last executing test programs: 13m58.480090145s ago: executing program 0 (id=295): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 13m58.019072801s ago: executing program 0 (id=299): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1300000007ff0106"], 0x13) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 13m57.599475037s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) 13m56.247666353s ago: executing program 0 (id=304): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000340)={[{@nodelalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x52b, &(0x7f00000015c0)="$eJzs3cFvI1cZAPBvZpO1d5uSFHoAVGgphQVVayfedlX1QjlVCFVC9MhhGxJvFK0dr9ZOacIesv8DEpV6ghNnDkgckHrijsQBblzKAanACtQgcTDyeLx1nHjtNLG9xL+fNPKb9zz+3lvL70WfvfMCmFsvRMRBRFyOiHciYjmvT/Ij3ugened98vD+xuHD+xtJtNtv/yPJ2jt10XdNx1P5axYj4odvRvw4GQj6x4jm3v6d9Vqtei+vKrfqd8vNvf3r2/X1repWdadSubl2c/W1G69Wzm2sz9d//fGViPjdb7/y0R8Ovv3TTreW8rb+cZyn7tAXH8XpWIiI708i2Axcysdz+bNc/Jku4jylEfH5iHgx+/wvx6Xs3Tzq6Nv0nSn2DgCYhHZ7OdrL/ecAwEWXZjmwJC3luYClSNNSqZvDezauprVGs/Xy7cbuzmY3V7YSi+nt7Vp1Nc8VrsRicnt7obqWlXvntWpl4PxGRDwTET8rXMnOSxuN2uYs//ABgDn21MD6/+9Cd/0HAC644qfFwiz7AQBMT/HI2eCvdQGAi6g46w4AAFNn/QeA+WP9B4D5Y/0HgPlj/QeAufKDt97qHO3D/P7Xm+/u7d5pvHt9s9q8U6rvbpQ2GvfulrYaja3snj31Ua9XazTurr0Su++VW9Vmq9zc279Vb+zutG5l9/W+VV2cyqgAgMd55vkP/5xExMHrV7Ij+u73P3Ktfm7SvQMmKZ11B4CZuTTrDgAzc3y3L2BenCIff2WS/QBmp++mXw/6qovHCoPeH+vlU/uGwpPn2pfOkP8H/q/J/8P8OiH/P8ay7295uAjk/2F+tduJPf8BYM7I8QOjNv3q//5/td13MvD9v98TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAME+WsiNJS/le4EuRpqVSxNMRsRKLye3tWnU1Ij4XEX8qLBY652vjbRIMADyx0r8l+f5f15ZfWhpsvVz4TyF7jIiffPD2z99bb7XurUVcTv75qL71fl5fmUX/AYBReut0bx3v+eTh/Y3eMc3+fPzd7uainbiH+dFtWYiF7LGY5Rqu/ivJz7uSc9pr9OBBRHzxpPEnWW5kJd/5dDB+J/bTU42fHomfZm3dx86/xRfOoS8wbz7szD9vnPT5S+OF7PHkz38xm6HOrjf/HR6b/9JH89+lIfPfgJWhMV75/feOVbaXu20PIr68EHHYe/G++acXPxkS/6Uxx/iX57764rC29i8irsVJ40+OxCq36nfLzb3969v19a3qVnWnUrm5dnP1tRuvVspZjrrcy1Qf9/fXk6HbW3fGf3VI/OKI8X9jzPH/8r/v/Ohrj4n/ra+f/P4/+5j4nTXxm2PGX7/6m+Kwtk78zSHjH/X+vzxm/I/+ur855lMBgClo7u3fWa/VqveOFXby7wJ6NYsnPOcUhfRsl/cK7VHPSSIOzhbiFIXCr5I3pxVrgoWYbtAPImLWQ1YYVZj1zARM2qcf+tNddx65LwAAAAAAAAAAAAAAYDwT+M9DURyomfUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA///yu87n") r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket(0x840000000002, 0x3, 0xff) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) pwrite64(r1, 0x0, 0x0, 0xe7c) inotify_add_watch(r0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000022) chmod(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 13m54.314069508s ago: executing program 0 (id=311): socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 13m53.815525524s ago: executing program 0 (id=313): fanotify_init(0x8, 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mounts\x00') r1 = fanotify_init(0x1, 0x40000) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x0) 13m53.545929368s ago: executing program 32 (id=313): fanotify_init(0x8, 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mounts\x00') r1 = fanotify_init(0x1, 0x40000) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x0) 8m57.683415174s ago: executing program 3 (id=973): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x1523, &(0x7f0000000780)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm], 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) read(r2, 0x0, 0x0) 8m53.403398108s ago: executing program 3 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1be14000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rt_tgsigqueueinfo(0x0, 0x0, 0x5, 0x0) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2805cbc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) 8m51.027520788s ago: executing program 3 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x201000c, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61}, {}, {}, {0x6}]}) 8m41.514140688s ago: executing program 3 (id=994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, 0x0) 8m39.978781057s ago: executing program 3 (id=997): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r0 = fsopen(0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unlinkat(r1, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008810) r3 = socket$igmp(0x2, 0x3, 0x2) fstat(r2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000440)={{0x2, 0x0, @local}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8, {0x2, 0x0, @empty}, 'team_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 8m37.747596725s ago: executing program 3 (id=1001): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd296895ede2f911a) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341204007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) 8m22.720278054s ago: executing program 33 (id=1001): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd296895ede2f911a) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341204007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) 7m38.364136523s ago: executing program 5 (id=1100): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3c8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m35.010429915s ago: executing program 5 (id=1112): r0 = socket(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000880)={0x3, 0x2, 0x5, 0xff5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x22020600) r4 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) syz_pidfd_open(r4, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) write(r0, &(0x7f0000000140)="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", 0xfc) 7m33.624332983s ago: executing program 5 (id=1113): setresuid(0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchmod(r0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 7m26.380552924s ago: executing program 5 (id=1124): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) shutdown(r1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 7m20.186254762s ago: executing program 5 (id=1130): socket$netlink(0x10, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x10) socket$inet6(0xa, 0x5, 0x0) sync() sync() sync() sync() sync() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0xa7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m17.648786744s ago: executing program 5 (id=1132): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 7m16.158514673s ago: executing program 34 (id=1132): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 6m21.183890205s ago: executing program 4 (id=1215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000700)=""/166}, 0x20) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) socket(0x10, 0x5, 0x0) 6m19.20975309s ago: executing program 4 (id=1216): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffa) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendfile(r2, r2, 0x0, 0x800000009) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) 6m11.995565721s ago: executing program 4 (id=1226): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$hfs(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9a48fcfd9002fb41024932205e2176fc5b"], 0x4, 0x2fe, &(0x7f0000001100)="$eJzs3U1vE0ccx/HfrO3EaaJ0m6Sq1EurtJHaS9S0PVS9uKp87b2nqm3sSBFWEEmQgAsm4oh4Adx5C7wILiDeAHDhxAvIbdHMzq7X9nidCDubhO9HsjWenYf/sE8zK5EVgE/Wn+3XT395Zz9Gqqkm6XcpktSU6pK+1FfN2wfH+8e9bqesoZqrYT9GaU0zVmb3oBuqauu5Gl5sf9W1UszDfCRJ8sebqoNA5dzZHxBJi/48dNubFxzXrIwOri99U1EolSn+G5hTneqOVisMBwBwCfj7f+RvEysuyyiKpC1/27/S9/9Rp1UHMFu/9sayktIKhfu/m90lxu7fz92mwXrPLeHs9ihbJZ4lmMbI7wWlR9bQHMyEV5Vvk5SPJVra269re/eBOpFO1PIKFTbcdyc9dDNTot0MrE1LTG6tob8+S0djZ5RLo5uzkPb2e91FmwjEv36+Hj+eeW5emn9MrCfq5PO/emLsbnJ7Kh7ZU1HDxv/T5BaXXS1bSn7Z32q1oqEiX7hOvvY9eFNG2QyvSIptZg8I+nkEgThPsoTre03DjxXS0e2EOjCDxtdDteL813hd19fGUK2aPxK2d2/2Sh+lzEc2RPPY/G029V7P1C7M/yMb35YKZ2bZpd64kv7ISMezEC5ZdyXjsTtHP099m0fgLZ57bJDO+bTskf7Xb1o9unvvRq3X6x7axH+BxK2VQ+NzGg+lYJn5J2oqKaP+IMfdPO4nyVlbTuYZ/I8zbdBeP/Ice/qECtuzLM+JLno3Xb9EXaFN7RcqOyDnmsimLjNp0E60JmyayzUKl8yRyXa6zxibxOKas/Muk67/3Ezez+rcdcZ+xSXz9PJFpoZa3MlXcMNTwbXQ3GXK2mB58gqu0OPPE9aMbs313Q/S94VMo9IeYxfntWHaeqV/ef4PAAAAAAAAAAAAAAAAAABw1VzE/1ioeowAAAAAAAAAAAAAAAAAAAAAAFx1Z3//79LgTU2hvxHv3v8bT33/79ALgP2Lonj/L1CNDwEAAP//FJB9Ww==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x1, 0x2, 0x2, 0x5, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6m5.078802778s ago: executing program 4 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r5, r5, 0x1014, 0x5, 0x9}) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) 6m4.037143771s ago: executing program 4 (id=1238): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)) r7 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000b80)) 6m3.037004894s ago: executing program 4 (id=1240): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008881}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 5m47.585797868s ago: executing program 35 (id=1240): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008881}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 16.793079444s ago: executing program 1 (id=1767): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x183341, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200000, &(0x7f00000006c0)=ANY=[], 0x2, 0x33a, &(0x7f0000001f80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') mkdirat(r3, &(0x7f00000010c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) 14.967621576s ago: executing program 1 (id=1769): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) r5 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000b80)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7fffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000180)={0x20000005}) 13.763463274s ago: executing program 1 (id=1772): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)) r7 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000b80)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7fffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r7, &(0x7f0000000180)={0x20000005}) 13.093678578s ago: executing program 2 (id=1773): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bffebb4", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda23f3ee0ad4319dc3585a18c5217b1fdd7c69bb02dfa21de5b35ddb2199c2f2134c9d0e3ec856dfae5e0e52540000000ef7d15e6852b88300b766ab70535837520a57571ae", 0x56}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5550e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f0000000900)}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x3ff}, {"bdda"}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 11.859162586s ago: executing program 2 (id=1777): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000280)={[{@nodatacow}, {@flushoncommit}, {@commit={'commit', 0x3d, 0x7fffffff}}, {@datacow}, {@noflushoncommit}, {@discard}, {@treelog}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0xc, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xa031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0xfffffffffffffeb3, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x21}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e1e, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 8.192073179s ago: executing program 7 (id=1779): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40010) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfc, 0x2, 0x0, @empty, @broadcast, {[@end, @noop]}}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x2400, 0xfffffffe}}}}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0xfffffffe}}}}}}, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) 8.08351926s ago: executing program 6 (id=1780): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141001, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfc}, @hci_rp_read_local_name={{0x7}, {0x3, "c8e02583b339773d08c31c8dc3baf8cd71b99273adc85506676bc88e1d4bd7c6a7c1c52337c53ea6003add9c5971882cf87f5b245b5f6431ea6f7ae44963187416ca6518ab8b290b7f7df55162bb7a233cd3867c96527d9efb182753a4df1ca4d096e0eb1db2a35bc6a341c7173f215c98a88b3b057e5ba890b1a18208f1ed863f037fb71b26682369323a35c82dcc7baf73fb3978d02d1c07d53f7db04e5c91f0b68204177b9533a1564bd76344a3cd7fd20f3ad58d2fde07ba525fbd5113dc00cda8cad3e3d850df398afff2a5b591be26a026a7afb7dfd5aa67e544d38e043d9b42cb896394bac88fe10948b122c2a23709816098282b"}}}}, 0xff) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x4000000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) userfaultfd(0x802) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x8, 0x40000004, 0x2, 0x40005, 0x5, 0xf, 0x7, 0x54c6cff3, 0xfd, 0xf, 0x1, 0x1, 0x1, 0x1000, 0x6a, 0x0, 0x7f, 0x10000007, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0x2000e26, 0x3, 0x9, 0x4086, 0x0, 0x4]}) 7.023253587s ago: executing program 7 (id=1781): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) r5 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000b80)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7fffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000180)={0x20000005}) 6.855847728s ago: executing program 6 (id=1782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200000000000000000000000200000000000000010000"], 0x0, 0x4e}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000400)}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r11, 0x0, 0x0, r12], [0x2b8]}) 6.59151747s ago: executing program 2 (id=1783): prctl$PR_SET_ENDIAN(0x14, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) syz_emit_ethernet(0x7b, &(0x7f0000000000)={@broadcast, @random="5107a6485df2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1db510", 0x45, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x6, 0x6, "c1665d", 0xfffb, 0x0, 0x1, @loopback, @mcast2, [@routing={0x2f, 0x0, 0x1, 0x46}, @fragment={0x3b, 0x0, 0xcf, 0x1, 0x0, 0x1e, 0x64}], "e97c742e7a"}}}}}}}, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) close(r3) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44810}, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"6ef7669f274d13b691ebe44b00e4f5b53deca24dd02ace71edc05e3106628168", r4}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x4, "34e6498c25f58dad9987ffe93bbabd18cf504a2700"}) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmmsg$inet(r9, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x4000000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r12, 0x9, 0x3}, 0xc) 6.53398439s ago: executing program 1 (id=1784): add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0xff0f, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x4, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) close(r0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setreuid(0xee01, 0xee01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="a365059a679b4d5bdaf541a895e437d926b769c8c4", 0x15) 6.52977796s ago: executing program 7 (id=1792): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060101000000000000000001000000140007800800124000070005050015001f0000000500010006000000050005000a0000000500040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0xc951349034062a20) syz_init_net_socket$llc(0x1a, 0x802, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x40000) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) renameat2(r1, &(0x7f0000000040)='./bus\x00', r1, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) close_range(r0, 0xffffffffffffffff, 0x0) 5.490770316s ago: executing program 1 (id=1785): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x54}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 5.489379907s ago: executing program 6 (id=1786): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) close_range(r3, 0xffffffffffffffff, 0x0) 4.297513154s ago: executing program 6 (id=1787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.296656494s ago: executing program 2 (id=1796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x7d3c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socket(0x10, 0x80002, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) openat$audio1(0xffffffffffffff9c, 0x0, 0x400440, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x14) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 4.295764934s ago: executing program 7 (id=1788): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) chdir(&(0x7f0000000280)='./file1\x00') semget$private(0x0, 0x207, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f029, 0x6}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x1000, 0x476, 0xd, 0xfff, 0x28a, 0x0, 0xfeff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000440)="874536c869f49d756fd2f27efab2ee428755f46652653990d6fd5b3f4e5a536ec02c0d3254ac47b1e82d3504f522ceaa0865c5e8971e551106c71620d80d0dad778eaeea50d47bcc0c6267aa3c38cc14da6987c33f93c35fd17806217596e2343bef31842a4d4d7f6bbb3081b9bbcb67d3ed9a56a0151eacc396732df87ec7009f4384dfdd887efa49fa75cfb4adb6574e0838f8b8610953f7324d9f2f43ab32eb2ef563c031ae38cf73e5ff694637e2f5200c247249bcde3ef128f4605753a6a2d40a60cf832d10f76300855e6136821685beb8ec65b84ee7717f55d73aa84f99d11e1b4da5a401354b0ec7b49fb14db691c73022b6426542", 0xf9, r1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r3 = msgget$private(0x0, 0x44) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x2000) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000580)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x64, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x401, 0x8, 0x2687, 0x4, 0x4, 0x2}) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x919274e3c74a6f77) 2.999990442s ago: executing program 6 (id=1789): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd, 0x0, 0x7ff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) init_module(&(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x4, 0x1, 0xf, 0x3, 0x3e, 0x7, 0x76, 0x40, 0xb4, 0x4, 0x9, 0x38, 0x1, 0x5, 0x4, 0x4}, [{0x6474e551, 0x6, 0x1000, 0xffffffffffffff81, 0x2, 0x2, 0xce1afc2, 0x4ad0}]}, 0x78, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.991461462s ago: executing program 2 (id=1790): syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0xc4) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x13, r0, 0x0) readlink(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f0000000500)=""/250, 0xfa) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) mprotect(&(0x7f0000387000/0x4000)=nil, 0x4000, 0x5) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000002540)=0x1) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/if_inet6\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000030301018521570d0e0000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000080)={0x7, 'vlan0\x00', {0xa}, 0x6}) 1.934630199s ago: executing program 7 (id=1791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = io_uring_setup(0x21cb, &(0x7f0000000840)={0x0, 0x2d24, 0x2, 0x2, 0xda}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") openat(0xffffffffffffff9c, 0x0, 0x8042, 0x108) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) 729.733996ms ago: executing program 2 (id=1793): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="2f30c8307b0a", 0x6}], 0x1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='svcrdma_decode_short_err\x00', r6, 0x0, 0x10001}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 562.717137ms ago: executing program 7 (id=1794): r0 = socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x24, 0x0) mkdir(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4cd, &(0x7f0000000540)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) 562.384147ms ago: executing program 6 (id=1795): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = creat(0x0, 0x6a) fanotify_mark(0xffffffffffffffff, 0x641, 0x1020, r5, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) 0s ago: executing program 1 (id=1797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): ving as an active interface with an up link [ 289.006925][ T8531] loop3: detected capacity change from 0 to 40427 [ 289.132739][ T8531] F2FS-fs (loop3): Found nat_bits in checkpoint [ 289.174504][ T8553] syz.1.669 (8553) used greatest stack depth: 18376 bytes left [ 292.398892][ T59] 0: reclassify loop, rule prio 0, protocol 800 [ 294.259888][ T59] 0: reclassify loop, rule prio 0, protocol 800 [ 296.488039][ T8574] Set syz1 is full, maxelem 65536 reached [ 297.773550][ T6396] 0: reclassify loop, rule prio 0, protocol 800 [ 297.809818][ T6396] 0: reclassify loop, rule prio 0, protocol 800 [ 298.101046][ T34] 0: reclassify loop, rule prio 0, protocol 800 [ 298.346628][ T8607] netlink: 168 bytes leftover after parsing attributes in process `syz.1.681'. [ 299.204523][ T8614] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 299.603880][ T8618] loop3: detected capacity change from 0 to 40427 [ 299.771066][ T8618] F2FS-fs (loop3): invalid crc value [ 299.787053][ T8618] F2FS-fs (loop3): Found nat_bits in checkpoint [ 299.847910][ T8618] F2FS-fs (loop3): Start checkpoint disabled! [ 299.881117][ T8618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 300.203213][ T3525] 0: reclassify loop, rule prio 0, protocol 800 [ 300.588544][ T11] kworker/u4:0: attempt to access beyond end of device [ 300.588544][ T11] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 300.652763][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 301.673417][ T8636] tipc: Enabled bearer , priority 0 [ 301.691177][ T8636] syzkaller0: entered promiscuous mode [ 301.720784][ T8636] syzkaller0: entered allmulticast mode [ 301.873196][ T8640] tipc: Resetting bearer [ 301.931327][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 301.956346][ T8635] tipc: Resetting bearer [ 302.050277][ T8635] tipc: Disabling bearer [ 303.204338][ T5802] Bluetooth: hci2: unexpected event for opcode 0x2064 [ 303.316708][ T8648] loop3: detected capacity change from 0 to 2048 [ 303.432504][ T8648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.457549][ T8654] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 303.605519][ T8648] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 303.618401][ T8648] EXT4-fs (loop3): This should not happen!! Data will be lost [ 303.618401][ T8648] [ 303.628152][ T8648] EXT4-fs (loop3): Total free blocks count 0 [ 303.634228][ T8648] EXT4-fs (loop3): Free/Dirty block details [ 303.640190][ T8648] EXT4-fs (loop3): free_blocks=2415919504 [ 303.646046][ T8648] EXT4-fs (loop3): dirty_blocks=48 [ 303.651310][ T8648] EXT4-fs (loop3): Block reservation details [ 303.657642][ T8648] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 303.879356][ T7261] 0: reclassify loop, rule prio 0, protocol 800 [ 304.817597][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.221442][ T49] 0: reclassify loop, rule prio 0, protocol 800 [ 306.779862][ T8677] libceph: resolve '½@½Ée2²āOAq§Ø­cz' (ret=-3): failed [ 309.621119][ T3525] 0: reclassify loop, rule prio 0, protocol 800 [ 310.307745][ T8714] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 310.898183][ T8726] ptrace attach of "./syz-executor exec"[7039] was attempted by ""[8726] [ 311.332100][ T34] 0: reclassify loop, rule prio 0, protocol 800 [ 313.289838][ T8741] netlink: 'syz.1.716': attribute type 10 has an invalid length. [ 313.332757][ T8741] tipc: Resetting bearer [ 313.414166][ T8741] tipc: Resetting bearer [ 313.481914][ T8741] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.504026][ T8741] bond0: (slave team0): Enslaving as an active interface with an up link [ 313.528031][ T8748] loop3: detected capacity change from 0 to 128 [ 313.546918][ T8744] netlink: 'syz.1.716': attribute type 10 has an invalid length. [ 313.568023][ T8748] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.753069][ T8748] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.812039][ T8746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.430437][ T7261] 0: reclassify loop, rule prio 0, protocol 800 [ 315.755975][ T8741] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.833337][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.874021][ T8741] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 315.963059][ T11] bond3: (slave macvlan2): link status up again after 0 ms [ 316.099622][ T11] bond3: (slave macvlan2): failed to get link speed/duplex [ 316.120828][ T11] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.304529][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 316.390358][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.662762][ T3525] 0: reclassify loop, rule prio 0, protocol 800 [ 316.764623][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.174652][ T3525] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.305952][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.312467][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.323642][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 319.127024][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 320.496714][ T34] net_ratelimit: 1 callbacks suppressed [ 320.496730][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.281483][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.289009][ T34] 0: reclassify loop, rule prio 0, protocol 800 [ 321.400979][ T3525] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.532550][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.640856][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.856833][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.025376][ T8797] overlayfs: failed to clone lowerpath [ 322.048386][ T8797] overlayfs: failed to clone lowerpath [ 322.136486][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.430541][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.650170][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 325.639026][ T11] net_ratelimit: 15 callbacks suppressed [ 325.639044][ T11] bond3: (slave macvlan2): failed to get link speed/duplex [ 326.892387][ T49] 0: reclassify loop, rule prio 0, protocol 800 [ 326.905258][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.051863][ T8841] tipc: Enabling of bearer rejected, failed to enable media [ 327.082049][ T3525] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.115856][ T8843] tipc: Enabling of bearer rejected, failed to enable media [ 327.191677][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.395409][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.551911][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.893009][ T3525] bond3: (slave macvlan2): failed to get link speed/duplex [ 328.372399][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 328.393674][ T8858] o2cb: This node has not been configured. [ 328.400095][ T8858] o2cb: Cluster check failed. Fix errors before retrying. [ 328.410315][ T8858] (syz.4.741,8858,0):user_dlm_register:674 ERROR: status = -22 [ 328.418544][ T8858] (syz.4.741,8858,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 328.545717][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 329.812889][ T8881] smc: net device bond0 applied user defined pnetid SYZ2 [ 330.661645][ T34] net_ratelimit: 4 callbacks suppressed [ 330.661664][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 330.939761][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.100948][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.636601][ T8898] tipc: Enabled bearer , priority 0 [ 331.772044][ T8901] syzkaller0: entered promiscuous mode [ 331.777603][ T8901] syzkaller0: entered allmulticast mode [ 331.809872][ T8900] tipc: Enabling of bearer rejected, failed to enable media [ 331.822574][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.916303][ T8905] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 331.994699][ T8905] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.029647][ T8905] bond0: (slave team0): Enslaving as an active interface with an up link [ 332.064607][ T8894] tipc: Resetting bearer [ 332.100579][ T8891] tipc: Resetting bearer [ 332.201488][ T8891] tipc: Disabling bearer [ 332.228007][ T8905] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 332.326089][ T8905] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 333.951944][ T59] 0: reclassify loop, rule prio 0, protocol 800 [ 333.967872][ T8908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.029519][ T8916] tipc: Enabled bearer , priority 0 [ 334.045346][ T8916] syzkaller0: entered promiscuous mode [ 334.076269][ T8916] syzkaller0: entered allmulticast mode [ 334.108519][ T8905] bond_slave_0: entered promiscuous mode [ 334.114835][ T8905] bond_slave_1: entered promiscuous mode [ 334.120627][ T8905] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 334.131012][ T8905] team_slave_0: entered promiscuous mode [ 334.137081][ T8905] team_slave_1: entered promiscuous mode [ 334.142861][ T8905] syz_tun: entered promiscuous mode [ 334.155712][ T8905] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.168417][ T8905] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 334.183838][ T59] bond3: (slave macvlan2): failed to get link speed/duplex [ 334.243848][ T8916] tipc: Resetting bearer [ 334.779701][ T11] 0: reclassify loop, rule prio 0, protocol 800 [ 334.831866][ T8915] tipc: Resetting bearer [ 334.923368][ T8915] tipc: Disabling bearer [ 334.953021][ T1129] bond3: (slave macvlan2): failed to get link speed/duplex [ 335.100623][ T1129] bond3: (slave macvlan2): failed to get link speed/duplex [ 335.239086][ T28] audit: type=1326 audit(1761872019.465:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 335.272307][ T1129] bond3: (slave macvlan2): failed to get link speed/duplex [ 335.279794][ T28] audit: type=1326 audit(1761872019.465:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 335.349880][ T28] audit: type=1326 audit(1761872019.465:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 335.535995][ T28] audit: type=1326 audit(1761872019.465:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 335.576294][ T28] audit: type=1326 audit(1761872019.475:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 335.605275][ T28] audit: type=1326 audit(1761872019.475:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 336.212842][ T7261] net_ratelimit: 1 callbacks suppressed [ 336.212861][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.333215][ T28] audit: type=1326 audit(1761872019.475:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 336.361094][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.371384][ T28] audit: type=1326 audit(1761872019.475:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d8efc9 code=0x7ffc0000 [ 336.724102][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.759655][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 336.868207][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.026262][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.207828][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.430869][ T1129] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.470155][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 337.560061][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.688646][ T11] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.812114][ T11] bond3: (slave macvlan2): failed to get link speed/duplex [ 338.746680][ T8965] tipc: Enabling of bearer rejected, failed to enable media [ 340.252772][ T8984] kAFS: No cell specified [ 341.294555][ T59] net_ratelimit: 23 callbacks suppressed [ 341.294574][ T59] bond3: (slave macvlan2): failed to get link speed/duplex [ 341.848078][ T34] bond3: (slave macvlan2): failed to get link speed/duplex [ 341.974076][ T59] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.140855][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.335577][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.473231][ T1122] bond3: (slave macvlan2): failed to get link speed/duplex [ 343.128353][ T9017] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 343.249889][ T9022] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 343.331164][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 343.501229][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 343.764628][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 344.015734][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 344.612733][ T9037] fuse: Bad value for 'fd' [ 346.312720][ T9042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.932002][ T7261] net_ratelimit: 11 callbacks suppressed [ 346.932018][ T7261] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.222282][ T49] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.494010][ T9063] netlink: 'syz.2.791': attribute type 10 has an invalid length. [ 348.262670][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.595360][ T9063] bond0: (slave team0): Enslaving as an active interface with an up link [ 348.685246][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 348.702537][ T9063] netlink: 'syz.2.791': attribute type 10 has an invalid length. [ 348.719309][ T9063] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 349.733912][ T9063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.092198][ T9077] bond_slave_0: entered promiscuous mode [ 350.097945][ T9077] bond_slave_1: entered promiscuous mode [ 350.103870][ T9077] team_slave_0: entered promiscuous mode [ 350.109571][ T9077] team_slave_1: entered promiscuous mode [ 350.115414][ T9077] syz_tun: entered promiscuous mode [ 350.142909][ T9077] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 351.008592][ T9077] bond2: (slave macvlan0): Enslaving as a backup interface with an up link [ 351.051965][ T3525] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.139520][ T9079] bond0: (slave team0): Releasing backup interface [ 351.190495][ T9079] tipc: Resetting bearer [ 351.222195][ T49] 0: reclassify loop, rule prio 0, protocol 800 [ 351.382183][ T49] 0: reclassify loop, rule prio 0, protocol 800 [ 351.395265][ T9079] tipc: Resetting bearer [ 352.277938][ T9079] bond1: (slave ip6gretap1): Releasing backup interface [ 352.288616][ T9079] bond1: (slave ip6gretap1): the permanent HWaddr of slave - be:e3:39:09:d0:0d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 352.356329][ T9079] bond1: (slave veth5): Releasing backup interface [ 352.402343][ T9079] bond2: (slave gretap1): Releasing active interface [ 352.468782][ T9079] bond3: (slave macvlan2): Removing an active aggregator [ 352.494959][ T11] bond3: Warning: Found an uninitialized port [ 352.538135][ T9079] bond3: (slave macvlan2): Releasing backup interface [ 352.650860][ T9083] netlink: 'syz.1.794': attribute type 10 has an invalid length. [ 352.737379][ T9083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.747479][ T9083] team0: Device bond0 failed to register rx_handler [ 353.033807][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 354.672270][ T9111] tipc: Enabled bearer , priority 0 [ 355.067503][ T9112] syzkaller0: entered promiscuous mode [ 355.283678][ T9112] syzkaller0: entered allmulticast mode [ 355.487710][ T9111] tipc: Resetting bearer [ 355.512874][ T9109] tipc: Resetting bearer [ 357.453365][ T3469] 0: reclassify loop, rule prio 0, protocol 800 [ 357.483593][ T9109] tipc: Disabling bearer [ 357.642680][ T3469] 0: reclassify loop, rule prio 0, protocol 800 [ 359.719501][ T9138] loop3: detected capacity change from 0 to 2048 [ 360.077621][ T9138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.142550][ T9144] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 362.592295][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'. [ 363.517192][ T11] 0: reclassify loop, rule prio 0, protocol 800 [ 363.524439][ T1129] 0: reclassify loop, rule prio 0, protocol 800 [ 365.058273][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.820'. [ 367.242206][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 368.321957][ T9202] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 369.054736][ T34] 0: reclassify loop, rule prio 0, protocol 800 [ 369.773904][ T7261] 0: reclassify loop, rule prio 0, protocol 800 [ 375.609140][ T3469] 0: reclassify loop, rule prio 0, protocol 800 [ 375.616406][ T1122] 0: reclassify loop, rule prio 0, protocol 800 [ 376.940630][ T5802] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 378.739081][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749293][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.592091][ T9275] binder: 9273:9275 unknown command 0 [ 380.351980][ T9275] binder: 9273:9275 ioctl c0306201 200000000080 returned -22 [ 380.385542][ T9281] bond3: option mode: unable to set because the bond device is up [ 380.426259][ T9281] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 380.435209][ T9281] bond3: (slave macvlan3): Enslaving as a backup interface with a down link [ 380.811080][ T1122] 0: reclassify loop, rule prio 0, protocol 800 [ 381.062699][ T5802] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 381.072157][ T5802] Bluetooth: hci2: Injecting HCI hardware error event [ 381.084676][ T5797] Bluetooth: hci2: hardware error 0x00 [ 381.295976][ T1129] 0: reclassify loop, rule prio 0, protocol 800 [ 383.781028][ T5797] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 386.424088][ T1122] 0: reclassify loop, rule prio 0, protocol 800 [ 386.736295][ T9341] No such timeout policy "syz0" [ 387.325986][ T11] 0: reclassify loop, rule prio 0, protocol 800 [ 387.682781][ T9356] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 390.037839][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 390.133116][ T9370] macvtap1: entered promiscuous mode [ 390.160968][ T9370] bond0: entered promiscuous mode [ 390.192458][ T9370] macvtap1: entered allmulticast mode [ 390.217858][ T9370] bond0: entered allmulticast mode [ 390.246849][ T9370] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 390.312148][ T9371] bond0: left allmulticast mode [ 390.320826][ T9371] bond0: left promiscuous mode [ 391.636345][ T3525] 0: reclassify loop, rule prio 0, protocol 800 [ 392.008480][ T9385] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 392.825682][ T7261] 0: reclassify loop, rule prio 0, protocol 800 [ 393.234101][ T9391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 398.701915][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 398.710892][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.882'. [ 401.006531][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 401.026859][ T9457] batadv0: entered promiscuous mode [ 401.033116][ T9457] macvtap1: entered promiscuous mode [ 401.038730][ T9457] macvtap1: entered allmulticast mode [ 401.051663][ T9457] batadv0: entered allmulticast mode [ 401.070226][ T9457] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 407.911848][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 408.001029][ T9543] bridge_slave_1: left allmulticast mode [ 408.090880][ T9543] bridge_slave_1: left promiscuous mode [ 408.127122][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.253478][ T9543] bridge_slave_0: left allmulticast mode [ 408.267165][ T9543] bridge_slave_0: left promiscuous mode [ 408.291533][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.772092][ T9566] bridge0: entered promiscuous mode [ 408.777405][ T9566] bridge0: entered allmulticast mode [ 412.395373][ T9582] overlayfs: failed to clone lowerpath [ 416.298011][ T9615] loop3: detected capacity change from 0 to 2048 [ 417.408660][ T9615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.874081][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.712111][ T9687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.921'. [ 427.704995][ T9702] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 427.715453][ T9702] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 427.724254][ T9702] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 431.088873][ T9724] loop3: detected capacity change from 0 to 164 [ 431.568089][ T9724] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 434.259994][ T9746] tipc: Enabled bearer , priority 0 [ 434.269973][ T9746] syzkaller0: entered promiscuous mode [ 434.275608][ T9746] syzkaller0: entered allmulticast mode [ 434.302883][ T9746] tipc: Resetting bearer [ 434.540466][ T9744] tipc: Resetting bearer [ 434.570980][ T9744] tipc: Disabling bearer [ 435.684814][ T9764] sctp: [Deprecated]: syz.2.946 (pid 9764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.684814][ T9764] Use struct sctp_sack_info instead [ 435.871454][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 435.900226][ T9766] macvtap1: entered promiscuous mode [ 436.202996][ T9769] autofs4:pid:9769:autofs_fill_super: called with bogus options [ 436.694253][ T9766] dummy0: entered promiscuous mode [ 436.911907][ T9766] macvtap1: entered allmulticast mode [ 437.335607][ T9766] dummy0: entered allmulticast mode [ 437.378299][ T9773] macvtap1: left promiscuous mode [ 437.385147][ T9773] dummy0: left promiscuous mode [ 437.391084][ T9773] macvtap1: left allmulticast mode [ 437.396543][ T9773] dummy0: left allmulticast mode [ 437.758548][ T9788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.191408][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.197874][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.356656][ T9851] tipc: Enabled bearer , priority 0 [ 445.381270][ T9851] syzkaller0: entered promiscuous mode [ 445.401405][ T9851] syzkaller0: entered allmulticast mode [ 445.447367][ T9851] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 445.864025][ T9859] tipc: Resetting bearer [ 445.945683][ T9859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.050612][ T9850] tipc: Resetting bearer [ 446.138167][ T9850] tipc: Disabling bearer [ 446.533196][ T9865] loop3: detected capacity change from 0 to 16 [ 446.580406][ T9865] erofs: (device loop3): mounted with root inode @ nid 36. [ 447.831178][ T9873] loop3: detected capacity change from 0 to 256 [ 447.914254][ T9873] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 449.387850][ T28] audit: type=1800 audit(1761872133.615:204): pid=9881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.973" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 462.198716][ T9948] mmap: syz.4.990 (9948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 464.615132][ T9961] sd 0:0:1:0: device reset [ 465.203216][ T967] IPVS: starting estimator thread 0... [ 465.310813][ T9973] IPVS: using max 17 ests per chain, 40800 per kthread [ 467.909745][ T9995] orangefs_mount: mount request failed with -4 [ 475.651791][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 475.661206][T10060] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1014'. [ 475.670409][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 479.700527][T10091] trusted_key: syz.1.1028 sent an empty control message without MSG_MORE. [ 482.090292][T10098] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 482.100264][T10098] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 482.110252][T10098] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 482.176361][T10098] syz.1.1023 (10098) used greatest stack depth: 16624 bytes left [ 482.420745][ T28] audit: type=1800 audit(1761872166.335:205): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1023" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 484.104649][T10121] overlayfs: failed to clone lowerpath [ 484.169725][T10113] overlayfs: failed to clone lowerpath [ 484.267210][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.285930][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.295532][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.468899][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.480972][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 484.488763][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.611136][ T5797] Bluetooth: hci4: command tx timeout [ 487.595676][T10147] openvswitch: netlink: Message has 16 unknown bytes. [ 488.390332][T10150] kAFS: No cell specified [ 488.679718][ T5797] Bluetooth: hci4: command tx timeout [ 489.056157][T10122] chnl_net:caif_netlink_parms(): no params data found [ 490.707852][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 490.731450][ T5797] Bluetooth: hci4: command tx timeout [ 490.875858][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.169373][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.181178][T10122] bridge_slave_0: entered allmulticast mode [ 492.188743][T10122] bridge_slave_0: entered promiscuous mode [ 492.263193][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.291350][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.304413][T10122] bridge_slave_1: entered allmulticast mode [ 492.332803][T10122] bridge_slave_1: entered promiscuous mode [ 493.372511][ T5797] Bluetooth: hci4: command tx timeout [ 494.000231][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.682525][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.772741][T10122] team0: Port device team_slave_0 added [ 495.791536][T10122] team0: Port device team_slave_1 added [ 495.907761][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.938455][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.118969][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.291497][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.298500][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.965745][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.809502][T10221] overlayfs: failed to clone lowerpath [ 497.832651][T10122] hsr_slave_0: entered promiscuous mode [ 497.849146][T10122] hsr_slave_1: entered promiscuous mode [ 497.849599][T10221] overlayfs: failed to clone lowerpath [ 497.861661][T10122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.879383][T10122] Cannot create hsr debugfs directory [ 498.885037][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 499.435219][ T9555] tipc: Left network mode [ 499.890311][T10122] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 499.924959][T10122] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.360369][ T9555] bond1: (slave ip6gretap1): Releasing active interface [ 501.109996][T10122] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 501.137397][T10269] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 501.164658][T10265] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1061'. [ 501.470925][T10122] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.994664][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.007893][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.537653][T10122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.583440][T10122] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.597824][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.605094][ T9553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.635559][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.642895][ T9553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.213137][ T9555] hsr_slave_0: left promiscuous mode [ 503.219489][ T9555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.230370][ T9555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.238922][ T9555] bridge_slave_1: left allmulticast mode [ 503.245055][ T9555] bridge_slave_1: left promiscuous mode [ 503.251427][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.261383][ T9555] bridge_slave_0: left allmulticast mode [ 503.267090][ T9555] bridge_slave_0: left promiscuous mode [ 503.273976][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.552444][ T9555] bond1 (unregistering): Released all slaves [ 504.014030][ T9555] team0 (unregistering): Port device team_slave_1 removed [ 504.067975][ T9555] team0 (unregistering): Port device team_slave_0 removed [ 504.125313][ T9555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.177858][ T9555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.777178][ T9555] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 504.786296][ T9555] bond0 (unregistering): Released all slaves [ 504.880500][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.258035][ T9555] IPVS: stop unused estimator thread 0... [ 505.395825][T10122] veth0_vlan: entered promiscuous mode [ 505.417473][T10122] veth1_vlan: entered promiscuous mode [ 505.468341][T10122] veth0_macvtap: entered promiscuous mode [ 505.485312][T10122] veth1_macvtap: entered promiscuous mode [ 505.509727][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.525140][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.542100][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.560608][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.577342][T10122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.597462][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.608430][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.619809][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.632050][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.644067][T10122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.659832][T10122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.670067][T10122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.680317][T10122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.690127][T10122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.810075][ T9538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.828684][ T9538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.878684][ T9555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.887816][ T9555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.678313][T10360] smc: net device bond0 applied user defined pnetid SYZ2 [ 510.247582][T10394] netlink: 'syz.4.1069': attribute type 4 has an invalid length. [ 510.301664][T10397] kernel profiling enabled (shift: 0) [ 510.331045][T10399] netlink: 'syz.4.1069': attribute type 4 has an invalid length. [ 510.557735][T10411] tipc: Enabling of bearer rejected, failed to enable media [ 516.955606][T10397] syz.5.1071: vmalloc error: size 645922816, failed to allocated page array size 1261568, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 517.490372][T10397] CPU: 1 PID: 10397 Comm: syz.5.1071 Not tainted syzkaller #0 [ 517.498002][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.508099][T10397] Call Trace: [ 517.511415][T10397] [ 517.514376][T10397] dump_stack_lvl+0x16c/0x230 [ 517.519125][T10397] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 517.524868][T10397] ? show_regs_print_info+0x20/0x20 [ 517.530205][T10397] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 517.535891][T10397] warn_alloc+0x210/0x300 [ 517.540272][T10397] ? zone_watermark_ok_safe+0x230/0x230 [ 517.545882][T10397] ? _raw_spin_unlock+0x28/0x40 [ 517.550769][T10397] ? iter_file_splice_write+0x66f/0xc50 [ 517.556361][T10397] __vmalloc_node_range+0x662/0x1320 [ 517.561716][T10397] ? zone_statistics+0x170/0x170 [ 517.566699][T10397] ? free_vm_area+0x50/0x50 [ 517.571244][T10397] ? alloc_pages+0x2ff/0x740 [ 517.575886][T10397] ? rcu_is_watching+0x15/0xb0 [ 517.580691][T10397] ? profile_init+0xee/0x130 [ 517.585310][T10397] ? sysfs_kf_read+0x310/0x310 [ 517.590120][T10397] vzalloc+0x79/0x90 [ 517.594073][T10397] ? profile_init+0xee/0x130 [ 517.598699][T10397] profile_init+0xee/0x130 [ 517.603155][T10397] profiling_store+0x5e/0xc0 [ 517.607780][T10397] kernfs_fop_write_iter+0x3b6/0x520 [ 517.613114][T10397] do_iter_write+0x79a/0xc70 [ 517.617761][T10397] ? vfs_iter_write+0xa0/0xa0 [ 517.622487][T10397] ? __asan_memset+0x22/0x40 [ 517.627111][T10397] ? iov_iter_bvec+0xd4/0x1b0 [ 517.631828][T10397] ? vfs_iter_write+0x6e/0xa0 [ 517.636542][T10397] iter_file_splice_write+0x66f/0xc50 [ 517.641998][T10397] ? splice_from_pipe+0x150/0x150 [ 517.647098][T10397] ? splice_shrink_spd+0xc0/0xc0 [ 517.652105][T10397] ? common_file_perm+0x198/0x1f0 [ 517.657278][T10397] ? splice_from_pipe+0x150/0x150 [ 517.662358][T10397] direct_splice_actor+0xe8/0x130 [ 517.667440][T10397] splice_direct_to_actor+0x2f0/0x870 [ 517.672872][T10397] ? direct_file_splice_eof+0xb0/0xb0 [ 517.678370][T10397] ? warn_unsupported+0xc0/0xc0 [ 517.683281][T10397] ? fsnotify_perm+0x5d/0x5e0 [ 517.688013][T10397] ? security_file_permission+0x79/0xa0 [ 517.693617][T10397] do_splice_direct+0x1b7/0x2c0 [ 517.698530][T10397] ? splice_direct_to_actor+0x870/0x870 [ 517.704127][T10397] ? rcu_read_lock_any_held+0xb4/0x120 [ 517.709634][T10397] ? do_splice_direct+0x2c0/0x2c0 [ 517.714740][T10397] do_sendfile+0x5dc/0xf70 [ 517.719223][T10397] ? do_pwritev+0x340/0x340 [ 517.723795][T10397] __se_sys_sendfile64+0x13f/0x190 [ 517.728959][T10397] ? lock_chain_count+0x20/0x20 [ 517.733856][T10397] ? __x64_sys_sendfile64+0xb0/0xb0 [ 517.739109][T10397] ? lockdep_hardirqs_on+0x98/0x150 [ 517.744352][T10397] do_syscall_64+0x55/0xb0 [ 517.748815][T10397] ? clear_bhb_loop+0x40/0x90 [ 517.753543][T10397] ? clear_bhb_loop+0x40/0x90 [ 517.758790][T10397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.764722][T10397] RIP: 0033:0x7f4d89d8efc9 [ 517.769185][T10397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.788829][T10397] RSP: 002b:00007f4d8aca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 517.797287][T10397] RAX: ffffffffffffffda RBX: 00007f4d89fe5fa0 RCX: 00007f4d89d8efc9 [ 517.805290][T10397] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 517.813296][T10397] RBP: 00007f4d89e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 517.821297][T10397] R10: 0000000000000401 R11: 0000000000000246 R12: 0000000000000000 [ 517.829301][T10397] R13: 00007f4d89fe6038 R14: 00007f4d89fe5fa0 R15: 00007fffba725918 [ 517.837327][T10397] [ 517.965468][T10397] Mem-Info: [ 517.968745][T10397] active_anon:22080 inactive_anon:2 isolated_anon:0 [ 517.968745][T10397] active_file:17575 inactive_file:40626 isolated_file:0 [ 517.968745][T10397] unevictable:0 dirty:270 writeback:0 [ 517.968745][T10397] slab_reclaimable:10860 slab_unreclaimable:93831 [ 517.968745][T10397] mapped:30016 shmem:16987 pagetables:600 [ 517.968745][T10397] sec_pagetables:0 bounce:0 [ 517.968745][T10397] kernel_misc_reclaimable:0 [ 517.968745][T10397] free:1309006 free_pcp:8554 free_cma:0 [ 518.014444][T10397] Node 0 active_anon:80384kB inactive_anon:8kB active_file:70300kB inactive_file:162300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120064kB dirty:1076kB writeback:0kB shmem:60012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12148kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 518.600849][T10397] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 518.742272][T10397] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 518.883505][T10397] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 518.891519][T10397] Node 0 DMA32 free:1340992kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:56896kB inactive_anon:8kB active_file:70300kB inactive_file:160988kB unevictable:0kB writepending:1088kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:31112kB local_pcp:16300kB free_cma:0kB [ 518.922203][T10397] lowmem_reserve[]: 0 0 1 1 1 [ 518.927000][T10397] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 518.968194][T10397] lowmem_reserve[]: 0 0 0 0 0 [ 518.980713][T10397] Node 1 Normal free:3892988kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19232kB local_pcp:13280kB free_cma:0kB [ 519.032777][T10397] lowmem_reserve[]: 0 0 0 0 0 [ 519.037603][T10397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 519.081439][T10397] Node 0 DMA32: 149*4kB (UME) 639*8kB (ME) 94*16kB (ME) 206*32kB (UME) 319*64kB (ME) 74*128kB (UME) 37*256kB (UM) 33*512kB (UME) 23*1024kB (M) 7*2048kB (UM) 301*4096kB (M) = 1340844kB [ 519.147016][T10397] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 519.176151][T10397] Node 1 Normal: 275*4kB (UME) 56*8kB (UME) 49*16kB (UME) 137*32kB (UME) 33*64kB (UME) 11*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3892988kB [ 520.021446][T10397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.032566][T10397] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 520.146607][T10397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.156752][T10397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 520.166267][T10397] 67818 total pagecache pages [ 520.174429][T10397] 2 pages in swap cache [ 520.178697][T10397] Free swap = 124408kB [ 520.184919][T10397] Total swap = 124996kB [ 520.189122][T10397] 2097051 pages RAM [ 520.193253][T10397] 0 pages HighMem/MovableOnly [ 520.198028][T10397] 416137 pages reserved [ 520.204662][T10397] 0 pages cma reserved [ 521.067129][T10495] overlayfs: failed to clone lowerpath [ 524.807720][T10532] loop5: detected capacity change from 0 to 4096 [ 529.975512][T10584] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 531.305356][T10594] netlink: 'syz.5.1112': attribute type 3 has an invalid length. [ 535.032243][T10659] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 543.043295][T10686] loop5: detected capacity change from 0 to 2048 [ 543.155839][T10686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.747573][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1128'. [ 547.565844][ T9538] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.683160][ T9538] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.853620][ T9538] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.998066][ T9538] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.304474][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 553.731509][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.756635][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.766863][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.067493][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.902919][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 554.912281][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.181687][T10780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1151'. [ 555.210978][T10780] bridge_slave_0: entered promiscuous mode [ 555.240850][T10780] bridge_slave_0: entered allmulticast mode [ 557.034297][T10771] chnl_net:caif_netlink_parms(): no params data found [ 557.051187][ T5103] Bluetooth: hci2: command tx timeout [ 557.728242][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 557.737450][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1156'. [ 559.422152][ T5103] Bluetooth: hci2: command tx timeout [ 559.584738][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.913400][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.080080][T10771] bridge_slave_0: entered allmulticast mode [ 560.103992][T10771] bridge_slave_0: entered promiscuous mode [ 560.160011][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.695662][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.781246][T10771] bridge_slave_1: entered allmulticast mode [ 560.788739][T10771] bridge_slave_1: entered promiscuous mode [ 561.088536][ T9538] hsr_slave_0: left promiscuous mode [ 561.121175][ T9538] hsr_slave_1: left promiscuous mode [ 561.741255][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.788402][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.801656][ T5103] Bluetooth: hci2: command tx timeout [ 561.864189][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.996279][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.028433][ T9538] bridge_slave_1: left allmulticast mode [ 562.040463][ T9538] bridge_slave_1: left promiscuous mode [ 562.047013][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.078625][ T9538] bridge_slave_0: left allmulticast mode [ 562.089008][ T9538] bridge_slave_0: left promiscuous mode [ 562.098331][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.215901][ T9538] veth1_macvtap: left promiscuous mode [ 562.222679][ T9538] veth0_macvtap: left promiscuous mode [ 562.228380][ T9538] veth1_vlan: left promiscuous mode [ 562.234627][ T9538] veth0_vlan: left promiscuous mode [ 563.091441][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.097922][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.860284][ T5103] Bluetooth: hci2: command tx timeout [ 564.838100][ T9538] team0 (unregistering): Port device team_slave_1 removed [ 564.942845][ T9538] team0 (unregistering): Port device team_slave_0 removed [ 565.039747][ T9538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.121279][ T9538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.206066][T10897] "syz.4.1161" (10897) uses obsolete ecb(arc4) skcipher [ 569.575817][ T9538] smc: removing net device bond0 with user defined pnetid SYZ2 [ 569.591159][ T9538] bond0 (unregistering): Released all slaves [ 569.703916][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.714010][T10867] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 569.753257][T10870] gretap2: entered allmulticast mode [ 569.764174][T10870] bond4: (slave gretap2): making interface the new active one [ 569.772662][T10870] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 569.793290][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.875580][T10771] team0: Port device team_slave_0 added [ 569.885011][T10771] team0: Port device team_slave_1 added [ 569.976342][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.993054][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.027064][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.060498][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.087708][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.149091][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.262402][T10771] hsr_slave_0: entered promiscuous mode [ 570.269089][T10771] hsr_slave_1: entered promiscuous mode [ 570.276126][T10771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.284369][T10771] Cannot create hsr debugfs directory [ 570.645366][T10771] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 570.659641][T10771] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 570.686952][T10771] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 570.703783][T10771] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 570.813527][T10771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.850201][T10771] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.864774][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.871990][ T9555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.904284][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.911501][ T9538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.208987][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.590239][T10771] veth0_vlan: entered promiscuous mode [ 571.613242][T10771] veth1_vlan: entered promiscuous mode [ 571.679143][T10771] veth0_macvtap: entered promiscuous mode [ 571.706994][T10771] veth1_macvtap: entered promiscuous mode [ 571.737151][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.752483][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.767383][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.789427][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.802330][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.826130][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.842373][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.858647][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.870539][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.888037][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.912602][T10771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.927717][T10771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.937976][T10771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.953045][T10771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.069279][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.084784][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.123120][ T9538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.132123][ T9538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.007392][T10985] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.1175'. [ 573.895491][T10982] pim6reg: entered allmulticast mode [ 573.965331][T10978] pim6reg: left allmulticast mode [ 576.829923][T11037] loop6: detected capacity change from 0 to 1024 [ 576.915809][T11037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.402711][T11044] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 581.146280][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.480739][ T6398] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 582.684172][ T6398] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.694680][ T6398] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 582.704222][ T6398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.718040][ T6398] usb 7-1: config 0 descriptor?? [ 582.735818][ T6398] ttusbir 7-1:0.0: cannot find expected altsetting [ 585.313125][T11011] usb 7-1: USB disconnect, device number 2 [ 587.910813][T11186] "syz.1.1193" (11186) uses obsolete ecb(arc4) skcipher [ 593.207623][T11232] binder: 11216:11232 ioctl 4018620d 0 returned -22 [ 601.915597][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'. [ 603.013670][ T5103] Bluetooth: Wrong link type (-71) [ 608.809794][ T5103] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 609.496716][T11341] gfs2: not a GFS2 filesystem [ 612.915311][ T5103] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 612.926047][ T5103] Bluetooth: hci0: Injecting HCI hardware error event [ 612.937116][ T5103] Bluetooth: hci0: hardware error 0x00 [ 613.641804][T11363] overlayfs: failed to clone lowerpath [ 613.812479][T11370] overlayfs: failed to clone upperpath [ 615.193976][ T5103] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 616.905877][T11392] loop6: detected capacity change from 0 to 512 [ 616.930169][T11392] EXT4-fs: Ignoring removed nobh option [ 617.209382][T11392] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1230: iget: bad i_size value: 38620345925642 [ 617.212697][T11390] netlink: 'syz.1.1231': attribute type 6 has an invalid length. [ 617.811236][T11392] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1230: couldn't read orphan inode 15 (err -117) [ 618.159348][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 618.257514][T11392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.410796][T11399] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 619.228529][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.885946][T11434] IPVS: sed: FWM 3 0x00000003 - no destination available [ 620.910071][ T6394] IPVS: starting estimator thread 0... [ 620.932625][T11430] loop6: detected capacity change from 0 to 128 [ 620.972561][T11430] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 620.990249][T11430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.117886][T11438] IPVS: using max 17 ests per chain, 40800 per kthread [ 621.280400][T11430] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 621.864161][T11445] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 623.019183][T11460] bridge0: entered promiscuous mode [ 623.024557][T11460] bridge0: entered allmulticast mode [ 623.043124][T11460] team0: Port device bridge0 added [ 624.516620][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.525056][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.144643][T11524] loop6: detected capacity change from 0 to 2048 [ 629.287404][T11524] NILFS (loop6): invalid segment: Inconsistency found [ 629.330907][T11524] NILFS (loop6): trying rollback from an earlier position [ 629.443151][T11524] NILFS (loop6): recovery complete [ 629.637598][T11531] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 630.968352][T11537] overlayfs: failed to clone upperpath [ 632.552179][T11554] loop6: detected capacity change from 0 to 1024 [ 632.785627][T11554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.954229][T11554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 633.070874][T11554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 633.090804][T11554] System zones: 0-1, 3-36 [ 633.127105][T11554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.179579][T11564] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 633.253313][T11564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 633.422145][T11567] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 633.506919][T11564] vlan2: entered allmulticast mode [ 633.638382][T11564] veth1: entered allmulticast mode [ 633.822837][T11564] veth1: entered promiscuous mode [ 633.855812][T11564] veth1: left promiscuous mode [ 633.887183][T11564] bond5: (slave vlan2): making interface the new active one [ 633.943501][T11564] veth1: entered promiscuous mode [ 633.978817][T11564] vlan2: entered promiscuous mode [ 634.003963][T11564] bond5: (slave vlan2): Enslaving as an active interface with an up link [ 634.155301][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.413220][T11576] loop6: detected capacity change from 0 to 128 [ 634.481638][T11577] sctp: [Deprecated]: syz.1.1261 (pid 11577) Use of int in max_burst socket option. [ 634.481638][T11577] Use struct sctp_assoc_value instead [ 634.887834][T11576] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.207867][T11576] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.593557][T10771] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 639.449844][T11628] rdma_op ffff88807bac31f0 conn xmit_rdma 0000000000000000 [ 640.317950][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.331880][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.342961][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.365579][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.377127][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 640.468755][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.841914][ T5103] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 641.058555][T11456] bond0: (slave syz_tun): Releasing backup interface [ 642.566155][ T9542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.580680][ T5103] Bluetooth: hci4: command tx timeout [ 642.847698][ T9542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.322652][ T9542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.768199][ T9542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.506730][T11665] overlayfs: failed to clone lowerpath [ 644.690695][T11669] overlayfs: failed to clone upperpath [ 645.774145][ T5103] Bluetooth: hci4: command tx timeout [ 645.779745][ T5797] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 645.790275][ T5797] Bluetooth: hci3: Injecting HCI hardware error event [ 645.799789][ T5797] Bluetooth: hci3: hardware error 0x00 [ 647.115496][T11630] chnl_net:caif_netlink_parms(): no params data found [ 647.881284][ T5802] Bluetooth: hci4: command tx timeout [ 647.887367][ T5797] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 648.034889][ T9542] bond1: (slave ip6gretap1): Releasing backup interface [ 648.280781][ T9542] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ca:f8:7a:54:03:c2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 649.930856][ T5797] Bluetooth: hci4: command tx timeout [ 651.084214][ T28] audit: type=1800 audit(1761872335.246:206): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1286" name="bus" dev="overlay" ino=197 res=0 errno=0 [ 652.125831][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.171474][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.178865][T11630] bridge_slave_0: entered allmulticast mode [ 652.202460][T11630] bridge_slave_0: entered promiscuous mode [ 652.221336][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.404123][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.730069][T11630] bridge_slave_1: entered allmulticast mode [ 652.898507][T11755] ubi31: attaching mtd0 [ 652.926313][T11755] ubi31: scanning is finished [ 652.931270][T11755] ubi31: empty MTD device detected [ 653.344106][T11755] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 653.447886][T11630] bridge_slave_1: entered promiscuous mode [ 653.690103][T11630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.712187][T11630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.940749][T11769] loop6: detected capacity change from 0 to 64 [ 655.761057][ T11] vlan2: left promiscuous mode [ 655.860377][T11760] orangefs_mount: mount request failed with -4 [ 656.134722][T11630] team0: Port device team_slave_0 added [ 656.647875][T11630] team0: Port device team_slave_1 added [ 657.361062][T11789] overlayfs: failed to clone upperpath [ 657.471471][T11630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.478542][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.528343][T11630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.563150][ T9542] bond0: (slave wlan1): Releasing backup interface [ 657.602231][T11630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.609449][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.644403][T11630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.925429][T11792] overlayfs: failed to clone upperpath [ 659.284463][T11630] hsr_slave_0: entered promiscuous mode [ 659.302450][T11630] hsr_slave_1: entered promiscuous mode [ 659.533110][T11630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.564039][T11630] Cannot create hsr debugfs directory [ 659.661053][ T9542] hsr_slave_0: left promiscuous mode [ 659.670002][ T9542] hsr_slave_1: left promiscuous mode [ 659.729566][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.752316][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.939392][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.953018][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.164249][T11815] loop6: detected capacity change from 0 to 2048 [ 661.165700][ T9542] batadv0: left allmulticast mode [ 661.177419][ T9542] batadv0: left promiscuous mode [ 661.185156][ T9542] bond_slave_0: left promiscuous mode [ 661.191101][ T9542] bond_slave_1: left promiscuous mode [ 661.197212][ T9542] team_slave_0: left promiscuous mode [ 661.203191][ T9542] team_slave_1: left promiscuous mode [ 661.986645][ T9542] veth1_macvtap: left promiscuous mode [ 661.992394][ T9542] veth0_macvtap: left promiscuous mode [ 662.000510][ T9542] veth1_vlan: left promiscuous mode [ 662.019393][T11815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.031918][ T9542] veth0_vlan: left promiscuous mode [ 662.049445][T11815] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.146379][T11815] fs-verity: sha512 using implementation "sha512-avx2" [ 662.276508][ T9542] team0 (unregistering): Port device bridge0 removed [ 662.382442][ T9542] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 662.396957][ T9542] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 662.549012][T10771] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /36/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 662.700097][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.822971][ T9542] bond2 (unregistering): Released all slaves [ 662.943255][ T9542] bond1 (unregistering): (slave veth5): Releasing backup interface [ 663.383080][ T9542] bond1 (unregistering): Released all slaves [ 665.049505][ T9542] team0 (unregistering): Port device team_slave_1 removed [ 665.165806][ T9542] team0 (unregistering): Port device team_slave_0 removed [ 665.372417][ T9542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.486300][ T9542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.971938][ T9542] bond0 (unregistering): (slave team0): Releasing backup interface [ 666.154323][ T9542] smc: removing net device bond0 with user defined pnetid SYZ2 [ 666.162547][ T9542] bond0 (unregistering): Released all slaves [ 667.720099][T11856] loop6: detected capacity change from 0 to 1024 [ 668.964258][T11856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.154435][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.375216][T11630] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 670.583474][T11630] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 671.601375][T11630] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 671.627499][T11630] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 672.762155][T11630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.804148][T11630] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.843643][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.850879][ T9555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.889819][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.897042][ T9522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.352433][T11630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.375621][T11630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.784519][T11630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.131422][T11947] overlayfs: failed to resolve './file1/file0': -2 [ 677.461398][T11630] veth0_vlan: entered promiscuous mode [ 677.488801][T11630] veth1_vlan: entered promiscuous mode [ 677.554855][T11630] veth0_macvtap: entered promiscuous mode [ 677.569459][T11630] veth1_macvtap: entered promiscuous mode [ 677.606339][T11630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.620399][T11630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.639896][T11630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.651173][T11630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.672660][T11630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.724772][T11630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.754399][T11630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.764669][T11630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.784197][T11630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.816382][T11630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.829462][T11630] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.841762][T11630] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.850500][T11630] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.860651][T11630] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.941393][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 678.012373][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.051215][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.104723][ T9538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.124303][ T9538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.705997][T11974] loop7: detected capacity change from 0 to 2048 [ 678.767847][T11974] NILFS (loop7): invalid segment: Inconsistency found [ 678.891028][T11974] NILFS (loop7): trying rollback from an earlier position [ 678.945847][T11974] NILFS (loop7): recovery complete [ 678.966480][T11984] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.141872][T11993] loop7: detected capacity change from 0 to 1024 [ 680.175103][T11993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.832565][T11630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.553661][T12009] loop7: detected capacity change from 0 to 40427 [ 685.595567][T12009] F2FS-fs (loop7): invalid crc value [ 685.620019][T12009] F2FS-fs (loop7): Found nat_bits in checkpoint [ 685.660751][T12009] F2FS-fs (loop7): Start checkpoint disabled! [ 685.691003][T12009] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 685.950451][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.960233][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.986437][T12016] syz.7.1327: attempt to access beyond end of device [ 685.986437][T12016] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 686.985692][ T60] kworker/u4:5: attempt to access beyond end of device [ 686.985692][ T60] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 687.130389][ T60] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 687.266366][ T60] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 687.394952][ T60] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 687.708656][T12028] loop6: detected capacity change from 0 to 512 [ 687.767805][T12028] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 687.846340][T12028] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 687.932250][T12028] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm syz.6.1336: Invalid inode table block 1 in block_group 0 [ 688.006985][T12028] EXT4-fs (loop6): get root inode failed [ 688.033563][T12028] EXT4-fs (loop6): mount failed [ 688.778258][ T5859] IPVS: starting estimator thread 0... [ 688.881536][T12042] IPVS: using max 16 ests per chain, 38400 per kthread [ 689.843499][T12048] loop6: detected capacity change from 0 to 40427 [ 689.865776][T12048] F2FS-fs (loop6): invalid crc value [ 689.873759][T12048] F2FS-fs (loop6): Found nat_bits in checkpoint [ 689.923420][T12048] F2FS-fs (loop6): Start checkpoint disabled! [ 689.953260][T12048] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 692.300770][ T9555] kworker/u4:23: attempt to access beyond end of device [ 692.300770][ T9555] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 692.315260][ T9555] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 692.323619][ T9555] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 692.742271][T12094] loop7: detected capacity change from 0 to 512 [ 692.839185][T12094] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 693.320416][T12094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 693.328806][T12094] System zones: 1-12 [ 693.341999][T12094] EXT4-fs (loop7): 1 truncate cleaned up [ 693.353482][T12094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.534699][T12109] fuse: Bad value for 'fd' [ 695.885385][T11630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.700678][T12120] loop6: detected capacity change from 0 to 40427 [ 696.782686][T12120] F2FS-fs (loop6): invalid crc value [ 696.799540][T12120] F2FS-fs (loop6): Found nat_bits in checkpoint [ 696.859790][T12120] F2FS-fs (loop6): Start checkpoint disabled! [ 696.884751][T12120] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 697.195704][T12128] syz.6.1343: attempt to access beyond end of device [ 697.195704][T12128] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 697.557123][T12130] loop7: detected capacity change from 0 to 512 [ 697.716270][T12130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.880790][T12130] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.321939][ T9538] kworker/u4:16: attempt to access beyond end of device [ 698.321939][ T9538] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 698.396443][ T9538] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 698.512267][T12139] overlayfs: failed to clone upperpath [ 701.814712][T11630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.348626][T12195] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 708.451577][ T28] audit: type=1326 audit(1761872392.706:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 708.480693][ T28] audit: type=1326 audit(1761872392.706:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 708.847478][T12200] loop6: detected capacity change from 0 to 40427 [ 708.904479][T12200] F2FS-fs (loop6): invalid crc value [ 708.966503][T12195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 709.111383][ T28] audit: type=1326 audit(1761872392.706:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 709.178108][T12200] F2FS-fs (loop6): Found nat_bits in checkpoint [ 709.235442][T12200] F2FS-fs (loop6): Start checkpoint disabled! [ 709.266913][ T28] audit: type=1326 audit(1761872392.706:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 709.381010][T12198] 8021q: adding VLAN 0 to HW filter on device bond6 [ 709.398086][ T28] audit: type=1326 audit(1761872392.706:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 709.481092][T12198] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 709.493705][T12198] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 709.514722][ T28] audit: type=1326 audit(1761872392.706:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 709.540627][ T28] audit: type=1326 audit(1761872392.706:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 709.563316][T12200] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 709.662575][T12205] Bluetooth: MGMT ver 1.22 [ 709.684096][ T28] audit: type=1326 audit(1761872392.706:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 709.809269][T12195] ip6erspan0: entered promiscuous mode [ 709.954545][ T28] audit: type=1326 audit(1761872392.706:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 709.977258][ T28] audit: type=1326 audit(1761872392.706:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.6.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 710.012343][T12195] bond6: (slave ip6erspan0): making interface the new active one [ 710.022226][T12195] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 710.092503][T12201] macvlan4: entered promiscuous mode [ 710.098941][T12201] bond6: entered promiscuous mode [ 710.142996][T12201] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 710.172545][T12201] bond6: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 710.238017][T12201] bond6: left promiscuous mode [ 710.322315][ T9536] kworker/u4:15: attempt to access beyond end of device [ 710.322315][ T9536] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 710.367355][ T9536] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 710.405699][ T9536] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 710.420338][ T9536] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 710.428352][ T9536] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 710.922771][T12222] (null): rxe_set_mtu: Set mtu to 1024 [ 710.939322][T12222] ip6gretap0 speed is unknown, defaulting to 1000 [ 711.336105][T12222] ip6gretap0 speed is unknown, defaulting to 1000 [ 711.373207][T12222] ip6gretap0 speed is unknown, defaulting to 1000 [ 711.568682][T12222] infiniband syz2: set active [ 711.574136][T12222] infiniband syz2: added ip6gretap0 [ 711.597962][ T967] ip6gretap0 speed is unknown, defaulting to 1000 [ 711.759588][T12222] RDS/IB: syz2: added [ 711.765709][T12222] smc: adding ib device syz2 with port count 1 [ 711.772859][T12222] smc: ib device syz2 port 1 has pnetid [ 711.792965][T12222] ip6gretap0 speed is unknown, defaulting to 1000 [ 711.810068][ T967] ip6gretap0 speed is unknown, defaulting to 1000 [ 712.030565][T12222] ip6gretap0 speed is unknown, defaulting to 1000 [ 712.351437][T12222] ip6gretap0 speed is unknown, defaulting to 1000 [ 712.831101][T12222] ip6gretap0 speed is unknown, defaulting to 1000 [ 712.924833][T12236] binder: 12230:12236 unknown command 0 [ 712.961235][T12236] binder: 12230:12236 ioctl c0306201 200000000500 returned -22 [ 713.077245][T12238] binder_alloc: 12230: pid 12230 spamming oneway? 1 buffers allocated for a total size of 4096 [ 713.311569][T12236] binder_alloc: 12230: binder_alloc_buf size -624 failed, no address space [ 713.354682][T12236] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 4096 (num: 1 largest: 4096) [ 713.417465][T12247] "syz.1.1370" (12247) uses obsolete ecb(arc4) skcipher [ 714.627127][T12255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 722.347277][T12324] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 722.947583][T12336] IPv6: Can't replace route, no match found [ 726.389848][T12354] loop7: detected capacity change from 0 to 764 [ 731.933753][T12405] loop7: detected capacity change from 0 to 4096 [ 731.951693][T12405] ext2: Unknown parameter 'obj_user' [ 732.163932][T12235] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 736.609623][T12449] loop7: detected capacity change from 0 to 4096 [ 736.717040][T12449] __ntfs_error: 28 callbacks suppressed [ 736.717061][T12449] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 736.747850][T12449] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 736.774768][T12449] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 736.789050][T12449] ntfs: volume version 3.1. [ 738.553908][T12476] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1414'. [ 738.625919][T12477] loop6: detected capacity change from 0 to 512 [ 739.410740][T12478] ntfs: (device loop7): map_mft_record(): Failed with error code 4. [ 739.419281][T12478] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -4. Marking corrupt inode 0x43 as bad. Run chkdsk. [ 739.629809][T12477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.642635][T12477] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.708778][T12473] Quota error (device loop6): do_check_range: Getting block 83886080 out of range 0-5 [ 739.778193][T11630] ntfs: (device loop7): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 740.067299][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.469298][T12532] loop7: detected capacity change from 0 to 128 [ 746.476666][T12532] FAT-fs (loop7): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 746.852078][T12535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.859351][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 746.866684][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 747.377565][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.384343][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.682913][ T5797] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 751.061145][T12577] loop7: detected capacity change from 0 to 4096 [ 751.286325][T12583] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 755.210278][T12594] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1435'. [ 755.220849][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1435'. [ 755.232345][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 755.276562][T12584] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 755.284080][T12584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 755.295014][T12584] vhci_hcd vhci_hcd.0: Device attached [ 755.751064][T12595] vhci_hcd: connection closed [ 755.780641][T12441] vhci_hcd: stop threads [ 755.818369][T12441] vhci_hcd: release socket [ 755.849669][T12441] vhci_hcd: disconnect device [ 755.890773][ T967] vhci_hcd: vhci_device speed not set [ 755.923478][T12605] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1438'. [ 755.932542][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 755.941552][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 756.873546][T12616] loop7: detected capacity change from 0 to 4096 [ 757.177227][T12618] loop6: detected capacity change from 0 to 128 [ 758.174685][ T28] audit: type=1800 audit(1761872442.406:245): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1440" name="file1" dev="loop7" ino=33 res=0 errno=0 [ 758.326158][T12618] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 758.380921][T12618] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 760.193920][T10771] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 760.208315][T12638] loop7: detected capacity change from 0 to 1024 [ 761.634716][T12645] netlink: 'syz.6.1444': attribute type 9 has an invalid length. [ 761.664527][T12645] netlink: 'syz.6.1444': attribute type 6 has an invalid length. [ 761.711146][T12645] netlink: 'syz.6.1444': attribute type 7 has an invalid length. [ 761.755002][T12645] netlink: 'syz.6.1444': attribute type 8 has an invalid length. [ 761.885150][ T28] audit: type=1326 audit(1761872446.136:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 761.970617][ T28] audit: type=1326 audit(1761872446.136:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.085176][ T28] audit: type=1326 audit(1761872446.136:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.155078][ T28] audit: type=1326 audit(1761872446.136:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.215717][ T28] audit: type=1326 audit(1761872446.136:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.273973][T12658] loop7: detected capacity change from 0 to 40427 [ 762.790389][ T28] audit: type=1326 audit(1761872446.146:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.813299][ T28] audit: type=1326 audit(1761872446.146:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.821094][T12658] F2FS-fs (loop7): invalid crc value [ 762.837570][ T28] audit: type=1326 audit(1761872446.146:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.865513][ T28] audit: type=1326 audit(1761872446.146:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.7.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8178efc9 code=0x7ffc0000 [ 762.878011][T12658] F2FS-fs (loop7): Found nat_bits in checkpoint [ 762.944046][T12658] F2FS-fs (loop7): Start checkpoint disabled! [ 762.955519][T12658] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 763.311518][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 763.311567][ T28] audit: type=1800 audit(1761872447.556:283): pid=12669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1447" name="file1" dev="loop7" ino=17 res=0 errno=0 [ 763.821406][ T28] audit: type=1804 audit(1761872447.606:284): pid=12669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1447" name="/newroot/35/file0/file1" dev="loop7" ino=17 res=1 errno=0 [ 765.227544][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 765.331042][ T28] audit: type=1800 audit(1761872449.556:285): pid=12669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1447" name="file1" dev="loop7" ino=17 res=0 errno=0 [ 765.812749][ T11] kworker/u4:0: attempt to access beyond end of device [ 765.812749][ T11] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 765.847527][ T11] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 765.867924][ T11] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 765.880611][ T11] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 765.897955][ T11] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 766.846199][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 766.905812][T12693] veth0_macvtap: left promiscuous mode [ 767.054696][T12699] loop6: detected capacity change from 0 to 256 [ 770.977839][T12720] loop7: detected capacity change from 0 to 256 [ 771.015482][T12720] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 773.145419][T12740] 9pnet_virtio: no channels available for device syz [ 774.540660][ T5797] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 774.844571][T12760] ip6gretap0 speed is unknown, defaulting to 1000 [ 775.425893][T12772] loop6: detected capacity change from 0 to 16 [ 775.445398][T12772] erofs: (device loop6): mounted with root inode @ nid 36. [ 780.757207][T12811] block nbd7: Unsupported socket: should be TCP or UNIX. [ 780.770084][T12811] netlink: 'syz.7.1472': attribute type 10 has an invalid length. [ 782.651389][T12819] loop6: detected capacity change from 0 to 64 [ 783.501630][T12826] loop7: detected capacity change from 0 to 1024 [ 784.183867][T12826] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.630672][ T967] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 785.864631][ T967] usb 8-1: config 8 has an invalid interface number: 80 but max is 0 [ 785.901417][ T967] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 785.932135][ T967] usb 8-1: config 8 has no interface number 0 [ 785.953791][ T967] usb 8-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 785.968278][ T967] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 785.972637][T12851] loop6: detected capacity change from 0 to 128 [ 785.978017][ T967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.048976][T12851] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.080152][ T967] usb 8-1: NFC: intf ffff88805f472000 id ffffffff8d63b6a0 [ 786.164419][T12851] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 786.210938][ T967] usb 8-1: USB disconnect, device number 2 [ 787.038803][T12868] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 787.462197][T12868] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 787.782834][T10771] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 788.083207][T12876] loop7: detected capacity change from 0 to 64 [ 790.379697][T12900] netlink: 'syz.1.1488': attribute type 4 has an invalid length. [ 790.408285][T12900] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1488'. [ 791.073693][T12918] netlink: 'syz.6.1489': attribute type 3 has an invalid length. [ 794.759128][T12944] netlink: 'syz.7.1495': attribute type 1 has an invalid length. [ 794.856575][T12944] use of bytesused == 0 is deprecated and will be removed in the future, [ 794.866086][T12944] use the actual size instead. [ 795.765188][T12943] kAFS: No cell specified [ 799.154068][T12991] loop7: detected capacity change from 0 to 512 [ 799.181651][T12991] EXT4-fs: Ignoring removed nobh option [ 799.258971][T12991] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1502: iget: bad i_size value: 38620345925642 [ 799.284882][T12991] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1502: couldn't read orphan inode 15 (err -117) [ 799.304757][T12991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.468172][T11630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.839599][T13036] tipc: Enabling of bearer rejected, failed to enable media [ 804.772071][T13063] siw: device registration error -23 [ 805.539155][T13066] bond_slave_0: entered promiscuous mode [ 805.545763][T13066] bond_slave_1: entered promiscuous mode [ 805.551999][T13066] macsec1: entered promiscuous mode [ 805.557291][T13066] bond0: entered promiscuous mode [ 805.564141][T13066] macsec1: entered allmulticast mode [ 805.569491][T13066] bond0: entered allmulticast mode [ 805.574710][T13066] bond_slave_0: entered allmulticast mode [ 805.618863][T13066] bond_slave_1: entered allmulticast mode [ 808.919875][T13086] fuse: Bad value for 'fd' [ 808.941356][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.947933][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.116158][T13104] netlink: 'syz.7.1522': attribute type 29 has an invalid length. [ 811.124472][T13104] netlink: 'syz.7.1522': attribute type 3 has an invalid length. [ 811.132712][T13104] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1522'. [ 813.037870][T13104] netlink: 14436 bytes leftover after parsing attributes in process `syz.7.1522'. [ 813.601144][T13126] tmpfs: Unknown parameter 'smackfsroot' [ 821.358018][T13192] loop6: detected capacity change from 0 to 32768 [ 822.064726][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 822.064937][ T5797] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 822.108253][T13192] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1541 (13192) [ 822.230637][T13192] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 822.241611][T13192] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 822.250369][T13192] BTRFS info (device loop6): enabling disk space caching [ 822.257564][T13192] BTRFS info (device loop6): force clearing of disk cache [ 822.264790][T13192] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 822.275309][T13192] BTRFS info (device loop6): use zstd compression, level 3 [ 822.282604][T13192] BTRFS info (device loop6): disk space caching is enabled [ 823.099348][T13192] BTRFS info (device loop6): enabling ssd optimizations [ 823.106460][T13192] BTRFS info (device loop6): auto enabling async discard [ 823.117893][T13192] BTRFS info (device loop6): rebuilding free space tree [ 823.184620][T13192] BTRFS info (device loop6): disabling free space tree [ 823.191895][T13192] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 823.202393][T13192] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 824.034604][T10771] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 825.114295][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 828.108155][T13260] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 828.229665][T13263] bond_slave_0: entered promiscuous mode [ 828.235496][T13263] bond_slave_1: entered promiscuous mode [ 828.241635][T13263] macsec1: entered promiscuous mode [ 828.246925][T13263] bond0: entered promiscuous mode [ 828.254493][T13263] macsec1: entered allmulticast mode [ 828.304374][T13263] bond0: entered allmulticast mode [ 828.345388][T13263] bond_slave_0: entered allmulticast mode [ 828.352836][T13263] bond_slave_1: entered allmulticast mode [ 829.644074][T13275] Driver unsupported XDP return value 0 on prog (id 361) dev N/A, expect packet loss! [ 829.657857][T13275] overlayfs: failed to resolve './file0': -2 [ 829.804157][T13282] loop7: detected capacity change from 0 to 128 [ 829.835748][T13282] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 829.878705][T13282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 833.876408][T13312] sctp: [Deprecated]: syz.7.1560 (pid 13312) Use of int in max_burst socket option. [ 833.876408][T13312] Use struct sctp_assoc_value instead [ 841.177441][T13363] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 842.394477][T13369] sctp: [Deprecated]: syz.2.1570 (pid 13369) Use of int in max_burst socket option. [ 842.394477][T13369] Use struct sctp_assoc_value instead [ 842.621418][T11584] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 842.820794][T11584] usb 8-1: Using ep0 maxpacket: 32 [ 842.838140][T11584] usb 8-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 842.848965][T11584] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 842.933181][T11584] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 842.942454][T11584] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.952903][T11584] usb 8-1: Product: syz [ 842.957249][T11584] usb 8-1: Manufacturer: syz [ 842.966943][T11584] usb 8-1: SerialNumber: syz [ 843.164235][T13378] xt_TCPMSS: Only works on TCP SYN packets [ 844.913360][T13368] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 845.215656][T13390] ip6gretap0 speed is unknown, defaulting to 1000 [ 846.037873][T11584] usb 8-1: USB disconnect, device number 3 [ 846.443701][T13395] input: syz1 as /devices/virtual/input/input8 [ 847.243042][T13398] loop7: detected capacity change from 0 to 1024 [ 848.462132][ T9538] hfsplus: b-tree write err: -5, ino 4 [ 848.591560][T13414] sctp: [Deprecated]: syz.7.1582 (pid 13414) Use of int in max_burst socket option. [ 848.591560][T13414] Use struct sctp_assoc_value instead [ 854.163057][T13450] loop7: detected capacity change from 0 to 8 [ 854.261016][T13450] squashfs: Bad value for 'errors' [ 854.385207][T13450] Cannot find add_set index 65532 as target [ 856.411291][ T5859] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 856.793471][T13472] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (2401), value rounded to 0 ms [ 857.644640][T13478] sctp: [Deprecated]: syz.6.1593 (pid 13478) Use of int in max_burst socket option. [ 857.644640][T13478] Use struct sctp_assoc_value instead [ 859.657833][ T9524] wlan1: Trigger new scan to find an IBSS to join [ 860.207352][T13506] loop7: detected capacity change from 0 to 128 [ 861.352004][T13506] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 861.551735][T13506] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 862.650268][T13528] sctp: [Deprecated]: syz.6.1603 (pid 13528) Use of int in max_burst socket option. [ 862.650268][T13528] Use struct sctp_assoc_value instead [ 862.878593][T12441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.426272][T11630] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 868.140946][T13587] sctp: [Deprecated]: syz.1.1613 (pid 13587) Use of int in max_burst socket option. [ 868.140946][T13587] Use struct sctp_assoc_value instead [ 868.520841][T11584] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 868.809789][T11584] usb 8-1: unable to get BOS descriptor or descriptor too short [ 868.824031][T11584] usb 8-1: not running at top speed; connect to a high speed hub [ 868.848741][T11584] usb 8-1: config 129 has an invalid interface number: 145 but max is 0 [ 868.858279][T11584] usb 8-1: config 129 has no interface number 0 [ 868.865568][T11584] usb 8-1: config 129 interface 145 has no altsetting 0 [ 868.934128][T11584] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 868.967768][T11584] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.976881][T11584] usb 8-1: Product: syz [ 868.981493][T11584] usb 8-1: Manufacturer: syz [ 868.986255][T11584] usb 8-1: SerialNumber: syz [ 870.258883][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.265593][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.741651][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1620'. [ 872.597799][T11584] usb 8-1: USB disconnect, device number 5 [ 872.638703][T13639] loop7: detected capacity change from 0 to 128 [ 872.836330][T13639] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4630: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 872.871083][T13642] sctp: [Deprecated]: syz.6.1623 (pid 13642) Use of int in max_burst socket option. [ 872.871083][T13642] Use struct sctp_assoc_value instead [ 873.551189][T13639] EXT4-fs (loop7): Encoding requested by superblock is unknown [ 873.560277][ T28] audit: type=1326 audit(1761872557.246:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 873.660634][ T28] audit: type=1326 audit(1761872557.246:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 873.682999][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.930646][ T28] audit: type=1326 audit(1761872557.256:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 873.953033][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.976357][ T28] audit: type=1326 audit(1761872557.256:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 874.711196][ T28] audit: type=1326 audit(1761872557.256:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 874.733567][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.852817][ T28] audit: type=1326 audit(1761872557.256:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 874.885057][ T28] audit: type=1326 audit(1761872557.266:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 875.741136][ T28] audit: type=1326 audit(1761872557.266:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 875.848887][ T28] audit: type=1326 audit(1761872557.266:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 876.078975][ T28] audit: type=1326 audit(1761872557.266:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 878.253522][T13678] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1631'. [ 878.583118][T13682] overlayfs: failed to clone upperpath [ 879.230538][T13685] sctp: [Deprecated]: syz.1.1633 (pid 13685) Use of int in max_burst socket option. [ 879.230538][T13685] Use struct sctp_assoc_value instead [ 880.445823][T13698] loop7: detected capacity change from 0 to 2048 [ 880.794833][T13698] ext4: Unknown parameter 'pcr' [ 880.851169][T13691] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 882.491643][T13712] netlink: 'syz.1.1639': attribute type 10 has an invalid length. [ 883.096413][ T5802] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 883.116893][T13712] team0: Failed to send options change via netlink (err -105) [ 883.145243][T13712] team0: Port device dummy0 added [ 883.512776][T13713] netlink: 'syz.1.1639': attribute type 10 has an invalid length. [ 883.546826][T13713] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 883.670889][T13713] team0: Failed to send options change via netlink (err -105) [ 883.684383][T13713] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 883.712172][T13713] team0: Port device dummy0 removed [ 883.748277][T13713] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 885.029933][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 885.210731][T13735] sctp: [Deprecated]: syz.2.1644 (pid 13735) Use of int in max_burst socket option. [ 885.210731][T13735] Use struct sctp_assoc_value instead [ 885.936095][T13742] sctp: [Deprecated]: syz.7.1648 (pid 13742) Use of int in max_burst socket option. [ 885.936095][T13742] Use struct sctp_assoc_value instead [ 892.471571][T13765] trusted_key: encrypted_key: master key parameter 'defcult' is invalid [ 892.497838][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 892.666052][T13774] sctp: [Deprecated]: syz.2.1653 (pid 13774) Use of int in max_burst socket option. [ 892.666052][T13774] Use struct sctp_assoc_value instead [ 894.535900][T13789] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 894.542490][T13789] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 894.553109][T13789] vhci_hcd vhci_hcd.0: Device attached [ 894.789113][ T6396] vhci_hcd: vhci_device speed not set [ 895.074959][T13790] vhci_hcd: connection closed [ 895.080283][T13141] vhci_hcd: stop threads [ 895.091263][T13141] vhci_hcd: release socket [ 895.113637][T13141] vhci_hcd: disconnect device [ 895.165015][ T6396] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 895.221234][ T9553] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 895.227534][ T6396] usb 45-1: enqueue for inactive port 0 [ 895.340846][ T6396] vhci_hcd: vhci_device speed not set [ 895.367073][T13796] loop7: detected capacity change from 0 to 4096 [ 895.386067][T13796] EXT4-fs: Ignoring removed mblk_io_submit option [ 895.392916][T13797] xt_TCPMSS: Only works on TCP SYN packets [ 895.454877][T13796] EXT4-fs (loop7): Test dummy encryption mode enabled [ 896.016063][T13796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.177896][T13808] loop6: detected capacity change from 0 to 32768 [ 897.222859][T13808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1660 (13808) [ 897.270282][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.279706][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.291861][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.301892][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.311852][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.321769][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.331591][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.341403][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.378695][T13812] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1658'. [ 897.415941][T13808] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 897.429172][T13808] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 897.438255][T13808] BTRFS info (device loop6): setting nodatacow, compression disabled [ 897.447126][T13808] BTRFS info (device loop6): max_inline at 0 [ 897.453330][T13808] BTRFS info (device loop6): turning on async discard [ 897.460209][T13808] BTRFS info (device loop6): turning off barriers [ 897.467080][T13808] BTRFS info (device loop6): turning on flush-on-commit [ 897.474938][T13808] BTRFS info (device loop6): enabling disk space caching [ 897.482289][T13808] BTRFS info (device loop6): turning on barriers [ 897.488738][T13808] BTRFS info (device loop6): force clearing of disk cache [ 897.496040][T13808] BTRFS info (device loop6): enabling ssd optimizations [ 897.503155][T13808] BTRFS info (device loop6): turning off barriers [ 897.511123][T13808] BTRFS info (device loop6): max_inline at 8 [ 897.517317][T13808] BTRFS error (device loop6): unrecognized mount option 'dont_measure' [ 897.533531][T13808] BTRFS error (device loop6): open_ctree failed: -22 [ 897.875705][T13811] __nla_validate_parse: 13 callbacks suppressed [ 897.875742][T13811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1658'. [ 898.058858][T13816] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 898.078508][T13814] overlayfs: failed to clone upperpath [ 898.274337][T13813] fscrypt (loop7): Error allocating 'xts(aes)' transform: -4 [ 898.376038][T11630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.286604][T13827] sctp: [Deprecated]: syz.6.1662 (pid 13827) Use of int in max_burst socket option. [ 899.286604][T13827] Use struct sctp_assoc_value instead [ 903.566271][ T5802] Bluetooth: hci2: Malformed HCI Event [ 906.659918][T13879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 907.335318][T13885] sctp: [Deprecated]: syz.2.1675 (pid 13885) Use of int in max_burst socket option. [ 907.335318][T13885] Use struct sctp_assoc_value instead [ 907.781879][T13898] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1677'. [ 908.019833][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1678'. [ 908.408938][T13898] tipc: Enabling of bearer rejected, already enabled [ 908.435076][T13898] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 912.230612][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 913.427108][T13929] syz_tun: entered allmulticast mode [ 918.368102][T13971] loop6: detected capacity change from 0 to 128 [ 919.772880][T13971] syz.6.1697: attempt to access beyond end of device [ 919.772880][T13971] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 919.874119][T13979] loop7: detected capacity change from 0 to 1024 [ 919.924127][T13977] syz.6.1697: attempt to access beyond end of device [ 919.924127][T13977] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 919.968871][T13979] hfsplus: bad catalog folder entry [ 919.986501][T13971] syz.6.1697: attempt to access beyond end of device [ 919.986501][T13971] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 920.089725][T13977] syz.6.1697: attempt to access beyond end of device [ 920.089725][T13977] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 920.119558][T13971] syz.6.1697: attempt to access beyond end of device [ 920.119558][T13971] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 922.908630][ T6394] IPVS: starting estimator thread 0... [ 923.001976][T13991] IPVS: using max 17 ests per chain, 40800 per kthread [ 928.569217][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 929.044447][T14033] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 930.187558][T14042] loop6: detected capacity change from 0 to 512 [ 931.224849][T14042] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 931.474154][T14042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 931.482414][T14042] System zones: 1-12 [ 931.506340][T14043] ip6gretap0 speed is unknown, defaulting to 1000 [ 931.543847][T14042] EXT4-fs (loop6): 1 truncate cleaned up [ 931.551337][T14042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 931.796819][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.804886][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.646955][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.997062][T14070] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 936.008968][T14070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 936.018945][T14070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 941.989631][T14117] loop7: detected capacity change from 0 to 32768 [ 941.997788][T14117] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1727 (14117) [ 942.081026][T14117] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 942.091611][T14117] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 942.100288][T14117] BTRFS info (device loop7): using free space tree [ 942.202679][T14117] BTRFS info (device loop7): enabling ssd optimizations [ 942.209691][T14117] BTRFS info (device loop7): auto enabling async discard [ 943.473997][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 943.474051][ T28] audit: type=1800 audit(1761872627.376:298): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1727" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 946.174459][T14154] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1731'. [ 946.183931][T14154] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 946.204631][ T28] audit: type=1326 audit(1761872630.456:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14149 comm="syz.6.1731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x0 [ 947.892018][T11630] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 948.011481][T14162] loop6: detected capacity change from 0 to 512 [ 948.648861][T14162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.826055][T14162] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.146009][T14177] trusted_key: encrypted_key: insufficient parameters specified [ 949.812549][T14179] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 949.831418][T14179] Quota error (device loop6): write_blk: dquota write failed [ 949.840183][T14179] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 949.850954][T14179] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1734: Failed to acquire dquot type 0 [ 950.590381][T10771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.168620][T14195] block device autoloading is deprecated and will be removed. [ 953.933054][T14218] (null): rxe_set_mtu: Set mtu to 1024 [ 953.939858][T14218] ip6gretap0 speed is unknown, defaulting to 1000 [ 953.955784][T14218] ip6gretap0 speed is unknown, defaulting to 1000 [ 953.968913][T14218] ip6gretap0 speed is unknown, defaulting to 1000 [ 954.730345][T14218] infiniband syz2: set active [ 954.735433][T14218] infiniband syz2: added ip6gretap0 [ 954.745940][ T5859] ip6gretap0 speed is unknown, defaulting to 1000 [ 954.767983][T14216] tipc: Enabling of bearer rejected, failed to enable media [ 954.889034][T14218] RDS/IB: syz2: added [ 954.893243][T14218] smc: adding ib device syz2 with port count 1 [ 954.899430][T14218] smc: ib device syz2 port 1 has pnetid [ 954.907643][T14218] ip6gretap0 speed is unknown, defaulting to 1000 [ 955.033027][T14218] ip6gretap0 speed is unknown, defaulting to 1000 [ 955.065238][T11584] ip6gretap0 speed is unknown, defaulting to 1000 [ 955.184122][T14218] ip6gretap0 speed is unknown, defaulting to 1000 [ 955.337952][T14218] ip6gretap0 speed is unknown, defaulting to 1000 [ 957.491134][T14241] Error parsing options; rc = [-22] [ 957.688708][T14238] loop6: detected capacity change from 0 to 64 [ 958.379184][T14251] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 958.391227][T14251] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 958.411544][T14251] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1747'. [ 958.428639][T14251] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1747'. [ 958.767244][ T28] audit: type=1326 audit(1761872642.826:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 958.975230][T14253] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 959.071806][ T28] audit: type=1326 audit(1761872642.826:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 959.282557][ T28] audit: type=1326 audit(1761872642.946:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 959.329218][ T28] audit: type=1326 audit(1761872642.946:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 959.364188][ T28] audit: type=1326 audit(1761872642.946:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 959.461627][ T28] audit: type=1326 audit(1761872642.946:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 959.467722][T14264] netlink: 'syz.7.1752': attribute type 1 has an invalid length. [ 960.476075][ T28] audit: type=1326 audit(1761872642.946:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 960.499068][ T28] audit: type=1326 audit(1761872642.946:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 960.523376][ T28] audit: type=1326 audit(1761872642.956:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 960.546022][ T28] audit: type=1326 audit(1761872642.956:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f582058efc9 code=0x7ffc0000 [ 961.269938][T14264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.285047][T14286] loop6: detected capacity change from 0 to 16 [ 964.481685][T14286] erofs: (device loop6): mounted with root inode @ nid 36. [ 964.632207][T14265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.639797][T14265] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 964.716206][T14265] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 964.841265][T14269] ip6erspan0: entered promiscuous mode [ 964.859181][T14271] macvlan2: entered promiscuous mode [ 964.866072][T14271] bond1: entered promiscuous mode [ 965.413863][T14271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 965.442311][T14271] bond1: left promiscuous mode [ 965.675219][ T9538] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 968.399736][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 968.399753][ T28] audit: type=1326 audit(1761872652.646:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 968.995021][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1764'. [ 969.025443][ T28] audit: type=1326 audit(1761872652.646:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.072761][ T28] audit: type=1326 audit(1761872652.706:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.134561][ T28] audit: type=1326 audit(1761872652.716:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.193313][ T28] audit: type=1326 audit(1761872652.716:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.281198][ T28] audit: type=1326 audit(1761872652.716:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.309358][ T28] audit: type=1326 audit(1761872652.726:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.371132][ T28] audit: type=1326 audit(1761872652.726:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.400215][ T28] audit: type=1326 audit(1761872652.726:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 969.656420][ T28] audit: type=1326 audit(1761872652.726:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9c22d8efc9 code=0x7ffc0000 [ 971.122968][T14340] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 976.321095][T14379] comedi comedi0: comedi_bond: 3:2 3:3 attached, 48 channels from 2 devices [ 977.260719][ T5802] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 980.421585][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1792'. [ 983.261523][T14434] loop7: detected capacity change from 0 to 1024 [ 983.425781][T14429] Invalid ELF header type: 3 != 1 [ 984.581449][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 984.581467][ T28] audit: type=1326 audit(1761872668.826:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 984.642555][ T28] audit: type=1326 audit(1761872668.826:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 984.666386][ T28] audit: type=1326 audit(1761872668.836:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29c2b8d810 code=0x7ffc0000 [ 984.704857][ T28] audit: type=1326 audit(1761872668.836:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29c2b8d810 code=0x7ffc0000 [ 985.019356][ T28] audit: type=1326 audit(1761872668.836:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 985.109191][ T28] audit: type=1326 audit(1761872668.836:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 985.164424][ T28] audit: type=1326 audit(1761872668.886:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 985.190706][ T28] audit: type=1326 audit(1761872668.886:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c2b8efc9 code=0x7ffc0000 [ 1090.240380][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1090.247411][ C0] rcu: 1-...!: (1 GPs behind) idle=bd4c/1/0x4000000000000000 softirq=56260/56261 fqs=1 [ 1090.259436][ C0] rcu: (detected by 0, t=10502 jiffies, g=64909, q=37 ncpus=2) [ 1090.267107][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1090.272449][ C1] NMI backtrace for cpu 1 [ 1090.272462][ C1] CPU: 1 PID: 14443 Comm: syz.2.1793 Not tainted syzkaller #0 [ 1090.272478][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1090.272488][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 1090.272516][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 0c fe c4 0c 48 89 de 5b e9 33 89 56 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 20 28 7e 7e 65 8b 15 21 28 7e 7e 81 e2 00 01 ff 00 74 [ 1090.272530][ C1] RSP: 0018:ffffc900001f0bf8 EFLAGS: 00000086 [ 1090.272545][ C1] RAX: ffffffff889dab86 RBX: ffff88801a2ce2c0 RCX: dffffc0000000000 [ 1090.272558][ C1] RDX: ffff88805d760c00 RSI: ffff88805d760400 RDI: ffff88801a2ce2c0 [ 1090.272570][ C1] RBP: ffff88805d760d50 R08: 0000000000000003 R09: 0000000000000004 [ 1090.272581][ C1] R10: dffffc0000000000 R11: fffff5200003e17c R12: ffff88801a2ce340 [ 1090.272593][ C1] R13: dffffc0000000000 R14: ffff88805d760400 R15: ffff88805d760c00 [ 1090.272605][ C1] FS: 0000555576aa1500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1090.272620][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.272631][ C1] CR2: 000000110c32d958 CR3: 000000005b20a000 CR4: 00000000003506e0 [ 1090.272645][ C1] Call Trace: [ 1090.272652][ C1] [ 1090.272658][ C1] taprio_set_budgets+0x26/0x390 [ 1090.272687][ C1] advance_sched+0x964/0xc80 [ 1090.272714][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1090.272736][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1090.272759][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1090.272776][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1090.272801][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1090.272832][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1090.272855][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1090.272883][ C1] [ 1090.272887][ C1] [ 1090.272893][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1090.272911][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17f/0x1c0 [ 1090.272932][ C1] Code: 00 4d 85 e4 75 16 e8 d0 8f 0f 00 eb 15 e8 c9 8f 0f 00 e8 e4 cd f8 08 4d 85 e4 74 ea e8 ba 8f 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 1090.272945][ C1] RSP: 0018:ffffc9000e267d20 EFLAGS: 00000293 [ 1090.272958][ C1] RAX: ffffffff8175ffd6 RBX: 0000000000000000 RCX: ffff888022bf8000 [ 1090.272970][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.272979][ C1] RBP: ffffc9000e267dd0 R08: ffffffff8e4a8b6f R09: 1ffffffff1c9516d [ 1090.272990][ C1] R10: dffffc0000000000 R11: fffffbfff1c9516e R12: 0000000000000200 [ 1090.273001][ C1] R13: 0000000002faf080 R14: 1ffff92001c4cfa4 R15: dffffc0000000000 [ 1090.273017][ C1] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 1090.273042][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 1090.273060][ C1] ? _copy_from_user+0xa5/0xe0 [ 1090.273080][ C1] ? get_timespec64+0x112/0x1a0 [ 1090.273101][ C1] ? timespec64_add_safe+0x1e0/0x1e0 [ 1090.273126][ C1] ktime_get+0x7f/0x280 [ 1090.273145][ C1] __se_sys_futex+0x2b2/0x3f0 [ 1090.273163][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 1090.273182][ C1] ? __x64_sys_futex+0x21/0xf0 [ 1090.273198][ C1] do_syscall_64+0x55/0xb0 [ 1090.273218][ C1] ? clear_bhb_loop+0x40/0x90 [ 1090.273235][ C1] ? clear_bhb_loop+0x40/0x90 [ 1090.273254][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.273270][ C1] RIP: 0033:0x7f29c2b8efc9 [ 1090.273285][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.273298][ C1] RSP: 002b:00007ffeccfc5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1090.273313][ C1] RAX: ffffffffffffffda RBX: 00000000000f085c RCX: 00007f29c2b8efc9 [ 1090.273330][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f29c2de618c [ 1090.273340][ C1] RBP: 0000000000000032 R08: 0000000000745d1e R09: 00000018ccfc532f [ 1090.273350][ C1] R10: 00007ffeccfc5130 R11: 0000000000000246 R12: 00007f29c2de618c [ 1090.273361][ C1] R13: 00007ffeccfc5130 R14: 00000000000f088e R15: 00007ffeccfc5150 [ 1090.273380][ C1] [ 1090.273441][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g64909 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1090.680745][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1090.690736][ C0] rcu: RCU grace-period kthread stack dump: [ 1090.696646][ C0] task:rcu_preempt state:R running task stack:27192 pid:17 ppid:2 flags:0x00004000 [ 1090.707466][ C0] Call Trace: [ 1090.710768][ C0] [ 1090.713734][ C0] __schedule+0x14d2/0x44d0 [ 1090.718293][ C0] ? _raw_spin_unlock+0x11/0x40 [ 1090.723179][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1090.729102][ C0] ? asan.module_dtor+0x20/0x20 [ 1090.734000][ C0] ? enqueue_timer+0x225/0x530 [ 1090.738805][ C0] ? __mod_timer+0x984/0xdb0 [ 1090.743454][ C0] schedule+0xbd/0x170 [ 1090.747738][ C0] schedule_timeout+0x160/0x280 [ 1090.752624][ C0] ? console_conditional_schedule+0x40/0x40 [ 1090.758538][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1090.764456][ C0] ? update_process_times+0x1b0/0x1b0 [ 1090.769874][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1090.775468][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 1090.780376][ C0] ? dump_blkd_tasks+0x810/0x810 [ 1090.785363][ C0] ? rcu_gp_init+0x1510/0x1510 [ 1090.790170][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1090.795064][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1090.800304][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1090.805531][ C0] rcu_gp_kthread+0x99/0x380 [ 1090.810173][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1090.815328][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1090.820309][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1090.825552][ C0] kthread+0x2fa/0x390 [ 1090.829668][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1090.834817][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1090.839467][ C0] ret_from_fork+0x48/0x80 [ 1090.844001][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1090.848643][ C0] ret_from_fork_asm+0x11/0x20 [ 1090.853458][ C0] [ 1090.856511][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1090.862851][ C0] CPU: 0 PID: 9542 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1090.870509][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1090.880603][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1090.887332][ C0] RIP: 0010:smp_call_function_many_cond+0xde4/0x1130 [ 1090.894049][ C0] Code: 89 ee 83 e6 01 31 ff e8 da d6 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 15 d3 0a 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 f9 d2 0a 00 eb e4 44 [ 1090.913687][ C0] RSP: 0018:ffffc900037e7780 EFLAGS: 00000293 [ 1090.919793][ C0] RAX: 0000000000000000 RBX: 1ffff110171e82ad RCX: ffff888076813c00 [ 1090.927965][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1090.935960][ C0] RBP: ffffc900037e7900 R08: ffffffff90da8507 R09: 1ffffffff21b50a0 [ 1090.944138][ C0] R10: dffffc0000000000 R11: fffffbfff21b50a1 R12: ffff8880b8f41568 [ 1090.952231][ C0] R13: dffffc0000000000 R14: ffff8880b8e3d348 R15: 0000000000000001 [ 1090.960240][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1090.969292][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.975987][ C0] CR2: 0000000000000000 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 1090.983996][ C0] Call Trace: [ 1090.987316][ C0] [ 1090.990279][ C0] ? text_poke_sync+0x30/0x30 [ 1090.995014][ C0] ? smp_call_function_many+0x40/0x40 [ 1091.000505][ C0] ? text_poke+0xc0/0xc0 [ 1091.004771][ C0] ? __mutex_trylock_common+0x153/0x250 [ 1091.010357][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1091.016554][ C0] ? text_poke_sync+0x30/0x30 [ 1091.021261][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1091.026407][ C0] ? kmem_cache_alloc_bulk+0x12a/0x5b0 [ 1091.031903][ C0] text_poke_bp_batch+0x318/0x930 [ 1091.036965][ C0] ? text_poke_loc_init+0x820/0x820 [ 1091.042194][ C0] ? mutex_lock_nested+0x20/0x20 [ 1091.047170][ C0] ? text_poke_queue+0x140/0x190 [ 1091.052151][ C0] ? arch_jump_label_transform_queue+0x93/0x100 [ 1091.058438][ C0] text_poke_finish+0x30/0x50 [ 1091.063142][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1091.069174][ C0] static_key_enable_cpuslocked+0x123/0x240 [ 1091.075100][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1091.080868][ C0] static_key_enable+0x1a/0x20 [ 1091.085664][ C0] toggle_allocation_gate+0xaa/0x250 [ 1091.091071][ C0] ? show_object+0x70/0x70 [ 1091.095532][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1091.100946][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1091.106705][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1091.112455][ C0] process_scheduled_works+0xa45/0x15b0 [ 1091.118061][ C0] ? assign_work+0x400/0x400 [ 1091.122690][ C0] ? assign_work+0x39e/0x400 [ 1091.127321][ C0] worker_thread+0xa55/0xfc0 [ 1091.131969][ C0] kthread+0x2fa/0x390 [ 1091.136072][ C0] ? pr_cont_work+0x560/0x560 [ 1091.140886][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1091.145504][ C0] ret_from_fork+0x48/0x80 [ 1091.149949][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1091.154574][ C0] ret_from_fork_asm+0x11/0x20 [ 1091.159391][ C0]