin_unlock+0x28/0x50 [ 1224.585382][T14545] ? iput+0x6d8/0x9d0 [ 1224.589382][T14545] ext4_orphan_cleanup+0xc20/0x1460 [ 1224.594702][T14545] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1224.600358][T14545] ? ext4_register_li_request+0x259/0x720 [ 1224.606081][T14545] ? errseq_check_and_advance+0x66/0x120 [ 1224.611740][T14545] ext4_fill_super+0x57df/0x6090 [ 1224.616706][T14545] ? __pfx_ext4_fill_super+0x10/0x10 [ 1224.622000][T14545] ? set_blocksize+0x21e/0x500 [ 1224.626781][T14545] ? sb_set_blocksize+0x104/0x180 [ 1224.631822][T14545] ? setup_bdev_super+0x4c1/0x5b0 [ 1224.636886][T14545] get_tree_bdev_flags+0x40b/0x4d0 [ 1224.642008][T14545] ? __pfx_ext4_fill_super+0x10/0x10 [ 1224.647304][T14545] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1224.652962][T14545] vfs_get_tree+0x8f/0x2b0 [ 1224.657395][T14545] do_new_mount+0x302/0xa10 [ 1224.661928][T14545] ? apparmor_capable+0x137/0x1b0 [ 1224.666972][T14545] ? __pfx_do_new_mount+0x10/0x10 [ 1224.672099][T14545] ? ns_capable+0x8a/0xf0 [ 1224.676445][T14545] ? kmem_cache_free+0x19a/0x690 [ 1224.681425][T14545] __se_sys_mount+0x313/0x410 [ 1224.686121][T14545] ? __pfx___se_sys_mount+0x10/0x10 [ 1224.691327][T14545] ? do_syscall_64+0xbe/0xfa0 [ 1224.696001][T14545] ? __x64_sys_mount+0x20/0xc0 [ 1224.700771][T14545] do_syscall_64+0xfa/0xfa0 [ 1224.705277][T14545] ? lockdep_hardirqs_on+0x9c/0x150 [ 1224.710483][T14545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.716552][T14545] ? clear_bhb_loop+0x60/0xb0 [ 1224.721234][T14545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.727132][T14545] RIP: 0033:0x7ffa4579034a [ 1224.731559][T14545] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.751169][T14545] RSP: 002b:00007ffa465fee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1224.759616][T14545] RAX: ffffffffffffffda RBX: 00007ffa465feef0 RCX: 00007ffa4579034a [ 1224.767593][T14545] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffa465feeb0 [ 1224.775591][T14545] RBP: 0000200000000180 R08: 00007ffa465feef0 R09: 0000000000800700 [ 1224.783656][T14545] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1224.791633][T14545] R13: 00007ffa465feeb0 R14: 0000000000000473 R15: 0000200000000680 [ 1224.799623][T14545] [ 1224.802942][T14545] Kernel Offset: disabled [ 1224.807345][T14545] Rebooting in 86400 seconds..