last executing test programs: 13.45084625s ago: executing program 5 (id=1999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 12.581858376s ago: executing program 2 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.478234918s ago: executing program 3 (id=2004): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 12.333180147s ago: executing program 1 (id=2005): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) 12.224625362s ago: executing program 2 (id=2006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@cache_strategy_disabled}, {@cache_strategy_readahead}, {@noacl}, {@noacl}, {@nouser_xattr}, {}]}, 0xfe, 0x177, &(0x7f0000000680)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x1000) r7 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$xdp(r7, &(0x7f0000000080)={0x2c, 0xa, 0x0, 0x2d}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) 11.875711738s ago: executing program 1 (id=2008): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 11.390142568s ago: executing program 1 (id=2010): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./bus\x00', 0x239d02b, 0x0, 0x2c, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x8}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 9.53792381s ago: executing program 1 (id=2013): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x108, 0x218, 0x300, 0x218, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xe, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x4b}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x90, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20040080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c00038006000100"], 0x10c}}, 0x0) listen(r0, 0xfffffffe) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4", 0x3}], 0x1) r8 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r8, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 8.572970812s ago: executing program 0 (id=2014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000040)={[{@nogrpid}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") 8.527680801s ago: executing program 2 (id=2015): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8e849b, &(0x7f0000000640)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '\xae[\xdd\xa8\xe4\x11\xad|\x89/\x12\xadiRk(\xa5\xa9S\xcdQj;P\x88\xb3\xa8\xaf\xfd\xbc\xe2\xa5\xa6\x1bt\x8a\x1c<\xdbG\xd8\x94\x9d{\x82]wxa\x10\xd5P\x8d\xcc\x97\xdfi?\xb3\xa3)\xab\x9d1\xb6-\xadI\x14\xdf\x9f\xf7\r5\xdcz\xed-\xcc\x94\xe0\a\x00\x00\x00E\x15\xffY\xcb$\x96\xd7\xf82>\xb0\xf9\a\x96\xb0\xdc\xf9\xb0\xae+V\xe8x\xad\x01\xe2\xaco\x93\xde\xd9\x9cFA\xc9\x82c\xb1\xed\x8c\xe1\xed\xcc\xb2\x83\xb3I\t,v\x8f\x16e\xdc\x81\xff\x14\xfezoX\xaf\x17c4\x9a\x04q\x9dnu2\xf9\x1f\n\xbb_\xdb\xfb\xf5\x11\xac\xce\x93Z\xc4\v\xf1\x8d\\!F\xbe\"-l\x9ah\xf7%M\x1cv6\xbf_\xa5\xaf\xbe\v\xe8\xb0\xa5\xf1$\xe2e2\xbbZ\xdd\xd0.L\x1cJ|.\xc8\x8d\xf3\x9dq\t5Y\xab\x19(\xad~f\xaa\xc8Jf\x00\xaf\xb40\xfb\xba\x89\x92Z\xab\xed\xb9{v\x1f;\xbb\xb2\x1fh,+\xd6!\x1e\xef\xf8\x9dt1\x958\xb5\x9cY-\xb4\xa5\xc0\x1f\xdc]\xe9\xed\v(\xf8\xde\x15\xe4$\x0e\x93w\xf0K\x97\x86\xc3A\x97\xce|w$\x8cfE\xbe\xd1\x90T\r\xde\xdd\xd0\x9c\xcb\x14\x1aF\x10f\xa3n/\ac1}\xcc\xaeo\x9d\x16\r\xbd\xe2\x8c\a\xed\x9fC\t\xa8_\xbbo\xcbu\xba\xb1\xddk$\xc3\b\xe2\xd2\xcb\xa3t\xd5\x16\xb6\xa0\x19\xd8\xdc\xaf\x15<\xb5\xee'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x5, 0xbcc, &(0x7f00000010c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff08000000bfa200000000000007020000f8ffffffb703000008000000b7040c00000000008500000001000200959d59c22667d40e9d2b58a44349250d8bb739cdb20f8e18d0de9e151d9f7786c0ae0b0a695155b53a8daefc881519b90b97d9085c55df0d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) 8.511411502s ago: executing program 3 (id=2016): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8.384436301s ago: executing program 4 (id=2017): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001"], 0x44}}, 0x20008040) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.310140972s ago: executing program 5 (id=2018): socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(0xffffffffffffff9c, 0x0, 0x80800, 0x15b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 7.317838584s ago: executing program 4 (id=2019): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") capset(&(0x7f0000000000)={0x20080522}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2009e8dbe108598948faffd54a07c21d875397bdb22d0008b420a1819e0123bab36a84bb840661ac00000080f7fffffffffffdff00170000001b00", "90be8bf4bd00000000000000000000000000001000"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 7.263950083s ago: executing program 0 (id=2020): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) 7.257285105s ago: executing program 2 (id=2021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000", @ANYRES32], 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a63"], 0xffdd) 7.19989295s ago: executing program 3 (id=2022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 6.287566286s ago: executing program 3 (id=2023): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e22, @empty}, {0x0, @remote}, 0x48, {0x2, 0x0, @empty}, 'lo\x00'}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 6.235099585s ago: executing program 5 (id=2024): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2e4}], 0x1}}], 0x1, 0x400c0) io_setup(0x1, &(0x7f0000000000)=0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, r6, 0x0, 0x0, 0x2052}]) 5.961335774s ago: executing program 4 (id=2025): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./bus\x00', 0x239d02b, 0x0, 0x2c, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x8}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 5.491953154s ago: executing program 0 (id=2026): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x5c}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 4.981396365s ago: executing program 5 (id=2027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) setreuid(0x0, 0xee00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) 3.920729257s ago: executing program 1 (id=2028): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xf7, 0x1233, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) close(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_open_dev$vcsu(0x0, 0x33, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.891022521s ago: executing program 4 (id=2029): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) write(r0, &(0x7f00000002c0)="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", 0xfc) 2.880267323s ago: executing program 1 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 2.879898915s ago: executing program 3 (id=2031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x6, 0x0, 0x8) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x3, @loopback}, 0x1c) 1.848529778s ago: executing program 5 (id=2032): prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) 1.846523189s ago: executing program 0 (id=2033): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)={0xff, "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"}) 1.79482237s ago: executing program 4 (id=2034): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.695975717s ago: executing program 2 (id=2035): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.606595588s ago: executing program 3 (id=2036): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104040000000000000002000000240001801400018008000100ac1e000108000200ac141e000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000020800020000000000080007400000000024000e801400018008000100ac14142a081414380c000280050001"], 0x88}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, 0x0, 0x4800) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) clock_gettime(0x2, &(0x7f00000001c0)) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x5}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 732.01176ms ago: executing program 5 (id=2037): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, 0x0, 0x61) 567.959982ms ago: executing program 4 (id=2038): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) 435.634349ms ago: executing program 0 (id=2039): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x44) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f0000000e40)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20002, 0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000140)='./file0\x00') 397.064127ms ago: executing program 2 (id=2040): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x0, 0x80800) io_setup(0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xa2, 0x8003}}}}]}, 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@orlov}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=2041): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) kernel console output (not intermixed with test programs): 38][ T7501] netlink: 'syz.0.519': attribute type 7 has an invalid length. [ 210.992064][ T7501] netlink: 'syz.0.519': attribute type 8 has an invalid length. [ 211.108746][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 211.776336][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 212.246434][ T7530] tipc: Enabled bearer , priority 0 [ 212.479710][ T7538] syzkaller0: entered promiscuous mode [ 212.501076][ T7538] syzkaller0: entered allmulticast mode [ 212.531784][ T7538] tipc: Resetting bearer [ 212.690139][ T7528] tipc: Resetting bearer [ 213.267444][ T5816] tipc: Node number set to 2692105716 [ 213.434534][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 213.552023][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 213.950709][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 214.660769][ T7528] tipc: Disabling bearer [ 214.684983][ T7562] netlink: 'syz.1.541': attribute type 2 has an invalid length. [ 215.004032][ T7584] tipc: Enabling of bearer rejected, failed to enable media [ 216.052864][ T7615] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.557'. [ 216.143630][ T7626] siw: device registration error -23 [ 216.960936][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 216.989027][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 217.111017][ T7657] Cannot find add_set index 0 as target [ 217.942997][ T7668] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.575'. [ 218.111360][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 218.130499][ T7678] netlink: 52 bytes leftover after parsing attributes in process `syz.4.578'. [ 218.740924][ T7701] siw: device registration error -23 [ 218.911174][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 220.521392][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 220.525054][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 221.476507][ T7756] batadv1: entered promiscuous mode [ 221.493996][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 222.239081][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 222.286312][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.354438][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.403121][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.427674][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.415284][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 225.719053][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.636'. [ 226.088596][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 226.200218][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 226.228164][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 227.056794][ T7881] tipc: Enabling of bearer rejected, failed to enable media [ 227.057791][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.654'. [ 227.125714][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.4.654'. [ 227.492535][ T7893] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 227.568443][ T7891] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.656'. [ 227.597739][ T7889] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.656'. [ 227.926669][ T7908] tipc: Enabled bearer , priority 0 [ 227.943335][ T7908] syzkaller0: entered promiscuous mode [ 227.950038][ T7908] syzkaller0: entered allmulticast mode [ 227.975260][ T7908] tipc: Resetting bearer [ 228.013486][ T7907] tipc: Resetting bearer [ 228.060109][ T7907] tipc: Disabling bearer [ 228.144394][ T7913] netlink: 52 bytes leftover after parsing attributes in process `syz.2.665'. [ 228.441105][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 228.512939][ T7920] netlink: 60 bytes leftover after parsing attributes in process `syz.2.669'. [ 228.567975][ T7926] tipc: Enabling of bearer rejected, failed to enable media [ 229.424116][ T7948] netlink: 52 bytes leftover after parsing attributes in process `syz.0.682'. [ 229.631902][ T7957] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.685908][ T7954] tipc: Started in network mode [ 229.711814][ T7954] tipc: Node identity 7238fcf5d6ef, cluster identity 4711 [ 229.744578][ T7954] tipc: Enabled bearer , priority 0 [ 229.780035][ T7958] syzkaller0: entered promiscuous mode [ 229.817238][ T7958] syzkaller0: entered allmulticast mode [ 229.874626][ T7954] tipc: Resetting bearer [ 229.923899][ T7952] tipc: Resetting bearer [ 229.975212][ T7952] tipc: Disabling bearer [ 230.145901][ T7976] tipc: Enabling of bearer rejected, failed to enable media [ 231.460443][ T8002] netlink: 64 bytes leftover after parsing attributes in process `syz.4.698'. [ 231.552654][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 231.566602][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 231.572652][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 231.578839][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 231.584866][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 231.672769][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 232.618576][ T8036] siw: device registration error -23 [ 233.422502][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 233.469566][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 234.023659][ T8060] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 234.060202][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 234.085132][ T8060] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 234.105174][ T8065] netlink: 52 bytes leftover after parsing attributes in process `syz.5.720'. [ 234.927437][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 234.946108][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 235.668314][ T8115] geneve2: entered promiscuous mode [ 235.963082][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'. [ 236.152004][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.744'. [ 236.254469][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 236.278325][ T1160] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 236.280395][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 236.765746][ T8161] siw: device registration error -23 [ 236.984810][ T8166] netlink: 'syz.3.757': attribute type 46 has an invalid length. [ 238.571559][ T8221] __nla_validate_parse: 6 callbacks suppressed [ 238.571585][ T8221] netlink: 52 bytes leftover after parsing attributes in process `syz.5.780'. [ 238.806893][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 239.418996][ T8254] netlink: 68 bytes leftover after parsing attributes in process `syz.5.791'. [ 239.436191][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'. [ 241.433499][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 241.573894][ T8317] tipc: New replicast peer: 0.0.0.0 [ 241.584519][ T8317] tipc: Enabled bearer , priority 10 [ 241.664274][ T8317] tipc: New replicast peer: 172.30.1.3 [ 242.022332][ T8332] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 242.052468][ T8332] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 242.806616][ T8361] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.831'. [ 242.823694][ T8354] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.831'. [ 242.976915][ T8363] netlink: 11 bytes leftover after parsing attributes in process `syz.2.835'. [ 243.325693][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 243.355516][ T8380] netlink: 'syz.3.841': attribute type 4 has an invalid length. [ 243.365736][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 243.446592][ T8380] netlink: 'syz.3.841': attribute type 4 has an invalid length. [ 244.267490][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.854'. [ 244.303178][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.854'. [ 244.334931][ T8407] tipc: Enabled bearer , priority 0 [ 244.387009][ T8407] syzkaller0: entered promiscuous mode [ 244.392544][ T8407] syzkaller0: entered allmulticast mode [ 244.634517][ T8420] tipc: Resetting bearer [ 244.687775][ T8406] tipc: Resetting bearer [ 244.870595][ T8406] tipc: Disabling bearer [ 245.973206][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 246.020896][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 246.509567][ T8479] tipc: Enabled bearer , priority 0 [ 246.528842][ T8479] syzkaller0: entered promiscuous mode [ 246.534351][ T8479] syzkaller0: entered allmulticast mode [ 246.592035][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.885'. [ 246.657912][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.885'. [ 246.712683][ T8491] tipc: Resetting bearer [ 246.767966][ T8477] tipc: Resetting bearer [ 246.937237][ T8477] tipc: Disabling bearer [ 247.038843][ T8494] batadv0: entered promiscuous mode [ 247.194715][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 247.575861][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 247.636160][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 248.432842][ T8539] tipc: Enabled bearer , priority 0 [ 248.469653][ T8539] syzkaller0: entered promiscuous mode [ 248.514226][ T8539] syzkaller0: entered allmulticast mode [ 249.148301][ T8539] tipc: Resetting bearer [ 249.230753][ T8538] tipc: Resetting bearer [ 249.339569][ T8538] tipc: Disabling bearer [ 250.265381][ T8566] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 250.306190][ T8566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.353101][ T8568] team0: Device gtp0 is of different type [ 250.401458][ T44] IPVS: starting estimator thread 0... [ 250.525870][ T8573] IPVS: using max 23 ests per chain, 55200 per kthread [ 250.686647][ T8581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.920'. [ 250.731377][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.920'. [ 251.276661][ T8601] Cannot find del_set index 0 as target [ 252.343595][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 252.378580][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 252.749462][ T8632] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.934'. [ 252.791263][ T8625] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.934'. [ 252.883828][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.938'. [ 252.896177][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 254.127868][ T8660] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 254.236845][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 254.259287][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 254.270935][ T8670] !: left promiscuous mode [ 254.955531][ T8686] tipc: Enabled bearer , priority 0 [ 254.987486][ T8686] syzkaller0: entered promiscuous mode [ 255.010849][ T8686] syzkaller0: entered allmulticast mode [ 255.174986][ T8686] tipc: Resetting bearer [ 255.259485][ T8685] tipc: Resetting bearer [ 255.313087][ T8685] tipc: Disabling bearer [ 255.367696][ T8697] syzkaller0: entered promiscuous mode [ 255.374694][ T8697] syzkaller0: entered allmulticast mode [ 255.430074][ T8696] tipc: Enabled bearer , priority 0 [ 255.819604][ T8701] syzkaller0: entered promiscuous mode [ 255.825404][ T8701] syzkaller0: entered allmulticast mode [ 255.839132][ T8701] tipc: Resetting bearer [ 256.488521][ T5923] tipc: Node number set to 655048339 [ 256.646631][ T8691] tipc: Resetting bearer [ 256.895918][ T8728] __nla_validate_parse: 6 callbacks suppressed [ 256.895946][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 256.940374][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 257.091429][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 257.272702][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 257.288917][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 258.812217][ T8691] tipc: Disabling bearer [ 258.838720][ T8743] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.974'. [ 259.365928][ T8769] tipc: Enabled bearer , priority 0 [ 259.634255][ T8774] syzkaller0: entered promiscuous mode [ 259.640799][ T8774] syzkaller0: entered allmulticast mode [ 259.699646][ T8768] tipc: Resetting bearer [ 259.777122][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 259.803016][ T8768] tipc: Disabling bearer [ 259.813523][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 260.039939][ T8792] syzkaller0: entered promiscuous mode [ 260.065820][ T8792] syzkaller0: entered allmulticast mode [ 261.146268][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 261.237990][ T8809] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.995'. [ 261.920638][ T8841] __nla_validate_parse: 1 callbacks suppressed [ 261.920665][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1000'. [ 262.012091][ T8841] unsupported nlmsg_type 40 [ 262.043198][ T8819] syzkaller0: entered promiscuous mode [ 262.080781][ T8819] syzkaller0: entered allmulticast mode [ 262.978599][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 263.062969][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 263.734700][ T8853] tipc: Enabled bearer , priority 0 [ 263.762889][ T8854] syzkaller0: entered promiscuous mode [ 263.796328][ T8854] syzkaller0: entered allmulticast mode [ 264.226474][ T8854] tipc: Resetting bearer [ 264.309432][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 264.323296][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 265.150439][ T8854] tipc: Disabling bearer [ 265.156373][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 265.346463][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.357462][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.689959][ T8916] tipc: Enabled bearer , priority 0 [ 265.731635][ T8916] syzkaller0: entered promiscuous mode [ 265.768890][ T8916] syzkaller0: entered allmulticast mode [ 266.500247][ T8931] tipc: Resetting bearer [ 266.581984][ T8915] tipc: Resetting bearer [ 266.712391][ T8915] tipc: Disabling bearer [ 266.842938][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 267.673208][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 268.754185][ T8987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.826159][ T8990] netlink: 'syz.3.1042': attribute type 12 has an invalid length. [ 268.902544][ T9008] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1046'. [ 268.950421][ T8993] bond_slave_0: entered promiscuous mode [ 268.956446][ T8993] bond_slave_1: entered promiscuous mode [ 268.962226][ T8993] team_slave_0: entered promiscuous mode [ 268.968067][ T8993] team_slave_1: entered promiscuous mode [ 269.003191][ T8990] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 269.029569][ T8993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.073761][ T8993] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 269.180756][ T9007] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1046'. [ 269.469239][ T9004] syzkaller0: entered promiscuous mode [ 269.480235][ T9004] syzkaller0: entered allmulticast mode [ 269.835298][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1058'. [ 269.978585][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1058'. [ 271.356952][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 271.371842][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1060'. [ 271.730714][ T9069] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1066'. [ 271.772995][ T9062] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1066'. [ 272.358302][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1077'. [ 274.641636][ T9123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1091'. [ 275.060418][ T9143] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1093'. [ 275.115627][ T9139] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1093'. [ 275.891096][ T9148] batadv1: entered promiscuous mode [ 276.865627][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1107'. [ 277.120393][ T9179] tipc: Enabled bearer , priority 0 [ 278.145923][ T9179] syzkaller0: entered promiscuous mode [ 278.151695][ T9179] syzkaller0: entered allmulticast mode [ 278.179347][ T9183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.674772][ T9179] tipc: Resetting bearer [ 279.731562][ T9178] tipc: Resetting bearer [ 279.920815][ T9178] tipc: Disabling bearer [ 283.660324][ T9241] netlink: 'syz.4.1127': attribute type 12 has an invalid length. [ 284.946552][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 285.074766][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 285.130108][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 285.876655][ T9276] xt_hashlimit: size too large, truncated to 1048576 [ 289.979096][ T9308] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1152'. [ 290.012316][ T9310] syzkaller0: entered promiscuous mode [ 290.035169][ T9310] syzkaller0: entered allmulticast mode [ 290.371568][ T9325] netlink: 'syz.4.1155': attribute type 12 has an invalid length. [ 290.748479][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 290.758435][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 291.966374][ T9358] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1168'. [ 292.524497][ T9377] netlink: 'syz.3.1174': attribute type 12 has an invalid length. [ 293.187371][ T9396] batadv2: entered promiscuous mode [ 293.407794][ T9403] tipc: Enabled bearer , priority 0 [ 293.491171][ T9403] tipc: Resetting bearer [ 293.958696][ T9399] tipc: Disabling bearer [ 294.259989][ T9413] Bluetooth: MGMT ver 1.23 [ 294.672061][ T9420] tipc: Enabled bearer , priority 0 [ 294.691639][ T9421] tipc: Enabled bearer , priority 0 [ 294.702397][ T9420] syzkaller0: entered promiscuous mode [ 294.736646][ T9420] syzkaller0: entered allmulticast mode [ 294.751752][ T9421] syzkaller0: entered promiscuous mode [ 294.758678][ T9421] syzkaller0: entered allmulticast mode [ 294.813625][ T9428] netlink: 'syz.5.1192': attribute type 12 has an invalid length. [ 294.858013][ T9421] tipc: Resetting bearer [ 294.879346][ T9420] tipc: Resetting bearer [ 294.887420][ T9419] tipc: Resetting bearer [ 294.970550][ T9419] tipc: Disabling bearer [ 294.988406][ T9416] tipc: Resetting bearer [ 295.019763][ T9416] tipc: Disabling bearer [ 296.314557][ T9454] syzkaller0: entered promiscuous mode [ 296.357453][ T9454] syzkaller0: entered allmulticast mode [ 296.613355][ T9463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.665140][ T9463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.833635][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1210'. [ 299.147057][ T9485] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1213'. [ 299.307125][ T9492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1216'. [ 299.357946][ T9492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1216'. [ 303.077324][ T9513] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 303.109857][ T9513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.217199][ T9518] tipc: Enabled bearer , priority 0 [ 303.235544][ T9518] syzkaller0: entered promiscuous mode [ 303.269241][ T9518] syzkaller0: entered allmulticast mode [ 303.381824][ T9518] tipc: Resetting bearer [ 303.498567][ T9516] tipc: Resetting bearer [ 303.600769][ T9516] tipc: Disabling bearer [ 303.903023][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 303.926251][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 304.135625][ T9539] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.199371][ T9540] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1234'. [ 304.218407][ T9535] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1234'. [ 304.218455][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 304.276207][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 304.408358][ T1093] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.436478][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 304.480130][ T1093] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.496278][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 304.550922][ T9539] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.764265][ T1093] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.979568][ T1093] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.418236][ T9539] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.476686][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 307.417871][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 307.545919][ T9539] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.922696][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.045453][ T1093] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.104642][ T1160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.142412][ T1160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.876514][ T9609] wlan0 speed is unknown, defaulting to 1000 [ 309.976203][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1259'. [ 310.287977][ T9622] bridge0: port 1(netdevsim2) entered blocking state [ 310.319142][ T9622] bridge0: port 1(netdevsim2) entered disabled state [ 310.357921][ T9622] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 310.428799][ T9622] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 310.457912][ T9622] bridge0: port 1(netdevsim2) entered blocking state [ 310.464760][ T9622] bridge0: port 1(netdevsim2) entered forwarding state [ 310.718928][ T9632] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 310.766218][ T9643] netlink: 'syz.0.1267': attribute type 13 has an invalid length. [ 310.774392][ T9643] netlink: 'syz.0.1267': attribute type 17 has an invalid length. [ 311.039777][ T6008] wlan0 speed is unknown, defaulting to 1000 [ 312.373259][ T9662] Bluetooth: MGMT ver 1.23 [ 313.037708][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'. [ 313.215343][ T9692] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.437626][ T9709] wlan0 speed is unknown, defaulting to 1000 [ 313.474496][ T9692] bridge0: port 1(netdevsim2) entered disabled state [ 313.513056][ T9692] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 313.522700][ T9692] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode [ 313.537100][ T9692] bridge0: port 1(netdevsim2) entered disabled state [ 313.564374][ T9692] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.653324][ T9710] tipc: Enabled bearer , priority 0 [ 313.733029][ T9706] tipc: Disabling bearer [ 313.797982][ T9692] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.087668][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 314.130286][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 314.424257][ T9722] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1294'. [ 314.526506][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 314.586342][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 314.646767][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 314.756652][ T9692] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.979546][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 315.259241][ T9735] netlink: 'syz.1.1298': attribute type 12 has an invalid length. [ 315.340129][ T1146] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.432447][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.580663][ T1093] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.624100][ T9744] tipc: Enabled bearer , priority 0 [ 315.680870][ T1093] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.711336][ T9744] syzkaller0: entered promiscuous mode [ 315.727213][ T9744] syzkaller0: entered allmulticast mode [ 315.822074][ T9748] syzkaller0: entered promiscuous mode [ 315.861757][ T9748] syzkaller0: entered allmulticast mode [ 315.897600][ T9759] tipc: Resetting bearer [ 315.949942][ T9740] tipc: Resetting bearer [ 317.826516][ T9740] tipc: Disabling bearer [ 319.100598][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 319.696740][ T9781] tipc: New replicast peer: 255.255.255.255 [ 319.783099][ T9781] tipc: Enabled bearer , priority 10 [ 320.302826][ T9796] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 320.567180][ T9808] Cannot find add_set index 0 as target [ 320.652669][ T9806] loop4: detected capacity change from 0 to 256 [ 320.725426][ T9806] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 321.930799][ T30] audit: type=1800 audit(1763087200.602:2): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1323" name="file2" dev="loop4" ino=1048622 res=0 errno=0 [ 323.778531][ T9817] tipc: Enabled bearer , priority 10 [ 324.719615][ T9828] syzkaller0: entered promiscuous mode [ 324.765535][ T9828] syzkaller0: entered allmulticast mode [ 324.776137][ T6071] tipc: Node number set to 3895464598 [ 325.703484][ T9837] tipc: Enabled bearer , priority 0 [ 325.759163][ T9839] wlan0 speed is unknown, defaulting to 1000 [ 325.900713][ T9836] tipc: Disabling bearer [ 326.067211][ T9853] loop1: detected capacity change from 0 to 128 [ 326.130534][ T9853] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.213756][ T9853] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.310242][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.317303][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.256146][ T9853] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 328.389399][ T9853] fscrypt: loop1: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 328.678065][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.476211][ T9873] netlink: 'syz.0.1342': attribute type 12 has an invalid length. [ 331.537846][ T9890] tipc: Started in network mode [ 331.546646][ T9890] tipc: Node identity b68401a549f9, cluster identity 4711 [ 331.603676][ T9890] tipc: Enabled bearer , priority 0 [ 331.723347][ T9886] tipc: Resetting bearer [ 331.726232][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 331.729589][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 331.796631][ T9896] syzkaller0: entered promiscuous mode [ 331.846131][ T9896] syzkaller0: entered allmulticast mode [ 331.913820][ T9885] tipc: Resetting bearer [ 332.569542][ T9885] tipc: Disabling bearer [ 332.726902][ T6008] tipc: Node number set to 4286382501 [ 332.951100][ T9917] batadv2: entered promiscuous mode [ 333.495502][ T9934] tipc: Enabled bearer , priority 0 [ 333.541079][ T9934] tipc: Resetting bearer [ 333.627594][ T9936] loop3: detected capacity change from 0 to 256 [ 333.804925][ T9936] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 333.821835][ T9936] exFAT-fs (loop3): failed to load alloc-bitmap [ 333.828247][ T9936] exFAT-fs (loop3): failed to recognize exfat type [ 334.519341][ T9933] tipc: Disabling bearer [ 335.911557][ T9967] loop4: detected capacity change from 0 to 512 [ 335.971194][ T9967] ======================================================= [ 335.971194][ T9967] WARNING: The mand mount option has been deprecated and [ 335.971194][ T9967] and is ignored by this kernel. Remove the mand [ 335.971194][ T9967] option from the mount to silence this warning. [ 335.971194][ T9967] ======================================================= [ 336.173960][ T9971] tipc: Enabled bearer , priority 0 [ 336.229855][ T9971] syzkaller0: entered promiscuous mode [ 336.276938][ T9971] syzkaller0: entered allmulticast mode [ 336.306966][ T9971] tipc: Resetting bearer [ 336.330899][ T9967] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.1365: bg 0: block 5: invalid block bitmap [ 336.358415][ T9970] tipc: Resetting bearer [ 336.411287][ T9967] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 336.470149][ T9967] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.1365: invalid indirect mapped block 3 (level 2) [ 336.609753][ T9970] tipc: Disabling bearer [ 336.623571][ T9967] EXT4-fs (loop4): 2 truncates cleaned up [ 336.671962][ T9967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.114039][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 337.135379][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 337.572158][ T9967] EXT4-fs (loop4): shut down requested (2) [ 337.862546][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.386407][T10021] tipc: Enabling of bearer rejected, failed to enable media [ 340.204119][T10029] loop4: detected capacity change from 0 to 4096 [ 340.225167][T10029] EXT4-fs: Ignoring removed orlov option [ 340.470477][T10029] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 340.478992][T10029] System zones: 0-5 [ 340.708121][T10029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.212020][T10049] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1385'. [ 342.269237][T10048] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1385'. [ 342.417902][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.233065][T10079] loop2: detected capacity change from 0 to 256 [ 343.429489][T10079] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 343.466693][T10079] exFAT-fs (loop2): failed to load alloc-bitmap [ 343.473008][T10079] exFAT-fs (loop2): failed to recognize exfat type [ 344.603232][T10097] loop4: detected capacity change from 0 to 4096 [ 344.616923][T10097] EXT4-fs: Ignoring removed orlov option [ 344.751006][T10097] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 344.760906][T10097] System zones: 0-5 [ 344.816132][T10097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.541222][T10101] tipc: Enabling of bearer rejected, failed to enable media [ 346.911131][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.550398][T10127] tipc: Enabled bearer , priority 0 [ 347.667237][T10127] syzkaller0: entered promiscuous mode [ 347.691267][T10127] syzkaller0: entered allmulticast mode [ 347.789184][T10127] tipc: Resetting bearer [ 347.894061][T10125] tipc: Resetting bearer [ 348.128317][T10125] tipc: Disabling bearer [ 348.746562][ T5816] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 349.372701][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.341977][ T5816] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 350.353616][ T5816] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 350.363007][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.094679][ T5816] usb 4-1: config 0 descriptor?? [ 351.193817][ T5816] usb 4-1: can't set config #0, error -71 [ 351.266481][ T5816] usb 4-1: USB disconnect, device number 2 [ 351.721198][T10176] loop5: detected capacity change from 0 to 256 [ 351.744557][T10175] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1425'. [ 351.779157][T10171] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1425'. [ 351.814632][T10176] exfat: Deprecated parameter 'namecase' [ 351.834623][T10176] exfat: Deprecated parameter 'utf8' [ 352.619070][T10179] syzkaller0: entered promiscuous mode [ 352.649547][T10179] syzkaller0: entered allmulticast mode [ 352.736110][T10176] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 353.021750][T10187] loop0: detected capacity change from 0 to 1024 [ 353.144583][T10187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 353.267175][T10187] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.345768][T10187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 353.603950][T10187] xt_bpf: check failed: parse error [ 353.679343][T10213] loop5: detected capacity change from 0 to 512 [ 353.711514][T10213] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.787408][T10213] EXT4-fs: inline encryption not supported [ 353.838240][T10213] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.898138][ T30] audit: type=1326 audit(1763087233.752:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 353.926108][T10213] EXT4-fs (loop5): Test dummy encryption mode enabled [ 353.976098][T10213] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 354.022037][T10217] syz.3.1439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 354.027412][T10208] wlan0 speed is unknown, defaulting to 1000 [ 354.033239][ T30] audit: type=1326 audit(1763087233.792:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.072065][T10213] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 354.167056][ T30] audit: type=1326 audit(1763087233.802:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.226189][T10213] EXT4-fs (loop5): 1 truncate cleaned up [ 354.237543][ T30] audit: type=1326 audit(1763087233.802:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.237622][ T30] audit: type=1326 audit(1763087233.802:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.237690][ T30] audit: type=1326 audit(1763087233.812:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.237758][ T30] audit: type=1326 audit(1763087233.812:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.237826][ T30] audit: type=1326 audit(1763087233.812:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.237895][ T30] audit: type=1326 audit(1763087233.832:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.237964][ T30] audit: type=1326 audit(1763087233.832:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.3.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 354.258279][T10213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.756990][ T6008] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 355.859261][T10242] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 356.392790][T10241] wlan0 speed is unknown, defaulting to 1000 [ 356.537883][T10243] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1444'. [ 356.602205][T10231] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1444'. [ 356.854870][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 356.866708][ T6008] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 356.875853][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.937728][ T6008] usb 3-1: config 0 descriptor?? [ 357.105599][T10253] loop4: detected capacity change from 0 to 2048 [ 357.177677][ T6008] usbhid 3-1:0.0: can't add hid device: -71 [ 357.193831][T10255] syzkaller0: entered promiscuous mode [ 357.200756][T10255] syzkaller0: entered allmulticast mode [ 357.210055][T10253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.233946][ T6008] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 357.284863][ T6008] usb 3-1: USB disconnect, device number 2 [ 357.443775][T10253] wlan0 speed is unknown, defaulting to 1000 [ 357.450854][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.819104][T10263] loop5: detected capacity change from 0 to 4096 [ 357.848409][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.893416][T10263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.089607][T10263] EXT4-fs (loop5): shut down requested (0) [ 358.253579][T10273] loop0: detected capacity change from 0 to 4096 [ 358.335321][T10273] EXT4-fs (loop0): Test dummy encryption mode enabled [ 358.370372][T10273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.434169][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.132800][T10292] loop3: detected capacity change from 0 to 512 [ 359.181980][T10292] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 359.605088][T10292] loop3: detected capacity change from 0 to 512 [ 359.749585][T10292] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 360.211463][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.555188][T10281] syz.1.1456: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 360.599008][T10281] CPU: 1 UID: 0 PID: 10281 Comm: syz.1.1456 Not tainted syzkaller #0 PREEMPT(full) [ 360.599056][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.599078][T10281] Call Trace: [ 360.599090][T10281] [ 360.599103][T10281] dump_stack_lvl+0x16c/0x1f0 [ 360.599157][T10281] warn_alloc+0x248/0x3a0 [ 360.599220][T10281] ? __pfx_warn_alloc+0x10/0x10 [ 360.599292][T10281] ? xskq_create+0xfb/0x1d0 [ 360.599327][T10281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.599374][T10281] ? __vmalloc_node_noprof+0xad/0xf0 [ 360.599425][T10281] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 360.599485][T10281] ? xskq_create+0xfb/0x1d0 [ 360.599534][T10281] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.599595][T10281] ? xskq_create+0xfb/0x1d0 [ 360.599632][T10281] vmalloc_user_noprof+0x9e/0xe0 [ 360.599674][T10281] ? xskq_create+0xfb/0x1d0 [ 360.599712][T10281] xskq_create+0xfb/0x1d0 [ 360.599753][T10281] xsk_setsockopt+0x792/0x9a0 [ 360.599819][T10281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 360.599879][T10281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.599924][T10281] ? find_held_lock+0x2b/0x80 [ 360.599978][T10281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.600026][T10281] ? aa_sock_opt_perm+0xfd/0x1c0 [ 360.600083][T10281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 360.600148][T10281] do_sock_setsockopt+0xf3/0x1d0 [ 360.600208][T10281] __sys_setsockopt+0x1a0/0x230 [ 360.600279][T10281] __x64_sys_setsockopt+0xbd/0x160 [ 360.600340][T10281] ? do_syscall_64+0x91/0xfa0 [ 360.600385][T10281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.600430][T10281] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.600478][T10281] do_syscall_64+0xcd/0xfa0 [ 360.600529][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.600567][T10281] RIP: 0033:0x7fdf6b98f6c9 [ 360.600595][T10281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.600631][T10281] RSP: 002b:00007fdf6c8f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 360.600666][T10281] RAX: ffffffffffffffda RBX: 00007fdf6bbe5fa0 RCX: 00007fdf6b98f6c9 [ 360.600691][T10281] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 360.600714][T10281] RBP: 00007fdf6ba11f91 R08: 0000000000000004 R09: 0000000000000000 [ 360.600737][T10281] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 360.600760][T10281] R13: 00007fdf6bbe6038 R14: 00007fdf6bbe5fa0 R15: 00007ffd77526768 [ 360.600813][T10281] [ 360.603095][T10281] Mem-Info: [ 360.882796][T10281] active_anon:10816 inactive_anon:0 isolated_anon:0 [ 360.882796][T10281] active_file:22097 inactive_file:40261 isolated_file:0 [ 360.882796][T10281] unevictable:768 dirty:466 writeback:0 [ 360.882796][T10281] slab_reclaimable:10737 slab_unreclaimable:116725 [ 360.882796][T10281] mapped:37997 shmem:4753 pagetables:1129 [ 360.882796][T10281] sec_pagetables:0 bounce:0 [ 360.882796][T10281] kernel_misc_reclaimable:0 [ 360.882796][T10281] free:1267203 free_pcp:10479 free_cma:0 [ 360.989119][T10281] Node 0 active_anon:42264kB inactive_anon:0kB active_file:88388kB inactive_file:160740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151988kB dirty:1864kB writeback:0kB shmem:16276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12604kB pagetables:4388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.388373][T10281] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.388515][T10281] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.388633][T10281] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 362.388711][T10281] Node 0 DMA32 free:1169176kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33404kB inactive_anon:0kB active_file:88388kB inactive_file:160700kB unevictable:1536kB writepending:1544kB zspages:0kB present:3129332kB managed:2544996kB mlocked:0kB bounce:0kB free_pcp:25468kB local_pcp:8240kB free_cma:0kB [ 362.388832][T10281] lowmem_reserve[]: 0 0 1 1 1 [ 362.388906][T10281] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.389019][T10281] lowmem_reserve[]: 0 0 0 0 0 [ 362.389095][T10281] Node 1 Normal free:3892324kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18624kB local_pcp:6976kB free_cma:0kB [ 362.389213][T10281] lowmem_reserve[]: 0 0 0 0 0 [ 362.389288][T10281] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 362.389595][T10281] Node 0 DMA32: 424*4kB (M) 61*8kB (ME) 99*16kB (ME) 295*32kB (UME) 328*64kB (UME) 167*128kB (UM) 106*256kB (UME) 22*512kB (UME) 16*1024kB (UM) 7*2048kB (UM) 255*4096kB (UM) = 1169176kB [ 362.389942][T10281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.390152][T10281] Node 1 Normal: 209*4kB (UME) 42*8kB (UME) 45*16kB (UME) 128*32kB (UME) 32*64kB (UME) 10*128kB (UME) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3892324kB [ 362.390502][T10281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.390535][T10281] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.390567][T10281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.390599][T10281] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.390630][T10281] 63676 total pagecache pages [ 362.390645][T10281] 0 pages in swap cache [ 362.390659][T10281] Free swap = 124996kB [ 362.390674][T10281] Total swap = 124996kB [ 362.390689][T10281] 2097051 pages RAM [ 362.390703][T10281] 0 pages HighMem/MovableOnly [ 362.390717][T10281] 428712 pages reserved [ 362.390731][T10281] 0 pages cma reserved [ 362.788739][T10293] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1461'. [ 362.942052][T10315] tipc: Enabled bearer , priority 0 [ 363.008752][T10314] tipc: Resetting bearer [ 363.236116][T10316] syzkaller0: entered promiscuous mode [ 363.236152][T10316] syzkaller0: entered allmulticast mode [ 363.307711][T10309] tipc: Resetting bearer [ 363.385987][T10327] loop3: detected capacity change from 0 to 256 [ 363.522974][T10327] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 363.527339][T10327] exFAT-fs (loop3): failed to load alloc-bitmap [ 363.527417][T10327] exFAT-fs (loop3): failed to recognize exfat type [ 363.824153][T10330] loop1: detected capacity change from 0 to 128 [ 363.840865][T10330] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.841293][T10330] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.888616][T10330] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 364.255520][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.523999][T10338] loop5: detected capacity change from 0 to 512 [ 364.545082][T10338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.876073][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 364.876491][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 365.546143][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 365.546170][ T30] audit: type=1326 audit(1763087245.042:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546250][ T30] audit: type=1326 audit(1763087245.052:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546320][ T30] audit: type=1326 audit(1763087245.072:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546391][ T30] audit: type=1326 audit(1763087245.082:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546469][ T30] audit: type=1326 audit(1763087245.082:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546539][ T30] audit: type=1326 audit(1763087245.102:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546643][ T30] audit: type=1326 audit(1763087245.102:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546713][ T30] audit: type=1326 audit(1763087245.102:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546783][ T30] audit: type=1326 audit(1763087245.122:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 365.546853][ T30] audit: type=1326 audit(1763087245.122:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 366.107726][T10309] tipc: Disabling bearer [ 366.462135][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.019156][T10363] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1480'. [ 367.019678][T10373] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1480'. [ 367.031377][T10375] tipc: Enabling of bearer rejected, failed to enable media [ 367.295963][T10380] loop1: detected capacity change from 0 to 512 [ 367.322608][T10380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 367.419839][T10380] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 367.421548][T10380] EXT4-fs (loop1): 1 truncate cleaned up [ 367.429839][T10380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.482415][T10380] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 369.713141][T10398] loop5: detected capacity change from 0 to 512 [ 369.870529][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 369.891274][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 370.111823][T10398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.112803][T10398] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.214505][T10395] loop2: detected capacity change from 0 to 512 [ 370.243582][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.905491][T10396] loop4: detected capacity change from 0 to 512 [ 370.924094][T10395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.042389][T10396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.090171][T10406] loop3: detected capacity change from 0 to 512 [ 372.196122][T10419] tipc: Enabling of bearer rejected, failed to enable media [ 372.242416][T10406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.285777][T10420] syzkaller0: entered promiscuous mode [ 372.546555][T10420] syzkaller0: entered allmulticast mode [ 372.616957][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.989375][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 372.989430][ T30] audit: type=1326 audit(1763087252.682:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.443294][ T30] audit: type=1326 audit(1763087252.692:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.552851][ T30] audit: type=1326 audit(1763087252.692:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.614971][ T30] audit: type=1326 audit(1763087252.692:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.656078][ T30] audit: type=1326 audit(1763087252.702:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.696062][ T30] audit: type=1326 audit(1763087252.702:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.735046][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.767225][ T30] audit: type=1326 audit(1763087252.702:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.805257][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.823226][ T30] audit: type=1326 audit(1763087252.702:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.849432][ T30] audit: type=1326 audit(1763087252.702:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.874734][ T30] audit: type=1326 audit(1763087252.702:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe61b8f6c9 code=0x7ffc0000 [ 373.910516][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.502048][T10436] loop1: detected capacity change from 0 to 1024 [ 374.522162][T10436] EXT4-fs: Ignoring removed orlov option [ 374.561690][T10436] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 374.755520][T10436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.411670][T10451] loop4: detected capacity change from 0 to 128 [ 376.831359][T10453] syz.4.1500: attempt to access beyond end of device [ 376.831359][T10453] loop4: rw=2049, sector=537, nr_sectors = 504 limit=128 [ 377.274322][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.290790][T10458] loop3: detected capacity change from 0 to 256 [ 377.337862][T10458] vfat: Unknown parameter 'Socase' [ 378.097783][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 378.104223][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 378.723248][T10466] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1504'. [ 378.801392][T10465] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1504'. [ 378.914203][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 379.013212][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 379.063873][T10475] loop2: detected capacity change from 0 to 512 [ 380.938419][T10475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.043800][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.522431][T10504] loop1: detected capacity change from 0 to 512 [ 382.567034][T10505] wlan0 speed is unknown, defaulting to 1000 [ 382.683994][T10504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.832506][T10504] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.132544][T10515] tipc: Enabled bearer , priority 0 [ 383.175792][T10516] syzkaller0: entered promiscuous mode [ 383.256316][T10516] syzkaller0: entered allmulticast mode [ 385.058720][T10522] loop5: detected capacity change from 0 to 256 [ 385.068516][T10522] exfat: Deprecated parameter 'namecase' [ 385.074389][T10522] exfat: Deprecated parameter 'utf8' [ 386.126653][T10522] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 387.287032][T10517] tipc: Resetting bearer [ 387.321895][T10514] tipc: Resetting bearer [ 387.456902][T10514] tipc: Disabling bearer [ 387.556072][T10533] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1524'. [ 387.591727][T10531] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1524'. [ 388.286315][T10540] wlan0 speed is unknown, defaulting to 1000 [ 388.476485][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.482840][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.860448][T10548] loop3: detected capacity change from 0 to 512 [ 389.006895][T10548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.124951][T10559] loop2: detected capacity change from 0 to 512 [ 389.200433][T10559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.405838][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.591675][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.966455][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.968782][T10584] loop2: detected capacity change from 0 to 2048 [ 392.102318][T10584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.118957][T10584] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.439967][T10596] loop3: detected capacity change from 0 to 512 [ 393.025420][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 393.025446][ T30] audit: type=1804 audit(1763087272.872:88): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1537" name="/newroot/254/file0/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 393.103568][T10596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.208268][T10607] loop5: detected capacity change from 0 to 512 [ 393.261923][T10607] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.340346][T10607] EXT4-fs: inline encryption not supported [ 393.396547][T10607] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.446716][T10607] EXT4-fs (loop5): Test dummy encryption mode enabled [ 393.456443][T10607] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 393.648653][T10613] loop4: detected capacity change from 0 to 512 [ 393.688926][T10613] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 393.846220][T10613] EXT4-fs (loop4): 1 truncate cleaned up [ 393.892597][T10613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.991074][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.188590][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.214452][T10607] EXT4-fs (loop5): 1 truncate cleaned up [ 394.248490][T10607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.231311][T10625] loop2: detected capacity change from 0 to 512 [ 395.361536][T10625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.598749][T10625] overlayfs: failed to resolve './bus': -2 [ 395.608917][T10620] loop0: detected capacity change from 0 to 8192 [ 395.981485][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.088681][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.779895][T10653] loop2: detected capacity change from 0 to 256 [ 398.782025][T10655] IPv6: sit1: Disabled Multicast RS [ 400.237102][T10657] loop3: detected capacity change from 0 to 128 [ 400.862921][T10653] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 400.875602][T10653] exFAT-fs (loop2): failed to load alloc-bitmap [ 400.882182][T10653] exFAT-fs (loop2): failed to recognize exfat type [ 400.946205][T10657] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.091587][T10657] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.458477][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.670494][T10676] loop3: detected capacity change from 0 to 256 [ 402.781051][T10676] FAT-fs (loop3): Directory bread(block 64) failed [ 402.796011][T10676] FAT-fs (loop3): Directory bread(block 65) failed [ 402.803726][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.809229][T10676] FAT-fs (loop3): Directory bread(block 66) failed [ 402.845350][T10676] FAT-fs (loop3): Directory bread(block 67) failed [ 402.886863][T10676] FAT-fs (loop3): Directory bread(block 68) failed [ 402.891567][T10680] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 402.893421][T10676] FAT-fs (loop3): Directory bread(block 69) failed [ 402.917046][T10680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.983225][T10676] FAT-fs (loop3): Directory bread(block 70) failed [ 403.006409][T10676] FAT-fs (loop3): Directory bread(block 71) failed [ 403.013101][T10676] FAT-fs (loop3): Directory bread(block 72) failed [ 403.071968][T10676] FAT-fs (loop3): Directory bread(block 73) failed [ 403.090803][ T30] audit: type=1326 audit(1763087282.942:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 403.152023][T10686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1572'. [ 403.166783][ T30] audit: type=1326 audit(1763087282.942:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 403.254566][ T30] audit: type=1326 audit(1763087282.942:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 403.342945][ T30] audit: type=1326 audit(1763087282.972:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 403.438368][T10692] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1573'. [ 403.449868][T10689] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1573'. [ 403.466241][ T30] audit: type=1326 audit(1763087283.092:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 403.548686][ T30] audit: type=1326 audit(1763087283.092:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 403.656038][ T30] audit: type=1326 audit(1763087283.092:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b035c1f85 code=0x7ffc0000 [ 403.765004][ T30] audit: type=1326 audit(1763087283.282:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 405.372396][T10727] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 405.380630][T10727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.596566][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1589'. [ 405.756424][ T911] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 405.918272][ T911] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.934972][ T911] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.952476][ T911] usb 4-1: config 0 interface 0 has no altsetting 0 [ 405.976079][ T911] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 405.995647][ T911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.017370][T10744] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1591'. [ 406.037301][T10741] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1591'. [ 406.056467][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 406.060366][ T911] usb 4-1: config 0 descriptor?? [ 406.127611][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 406.140048][T10746] loop2: detected capacity change from 0 to 4096 [ 406.525445][ T911] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 406.558167][ T911] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 406.595711][ T911] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 407.030226][ T911] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 407.449552][ T911] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0001/input/input5 [ 407.596163][T10757] tipc: Enabled bearer , priority 0 [ 407.617926][T10757] tipc: Resetting bearer [ 407.695555][ T911] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 407.756066][ T911] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 407.789854][ T911] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 407.809201][T10756] tipc: Disabling bearer [ 407.840410][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 407.876974][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 407.944831][ T911] usb 4-1: USB disconnect, device number 3 [ 408.281036][T10769] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 408.295833][T10765] fido_id[10765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 408.296397][ T911] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 408.336259][T10769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.345670][T10771] netlink: 'syz.0.1603': attribute type 12 has an invalid length. [ 408.372991][T10770] overlayfs: failed to resolve './bus': -2 [ 409.519739][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 410.786435][T10798] tipc: Enabled bearer , priority 0 [ 410.824925][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 410.882434][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 410.974499][T10797] tipc: Disabling bearer [ 411.044666][T10806] tipc: Enabled bearer , priority 0 [ 411.071970][T10806] tipc: Resetting bearer [ 411.105254][T10805] tipc: Disabling bearer [ 411.517814][T10814] netlink: 'syz.4.1619': attribute type 12 has an invalid length. [ 411.738528][T10816] loop2: detected capacity change from 0 to 256 [ 411.757324][T10816] vfat: Unknown parameter 'ÿžS4H*i ºbÖý¸Ú ·ùÌÙ›nv¬­9ÖûI¿ÿ0000000000000000000000718446744073709551615' [ 413.262574][T10820] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 413.305877][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.135569][T10826] loop4: detected capacity change from 0 to 256 [ 414.226420][T10826] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 414.239568][T10826] exFAT-fs (loop4): failed to load alloc-bitmap [ 414.245839][T10826] exFAT-fs (loop4): failed to recognize exfat type [ 414.833167][T10845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.939301][T10845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.034661][T10849] loop4: detected capacity change from 0 to 1024 [ 415.183991][T10849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.149613][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.425415][T10865] loop1: detected capacity change from 0 to 128 [ 416.520084][T10865] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.627749][T10865] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.081553][T10881] wlan0 speed is unknown, defaulting to 1000 [ 417.890479][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.167671][T10894] loop5: detected capacity change from 0 to 512 [ 418.249607][T10894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.899526][T10907] loop0: detected capacity change from 0 to 256 [ 418.952649][T10907] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 418.965657][T10907] exFAT-fs (loop0): failed to load alloc-bitmap [ 418.971964][T10907] exFAT-fs (loop0): failed to recognize exfat type [ 419.115558][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.270030][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.277589][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.401265][T10912] bridge0: entered allmulticast mode [ 420.075467][T10919] bridge_slave_1: left allmulticast mode [ 420.107005][T10919] bridge_slave_1: left promiscuous mode [ 420.141745][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.349723][T10919] bridge_slave_0: left allmulticast mode [ 420.374717][T10919] bridge_slave_0: left promiscuous mode [ 420.380723][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.549424][T10922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.833177][T10922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.866517][T10935] loop2: detected capacity change from 0 to 512 [ 420.961554][T10935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.070953][T10935] overlayfs: failed to resolve './bus': -2 [ 421.200891][T10928] syzkaller0: entered promiscuous mode [ 421.207732][T10928] syzkaller0: entered allmulticast mode [ 421.268335][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.504889][T10947] loop5: detected capacity change from 0 to 128 [ 421.663593][T10947] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.742964][T10947] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.054602][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.072449][T10963] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1656'. [ 422.102932][T10961] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1656'. [ 422.980229][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 422.989264][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 423.101338][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.315774][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.316494][T10997] loop5: detected capacity change from 0 to 1024 [ 423.371964][T10997] EXT4-fs: Ignoring removed bh option [ 423.402605][T10997] EXT4-fs: inline encryption not supported [ 423.434985][T10997] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 423.586160][T10999] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1671'. [ 423.601613][T10997] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1670: lblock 2 mapped to illegal pblock 2 (length 1) [ 423.620722][T10998] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1671'. [ 423.672021][T10997] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 423.706093][T10997] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1670: lblock 0 mapped to illegal pblock 48 (length 1) [ 423.786150][T10997] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 424.097050][T10997] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1670: Failed to acquire dquot type 0 [ 424.442388][T10997] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 424.556130][T10997] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1670: mark_inode_dirty error [ 424.630850][T10997] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 424.666222][T10997] EXT4-fs (loop5): 1 orphan inode deleted [ 424.686875][ T1160] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 424.713125][T10997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.716208][ T1160] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 424.744587][ T1160] EXT4-fs error (device loop5): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 424.918953][ T60] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm kworker/u8:4: lblock 2 mapped to illegal pblock 2 (length 1) [ 424.976351][T11012] loop1: detected capacity change from 0 to 1024 [ 424.988088][ T60] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 425.029292][ T60] EXT4-fs error (device loop5): ext4_write_dquot:6923: comm kworker/u8:4: Failed to commit dquot type 0 [ 425.051317][T11012] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 425.085811][ T60] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 425.130042][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.151509][T11012] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.1675: Invalid block bitmap block 0 in block_group 0 [ 425.176706][ T5830] EXT4-fs error (device loop5): __ext4_get_inode_loc:4831: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 425.241311][T10994] loop4: detected capacity change from 0 to 512 [ 425.248946][T11012] Quota error (device loop1): write_blk: dquota write failed [ 425.258157][ T5830] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 425.272611][T11012] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 425.308240][ T5830] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 425.324734][T11012] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.1675: Failed to acquire dquot type 0 [ 425.437301][T11012] EXT4-fs error (device loop1): ext4_free_blocks:6705: comm syz.1.1675: Freeing blocks not in datazone - block = 0, count = 4096 [ 425.550826][T11012] EXT4-fs error (device loop1): ext4_read_inode_bitmap:138: comm syz.1.1675: Invalid inode bitmap blk 0 in block_group 0 [ 425.566672][ T12] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 425.599609][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'. [ 425.616861][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 425.657605][T11027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1678'. [ 425.697744][T11012] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 425.736150][T11012] EXT4-fs (loop1): 1 orphan inode deleted [ 425.755112][T11012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.250594][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 426.259705][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 426.342032][T11037] loop2: detected capacity change from 0 to 512 [ 426.412830][T11037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.546165][T11052] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1687'. [ 427.567392][T11051] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1687'. [ 427.963579][T11057] loop3: detected capacity change from 0 to 4096 [ 427.980370][T11057] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.014294][T11057] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 428.060625][T11057] EXT4-fs (loop3): Test dummy encryption mode enabled [ 428.092699][T11057] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 429.311262][T11073] loop4: detected capacity change from 0 to 512 [ 429.326465][T11073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 429.408022][T11073] EXT4-fs (loop4): 1 truncate cleaned up [ 429.457931][T11073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.877258][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.060613][T11088] EXT4-fs error (device loop4): __ext4_iget:5443: inode #15: block 1803188595: comm syz.4.1694: invalid block [ 431.722952][T11087] EXT4-fs error (device loop4): __ext4_iget:5443: inode #15: block 1803188595: comm syz.4.1694: invalid block [ 432.113916][T11093] syzkaller0: entered promiscuous mode [ 432.156196][T11093] syzkaller0: entered allmulticast mode [ 432.309481][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.378031][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 432.446416][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 432.492642][T11099] loop3: detected capacity change from 0 to 128 [ 432.510116][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 432.568121][T11099] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.585633][T11099] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.920643][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.966065][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 435.972551][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 436.498599][T11150] loop5: detected capacity change from 0 to 256 [ 436.532757][T11152] loop2: detected capacity change from 0 to 128 [ 436.568286][T11150] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 436.583021][T11150] exFAT-fs (loop5): failed to load alloc-bitmap [ 436.589339][T11150] exFAT-fs (loop5): failed to recognize exfat type [ 436.636582][T11152] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.702968][T11152] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.864786][ T5838] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.018956][T11160] loop4: detected capacity change from 0 to 128 [ 437.088367][T11160] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.814770][T11160] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 438.002264][T11167] loop2: detected capacity change from 0 to 512 [ 438.069012][T11169] loop5: detected capacity change from 0 to 512 [ 438.082503][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.109827][T11167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.207397][T11169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.256210][ T5833] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.193100][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.419433][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.752841][T11198] syzkaller0: entered promiscuous mode [ 439.758505][T11198] syzkaller0: entered allmulticast mode [ 439.759203][T11195] loop4: detected capacity change from 0 to 128 [ 439.790021][T11195] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.646126][T11195] ext4 filesystem being mounted at /284/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 441.020024][ T5833] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.308987][T11223] loop4: detected capacity change from 0 to 512 [ 441.341508][T11223] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.391259][T11223] EXT4-fs: inline encryption not supported [ 441.412020][T11223] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.449545][T11223] EXT4-fs (loop4): Test dummy encryption mode enabled [ 441.474872][T11227] tipc: Enabled bearer , priority 0 [ 441.481988][T11223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 441.497813][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1740'. [ 441.571953][T11223] EXT4-fs (loop4): 1 truncate cleaned up [ 441.620570][T11223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.622958][T11227] syzkaller0: entered promiscuous mode [ 441.641780][T11227] syzkaller0: entered allmulticast mode [ 441.658112][T11227] tipc: Resetting bearer [ 441.699064][T11225] tipc: Resetting bearer [ 442.757326][T11260] loop0: detected capacity change from 0 to 128 [ 442.795666][T11260] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.860538][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1750'. [ 442.881719][T11260] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 443.115581][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.697833][ T30] audit: type=1800 audit(1763087323.542:97): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1737" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 444.410046][T11282] loop3: detected capacity change from 0 to 512 [ 444.421717][T11283] loop5: detected capacity change from 0 to 128 [ 444.528924][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 444.535517][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 444.633697][T11282] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1753: inode has both inline data and extents flags [ 444.649299][T11283] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 444.750049][T11283] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 444.761982][T11282] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1753: couldn't read orphan inode 15 (err -117) [ 444.829904][T11282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.061301][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.597781][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.722962][T11225] tipc: Disabling bearer [ 446.765495][T11293] batadv1: entered promiscuous mode [ 447.068690][T11308] loop1: detected capacity change from 0 to 512 [ 447.132575][T11308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.239421][T11315] loop0: detected capacity change from 0 to 128 [ 447.529301][T11315] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.209831][T11315] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 448.512003][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.799006][T11328] loop5: detected capacity change from 0 to 128 [ 448.833960][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.879071][T11328] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 449.009494][T11328] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 449.326147][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 449.410377][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 449.425355][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.734976][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.742282][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.417037][T11346] tipc: Enabling of bearer rejected, failed to enable media [ 450.694285][T11357] batadv1: entered promiscuous mode [ 450.958111][T11363] loop2: detected capacity change from 0 to 512 [ 451.091867][T11363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.189576][T11368] loop4: detected capacity change from 0 to 128 [ 451.292762][T11368] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.386949][T11368] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 451.827685][ T5833] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.050626][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.664372][T11393] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1786'. [ 452.716326][T11390] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1786'. [ 452.891076][T11398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1788'. [ 453.168930][T11408] loop4: detected capacity change from 0 to 1024 [ 453.242380][T11408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.398412][T11415] tipc: Enabled bearer , priority 0 [ 454.622820][T11415] syzkaller0: entered promiscuous mode [ 455.283985][T11415] syzkaller0: entered allmulticast mode [ 455.305539][T11415] tipc: Resetting bearer [ 455.334664][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.368217][T11427] loop2: detected capacity change from 0 to 128 [ 455.405842][T11413] tipc: Resetting bearer [ 455.496677][T11427] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.837268][T11427] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 456.071501][ T5838] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.272605][T11432] tipc: Failed to remove unknown binding: 66,1,1/4286382501:404523394/404523396 [ 456.348159][T11432] tipc: Failed to remove unknown binding: 66,1,1/4286382501:404523394/404523396 [ 456.428930][T11432] tipc: Failed to remove unknown binding: 66,1,1/4286382501:404523394/404523396 [ 456.458361][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.850694][T11413] tipc: Disabling bearer [ 460.081030][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1807'. [ 460.334977][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 460.347359][T11500] loop3: detected capacity change from 0 to 256 [ 460.396456][T11500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 460.437542][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 460.478610][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 461.633644][T11523] capability: warning: `syz.4.1820' uses deprecated v2 capabilities in a way that may be insecure [ 462.000298][T11531] loop3: detected capacity change from 0 to 1024 [ 462.010872][T11531] EXT4-fs: Ignoring removed bh option [ 462.025992][T11531] ext4: Unknown parameter 'euid>00000000000000000000' [ 462.512967][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 464.285785][T11551] loop0: detected capacity change from 0 to 16 [ 464.374053][T11551] erofs (device loop0): mounted with root inode @ nid 36. [ 464.507117][T11551] syz.0.1828: attempt to access beyond end of device [ 464.507117][T11551] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 464.609565][T11551] syz.0.1828: attempt to access beyond end of device [ 464.609565][T11551] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 464.782248][ T30] audit: type=1800 audit(1763087344.632:98): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1828" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 465.339435][T11571] netlink: 'syz.1.1835': attribute type 15 has an invalid length. [ 466.298509][T11583] loop3: detected capacity change from 0 to 16 [ 466.323723][T11583] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 125300) [ 466.598195][T11581] loop5: detected capacity change from 0 to 1024 [ 468.170039][T11588] loop2: detected capacity change from 0 to 512 [ 468.317997][T11588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.434806][T11588] overlayfs: missing 'lowerdir' [ 469.852288][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.153056][T11614] netlink: 'syz.4.1845': attribute type 3 has an invalid length. [ 471.694242][T11630] loop1: detected capacity change from 0 to 4096 [ 471.695403][T11630] EXT4-fs: Ignoring removed orlov option [ 473.744520][T11630] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 473.744692][T11630] System zones: 0-5 [ 473.747553][T11630] EXT4-fs: error -4 creating inode table initialization thread [ 473.748051][T11630] EXT4-fs (loop1): mount failed [ 474.058738][T11628] tty tty3: ldisc open failed (-12), clearing slot 2 [ 474.580971][T11637] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 474.641750][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.850750][T11639] syzkaller0: entered promiscuous mode [ 474.906481][T11639] syzkaller0: entered allmulticast mode [ 474.920202][T11639] tipc: Enabled bearer , priority 0 [ 475.036167][T11638] tipc: Resetting bearer [ 475.136458][T11638] tipc: Disabling bearer [ 475.478495][T11652] loop0: detected capacity change from 0 to 1024 [ 475.498533][T11652] EXT4-fs: Ignoring removed orlov option [ 475.560750][T11652] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 475.845092][T11652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.006065][ T30] audit: type=1800 audit(1763087355.782:99): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1856" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 478.226239][T11659] loop5: detected capacity change from 0 to 512 [ 478.245599][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.349768][T11659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.475048][T11659] overlayfs: missing 'lowerdir' [ 478.670820][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.691072][T11674] loop1: detected capacity change from 0 to 128 [ 478.745671][T11674] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.781264][T11674] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.014287][T11674] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 479.185167][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.249625][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 479.306902][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 479.347779][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 480.186806][T11708] loop2: detected capacity change from 0 to 4096 [ 480.206391][T11708] EXT4-fs: Ignoring removed orlov option [ 481.213657][T11709] loop1: detected capacity change from 0 to 1024 [ 481.250509][T11709] EXT4-fs: Ignoring removed i_version option [ 481.558798][T11709] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 481.805207][T11708] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 481.816065][T11708] System zones: 0-5 [ 481.831691][T11708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.947140][T11718] fuse: Unknown parameter '窮Â Y' [ 483.591299][T11709] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.1869: Invalid block bitmap block 0 in block_group 0 [ 483.631132][T11709] Quota error (device loop1): write_blk: dquota write failed [ 483.638859][T11709] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 483.649331][T11709] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.1869: Failed to acquire dquot type 0 [ 483.661498][T11709] EXT4-fs error (device loop1): ext4_free_blocks:6705: comm syz.1.1869: Freeing blocks not in datazone - block = 0, count = 4096 [ 483.676047][T11709] EXT4-fs error (device loop1): ext4_read_inode_bitmap:138: comm syz.1.1869: Invalid inode bitmap blk 0 in block_group 0 [ 483.693278][T11709] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 483.706865][T11709] EXT4-fs (loop1): 1 orphan inode deleted [ 483.735450][T11709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.808154][T11718] loop0: detected capacity change from 0 to 256 [ 483.815214][T11718] vfat: Bad value for 'fmask' [ 483.896628][ T1146] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 483.929790][ T1146] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 483.949541][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.578162][T11725] loop3: detected capacity change from 0 to 256 [ 486.050313][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.160414][T11730] syzkaller0: entered promiscuous mode [ 487.219167][T11730] syzkaller0: entered allmulticast mode [ 487.435716][T11730] tipc: Enabled bearer , priority 0 [ 487.559746][T11729] tipc: Resetting bearer [ 488.386518][T11751] loop3: detected capacity change from 0 to 128 [ 488.412362][T11729] tipc: Disabling bearer [ 489.153724][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 489.570785][T11775] loop1: detected capacity change from 0 to 128 [ 490.006671][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 490.107908][T11767] loop3: detected capacity change from 0 to 4096 [ 490.119087][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 490.441769][T11783] loop1: detected capacity change from 0 to 128 [ 490.511870][T11783] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.557709][T11783] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.636261][ T5923] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 490.649069][T11783] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 491.380427][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.411369][T11794] loop2: detected capacity change from 0 to 4096 [ 491.435444][T11794] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 491.487773][T11794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.530179][ T5923] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 491.551664][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 491.561793][ T5923] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 491.586292][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.627533][ T5923] usb 6-1: config 0 descriptor?? [ 491.633727][T11785] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 491.746489][ T846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 491.930901][ T846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.961530][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.980945][ T846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.086041][ T846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.127406][ T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.155965][ T846] usb 5-1: Product: syz [ 492.163058][ T5923] samsung 0003:0419:0600.0003: hidraw0: USB HID v0.04 Device [HID 0419:0600] on usb-dummy_hcd.5-1/input0 [ 492.167615][ T30] audit: type=1326 audit(1763087372.022:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 492.184964][ T846] usb 5-1: Manufacturer: syz [ 492.235162][ T846] usb 5-1: SerialNumber: syz [ 492.266077][ T30] audit: type=1326 audit(1763087372.052:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 492.372159][ T30] audit: type=1326 audit(1763087372.062:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 492.794878][ T30] audit: type=1326 audit(1763087372.652:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 492.847183][ T30] audit: type=1326 audit(1763087372.652:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 492.935310][ T30] audit: type=1326 audit(1763087372.742:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 492.938385][ T846] cdc_ncm 5-1:1.0: bind() failure [ 493.013947][ T30] audit: type=1326 audit(1763087372.762:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 493.046714][ T846] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 493.084017][ T846] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 493.110605][ T846] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 493.111924][ T30] audit: type=1326 audit(1763087372.762:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 493.137560][ T846] usb 5-1: USB disconnect, device number 2 [ 493.246359][T11824] loop0: detected capacity change from 0 to 512 [ 493.263978][T11824] ext4: Unknown parameter 'nouser_xattr' [ 493.423343][ T30] audit: type=1326 audit(1763087372.762:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 493.447042][ T30] audit: type=1326 audit(1763087372.812:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b98f6c9 code=0x7ffc0000 [ 494.330462][ T846] usb 6-1: USB disconnect, device number 2 [ 494.455576][T11814] loop3: detected capacity change from 0 to 16 [ 494.533111][T11814] erofs (device loop3): mounted with root inode @ nid 36. [ 494.615346][T11841] loop4: detected capacity change from 0 to 128 [ 494.741200][T11841] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 494.851889][T11841] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.030116][T11841] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 495.057996][T11853] syzkaller0: entered promiscuous mode [ 495.063533][T11853] syzkaller0: entered allmulticast mode [ 495.116632][T11855] loop2: detected capacity change from 0 to 512 [ 495.145596][T11855] EXT4-fs: Ignoring removed i_version option [ 495.156160][T11855] EXT4-fs: Ignoring removed nobh option [ 495.205963][T11855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 495.258335][T11855] EXT4-fs (loop2): 1 truncate cleaned up [ 495.301036][ T5833] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 495.318107][T11855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.415552][T11862] loop0: detected capacity change from 0 to 2048 [ 496.419725][ T6058] Alternate GPT is invalid, using primary GPT. [ 496.450244][ T6058] loop0: p1 p2 p3 [ 496.553817][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.635039][T11887] loop2: detected capacity change from 0 to 512 [ 497.638346][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 497.648814][ T6058] udevd[6058]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 497.663104][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 497.685331][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1915'. [ 497.768129][T11887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.835159][T11887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 497.896898][T11887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 498.101680][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.495169][T11908] tipc: Enabling of bearer rejected, failed to enable media [ 499.127456][T11927] loop5: detected capacity change from 0 to 4096 [ 499.158556][T11927] EXT4-fs (loop5): Test dummy encryption mode enabled [ 499.200737][T11927] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 499.277225][T11927] System zones: 0-5 [ 499.328056][T11927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.398874][T11934] tipc: Enabled bearer , priority 0 [ 500.908761][T11957] loop1: detected capacity change from 0 to 4096 [ 500.916376][T11957] EXT4-fs: Ignoring removed orlov option [ 501.068171][ T30] audit: type=1800 audit(1763087380.712:110): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1929" name="file1" dev="loop5" ino=16 res=0 errno=0 [ 501.171168][T11957] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 501.181157][T11957] System zones: 0-5 [ 501.238648][T11957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.322724][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 501.329661][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 501.617986][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.770422][T11928] tipc: Disabling bearer [ 502.414620][T11970] loop0: detected capacity change from 0 to 512 [ 502.493171][T11972] fuse: Bad value for 'fd' [ 502.610011][T11970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.836868][T11970] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 502.845641][T11970] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 503.198277][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.233102][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.265750][T11980] loop4: detected capacity change from 0 to 4096 [ 503.562726][T11990] loop5: detected capacity change from 0 to 128 [ 503.659567][T11990] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.745834][T11990] ext4 filesystem being mounted at /337/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.391455][T11990] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 504.667058][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.760221][T12002] tipc: Enabling of bearer rejected, failed to enable media [ 504.799452][T12004] syzkaller0: entered promiscuous mode [ 504.841399][T12004] syzkaller0: entered allmulticast mode [ 505.512686][T12021] tipc: New replicast peer: 255.255.255.255 [ 505.521459][T12021] tipc: Enabled bearer , priority 10 [ 506.652816][T12034] loop2: detected capacity change from 0 to 512 [ 506.720654][T12034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.822246][T12034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 506.858683][T12034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 506.877435][ T6071] tipc: Node number set to 2765618421 [ 507.507024][T12041] loop1: detected capacity change from 0 to 4096 [ 507.526506][T12041] EXT4-fs: Ignoring removed orlov option [ 507.672003][T12041] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 507.682292][T12041] System zones: 0-5 [ 507.736864][T12041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.915573][T12030] syzkaller0: entered promiscuous mode [ 508.973698][T12030] syzkaller0: entered allmulticast mode [ 509.160737][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.338034][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.439370][ T30] audit: type=1326 audit(1763087389.282:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 509.566020][ T30] audit: type=1326 audit(1763087389.282:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 509.647300][ T30] audit: type=1326 audit(1763087389.292:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 509.690838][T12049] loop3: detected capacity change from 0 to 4096 [ 509.978177][ T30] audit: type=1326 audit(1763087389.292:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 510.002804][ T30] audit: type=1326 audit(1763087389.292:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 510.025301][ T30] audit: type=1326 audit(1763087389.292:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 510.076643][ T30] audit: type=1326 audit(1763087389.292:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 510.232206][T12062] loop1: detected capacity change from 0 to 512 [ 510.371822][T12062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 511.428826][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.435203][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.624595][T12062] EXT4-fs (loop1): 1 truncate cleaned up [ 512.043911][T12062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.067117][ T30] audit: type=1326 audit(1763087389.352:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0358f6c9 code=0x7ffc0000 [ 513.382930][T12070] loop2: detected capacity change from 0 to 16 [ 513.420833][T12060] EXT4-fs error (device loop1): __ext4_iget:5443: inode #12: block 2: comm syz.1.1961: invalid block [ 513.598931][T12070] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 125300) [ 514.127413][T12060] EXT4-fs (loop1): Remounting filesystem read-only [ 514.514621][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.611210][T12074] tipc: Enabling of bearer rejected, failed to enable media [ 514.970205][T12085] loop3: detected capacity change from 0 to 512 [ 515.127866][T12085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.380797][T12085] overlayfs: missing 'lowerdir' [ 516.045691][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.303890][T12114] loop3: detected capacity change from 0 to 128 [ 516.330542][T12076] loop0: detected capacity change from 0 to 40427 [ 516.386996][T12076] F2FS-fs (loop0): invalid crc value [ 516.885902][T12122] loop3: detected capacity change from 0 to 256 [ 516.933124][T12122] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 516.943938][T12122] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 517.040208][T12122] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 517.064704][T12122] exFAT-fs (loop3): failed to load alloc-bitmap [ 517.071138][T12122] exFAT-fs (loop3): failed to recognize exfat type [ 518.067450][T12126] loop2: detected capacity change from 0 to 4096 [ 518.099044][T12076] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 519.498229][T12131] loop1: detected capacity change from 0 to 8192 [ 519.562562][T12136] loop2: detected capacity change from 0 to 256 [ 519.737545][T12136] FAT-fs (loop2): Directory bread(block 64) failed [ 519.781887][T12136] FAT-fs (loop2): Directory bread(block 65) failed [ 519.812746][T12136] FAT-fs (loop2): Directory bread(block 66) failed [ 519.841577][T12136] FAT-fs (loop2): Directory bread(block 67) failed [ 519.849798][T12136] FAT-fs (loop2): Directory bread(block 68) failed [ 519.856454][T12136] FAT-fs (loop2): Directory bread(block 69) failed [ 519.863102][T12136] FAT-fs (loop2): Directory bread(block 70) failed [ 519.869966][T12136] FAT-fs (loop2): Directory bread(block 71) failed [ 519.876628][T12136] FAT-fs (loop2): Directory bread(block 72) failed [ 519.883250][T12136] FAT-fs (loop2): Directory bread(block 73) failed [ 521.906419][ T1093] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.935302][ T1093] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.215966][ T1093] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.224658][ T1093] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.310648][T12146] tipc: Enabled bearer , priority 0 [ 522.337998][T12154] tipc: Enabled bearer , priority 0 [ 522.382777][T12154] tipc: Resetting bearer [ 522.416889][T12153] tipc: Disabling bearer [ 522.612367][T12148] syzkaller0: entered promiscuous mode [ 522.617999][T12148] syzkaller0: entered allmulticast mode [ 522.630962][T12145] tipc: Resetting bearer [ 522.777101][T12165] loop5: detected capacity change from 0 to 16 [ 523.481690][T12145] tipc: Disabling bearer [ 523.598791][T12165] erofs (device loop5): rootino(nid 36) is not a directory(i_mode 125300) [ 523.716055][ T5923] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 523.876390][T12162] netlink: 'syz.3.1989': attribute type 12 has an invalid length. [ 523.888409][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.932675][T12164] loop0: detected capacity change from 0 to 1024 [ 523.964838][T12164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.132701][T12164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.849402][ T5923] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 524.858551][ T5923] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 524.867664][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.877045][ T5923] usb 2-1: config 0 descriptor?? [ 527.380253][T12177] loop4: detected capacity change from 0 to 4096 [ 527.929470][ T5923] usb 2-1: can't set config #0, error -71 [ 527.958139][ T5923] usb 2-1: USB disconnect, device number 2 [ 527.966109][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.520096][T12208] syzkaller0: entered promiscuous mode [ 529.542159][T12208] syzkaller0: entered allmulticast mode [ 530.152352][T12226] loop2: detected capacity change from 0 to 16 [ 530.193165][T12226] erofs (device loop2): mounted with root inode @ nid 36. [ 530.871055][T12235] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 532.751840][T12244] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2013'. [ 533.081597][T12215] netlink: 'syz.3.2004': attribute type 12 has an invalid length. [ 533.436546][T12247] loop2: detected capacity change from 0 to 4096 [ 533.476585][T12249] loop0: detected capacity change from 0 to 128 [ 533.620442][T12249] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 533.671977][T12254] loop5: detected capacity change from 0 to 512 [ 533.693662][T12249] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 533.737364][T12254] EXT4-fs: Ignoring removed i_version option [ 533.743766][T12258] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 533.781480][T12258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.793439][T12254] EXT4-fs: Ignoring removed nobh option [ 534.037756][T12254] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 534.323791][T12254] EXT4-fs (loop5): 1 truncate cleaned up [ 534.378405][T12254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.632135][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.019833][T12266] loop4: detected capacity change from 0 to 512 [ 535.379123][T12266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.496024][T12266] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 535.618193][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.854574][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.124710][T12293] loop1: detected capacity change from 0 to 8192 [ 538.233487][T12276] loop3: detected capacity change from 0 to 40427 [ 538.277408][T12276] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 538.297928][T12276] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 538.334151][T12276] F2FS-fs (loop3): invalid crc value [ 538.622419][T12276] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 539.789586][T12295] netlink: 'syz.4.2029': attribute type 12 has an invalid length. [ 540.138012][T12306] syzkaller0: entered promiscuous mode [ 540.207755][T12306] syzkaller0: entered allmulticast mode [ 540.242727][T12317] loop2: detected capacity change from 0 to 512 [ 541.055634][T12317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.171957][T12317] overlayfs: missing 'workdir' [ 541.441828][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.447957][T12342] loop0: detected capacity change from 0 to 128 [ 541.529820][T12342] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.592836][T12342] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 541.659258][T12342] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 541.805819][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.815883][ C1] ------------[ cut here ]------------ [ 541.829968][ C1] ODEBUG: free active (active state 0) object: ffff88805352a090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 541.843848][ C1] WARNING: CPU: 1 PID: 12345 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 541.853480][ C1] Modules linked in: [ 541.857636][ C1] CPU: 1 UID: 0 PID: 12345 Comm: syz.2.2040 Not tainted syzkaller #0 PREEMPT(full) [ 541.867087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.877218][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 541.883072][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 87 f0 8b 4c 89 e6 48 c7 c7 a0 7b f0 8b e8 bf 87 d0 fc 90 <0f> 0b 90 90 58 83 05 b6 e3 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 541.902777][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 541.908918][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 541.916950][ C1] RDX: ffff88802e439e40 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 541.924960][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 541.932984][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf08240 [ 541.941113][ C1] R13: ffffffff8b9021a0 R14: ffffffff8a4bc930 R15: ffffc90000a08b18 [ 541.949143][ C1] FS: 00007f51257816c0(0000) GS:ffff888124b07000(0000) knlGS:0000000000000000 [ 541.958151][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.964758][ C1] CR2: 000000110c3681be CR3: 0000000029857000 CR4: 0000000000350ef0 [ 541.972809][ C1] Call Trace: [ 541.976308][ C1] [ 541.979168][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 541.984856][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 541.990914][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.996613][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 542.002176][ C1] ? net_rx_action+0x3b3/0xef0 [ 542.007019][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 542.013146][ C1] kfree+0x291/0x6d0 [ 542.017092][ C1] ? rose_timer_expiry+0x53f/0x630 [ 542.022238][ C1] ? rose_timer_expiry+0x53f/0x630 [ 542.027429][ C1] rose_timer_expiry+0x53f/0x630 [ 542.032420][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 542.037946][ C1] call_timer_fn+0x19a/0x620 [ 542.042567][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 542.047743][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.053444][ C1] ? mark_held_locks+0x49/0x80 [ 542.058287][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 542.063776][ C1] __run_timers+0x6ef/0x960 [ 542.068350][ C1] ? __pfx___run_timers+0x10/0x10 [ 542.073414][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.079250][ C1] run_timer_base+0x114/0x190 [ 542.083964][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 542.089234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.094920][ C1] run_timer_softirq+0x1a/0x40 [ 542.099761][ C1] handle_softirqs+0x219/0x8e0 [ 542.104594][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 542.109952][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.115728][ C1] __irq_exit_rcu+0x109/0x170 [ 542.120486][ C1] irq_exit_rcu+0x9/0x30 [ 542.124764][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 542.130476][ C1] [ 542.133423][ C1] [ 542.136506][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 542.142523][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 542.148679][ C1] Code: e9 5d 31 5c 00 be 03 00 00 00 5b e9 d2 e7 e5 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 a7 e4 11 65 8b 05 99 a7 e4 11 a9 00 01 ff 00 74 1d [ 542.168441][ C1] RSP: 0018:ffffc9000ac47658 EFLAGS: 00000246 [ 542.174562][ C1] RAX: 1ffffd400035d84c RBX: ffffea0001aec240 RCX: ffffc9000bf3c000 [ 542.182602][ C1] RDX: 0000000000080000 RSI: ffffffff81f3a9ba RDI: ffffea0001aec240 [ 542.190717][ C1] RBP: 0000000000000008 R08: 0000000000000006 R09: 0000000000000af7 [ 542.198756][ C1] R10: 0000000000000b36 R11: 0000000000000001 R12: 0000000000000af7 [ 542.206818][ C1] R13: ffffc9000ac479a0 R14: dffffc0000000000 R15: ffffea0001aec240 [ 542.214838][ C1] ? const_folio_flags.constprop.0+0xa/0x70 [ 542.220835][ C1] const_folio_flags.constprop.0+0xa/0x70 [ 542.226632][ C1] filemap_map_pages+0x690/0x1d50 [ 542.231735][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 542.237313][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.243000][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 542.248525][ C1] do_pte_missing+0xe33/0x3ba0 [ 542.253333][ C1] ? find_held_lock+0x2b/0x80 [ 542.258096][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.263774][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 542.268977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.274687][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 542.280348][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.286147][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 542.291696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.297413][ C1] ? find_held_lock+0x2b/0x80 [ 542.302147][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.307853][ C1] ? follow_page_pte+0x5cf/0x1390 [ 542.313004][ C1] handle_mm_fault+0x589/0xd10 [ 542.317836][ C1] __get_user_pages+0x54e/0x3530 [ 542.322926][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 542.328347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.334215][ C1] populate_vma_page_range+0x267/0x3f0 [ 542.339742][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 542.345747][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 542.351613][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.357667][ C1] ? do_mmap+0x69c/0x1210 [ 542.362029][ C1] __mm_populate+0x1d8/0x380 [ 542.366701][ C1] ? __pfx___mm_populate+0x10/0x10 [ 542.371851][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.377575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.383250][ C1] ? up_write+0x1b2/0x520 [ 542.387718][ C1] vm_mmap_pgoff+0x37f/0x470 [ 542.392399][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 542.397620][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.403287][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.409429][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 542.414407][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 542.419193][ C1] ? xfd_validate_state+0x61/0x180 [ 542.424367][ C1] __x64_sys_mmap+0x125/0x190 [ 542.429136][ C1] do_syscall_64+0xcd/0xfa0 [ 542.433679][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.439647][ C1] RIP: 0033:0x7f512498f6c9 [ 542.444082][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.463780][ C1] RSP: 002b:00007f5125781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 542.472269][ C1] RAX: ffffffffffffffda RBX: 00007f5124be5fa0 RCX: 00007f512498f6c9 [ 542.480320][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 542.488443][ C1] RBP: 00007f5124a11f91 R08: ffffffffffffffff R09: 00000000ffffe000 [ 542.496502][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 542.504494][ C1] R13: 00007f5124be6038 R14: 00007f5124be5fa0 R15: 00007ffe18a92528 [ 542.512581][ C1] [ 542.515703][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 542.523026][ C1] CPU: 1 UID: 0 PID: 12345 Comm: syz.2.2040 Not tainted syzkaller #0 PREEMPT(full) [ 542.532413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.542559][ C1] Call Trace: [ 542.545838][ C1] [ 542.548688][ C1] dump_stack_lvl+0x3d/0x1f0 [ 542.553306][ C1] vpanic+0x640/0x6f0 [ 542.557319][ C1] ? debug_print_object+0x1a2/0x2b0 [ 542.562535][ C1] panic+0xca/0xd0 [ 542.566285][ C1] ? __pfx_panic+0x10/0x10 [ 542.570744][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 542.575885][ C1] check_panic_on_warn+0xab/0xb0 [ 542.580863][ C1] __warn+0xf6/0x3c0 [ 542.584768][ C1] ? debug_print_object+0x1a2/0x2b0 [ 542.589982][ C1] report_bug+0x3c3/0x580 [ 542.594329][ C1] ? debug_print_object+0x1a2/0x2b0 [ 542.599540][ C1] handle_bug+0x184/0x210 [ 542.603899][ C1] exc_invalid_op+0x17/0x50 [ 542.608434][ C1] asm_exc_invalid_op+0x1a/0x20 [ 542.613305][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 542.619214][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 87 f0 8b 4c 89 e6 48 c7 c7 a0 7b f0 8b e8 bf 87 d0 fc 90 <0f> 0b 90 90 58 83 05 b6 e3 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 542.638832][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 542.644911][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 542.652887][ C1] RDX: ffff88802e439e40 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 542.660861][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 542.668835][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf08240 [ 542.676812][ C1] R13: ffffffff8b9021a0 R14: ffffffff8a4bc930 R15: ffffc90000a08b18 [ 542.684792][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 542.690462][ C1] ? __warn_printk+0x198/0x350 [ 542.695259][ C1] ? __warn_printk+0x1a5/0x350 [ 542.700056][ C1] ? debug_print_object+0x1a1/0x2b0 [ 542.705360][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 542.711021][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 542.716848][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.722505][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 542.728071][ C1] ? net_rx_action+0x3b3/0xef0 [ 542.732890][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 542.739085][ C1] kfree+0x291/0x6d0 [ 542.742994][ C1] ? rose_timer_expiry+0x53f/0x630 [ 542.748129][ C1] ? rose_timer_expiry+0x53f/0x630 [ 542.753253][ C1] rose_timer_expiry+0x53f/0x630 [ 542.758211][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 542.763684][ C1] call_timer_fn+0x19a/0x620 [ 542.768283][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 542.773413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.779064][ C1] ? mark_held_locks+0x49/0x80 [ 542.783858][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 542.789332][ C1] __run_timers+0x6ef/0x960 [ 542.793854][ C1] ? __pfx___run_timers+0x10/0x10 [ 542.798892][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.804564][ C1] run_timer_base+0x114/0x190 [ 542.809337][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 542.814541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.820194][ C1] run_timer_softirq+0x1a/0x40 [ 542.824964][ C1] handle_softirqs+0x219/0x8e0 [ 542.829758][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 542.835066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.840723][ C1] __irq_exit_rcu+0x109/0x170 [ 542.845420][ C1] irq_exit_rcu+0x9/0x30 [ 542.849685][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 542.855334][ C1] [ 542.858264][ C1] [ 542.861192][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 542.867189][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 542.873287][ C1] Code: e9 5d 31 5c 00 be 03 00 00 00 5b e9 d2 e7 e5 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 a7 e4 11 65 8b 05 99 a7 e4 11 a9 00 01 ff 00 74 1d [ 542.893001][ C1] RSP: 0018:ffffc9000ac47658 EFLAGS: 00000246 [ 542.899085][ C1] RAX: 1ffffd400035d84c RBX: ffffea0001aec240 RCX: ffffc9000bf3c000 [ 542.907061][ C1] RDX: 0000000000080000 RSI: ffffffff81f3a9ba RDI: ffffea0001aec240 [ 542.915049][ C1] RBP: 0000000000000008 R08: 0000000000000006 R09: 0000000000000af7 [ 542.923026][ C1] R10: 0000000000000b36 R11: 0000000000000001 R12: 0000000000000af7 [ 542.931002][ C1] R13: ffffc9000ac479a0 R14: dffffc0000000000 R15: ffffea0001aec240 [ 542.938996][ C1] ? const_folio_flags.constprop.0+0xa/0x70 [ 542.944915][ C1] const_folio_flags.constprop.0+0xa/0x70 [ 542.950651][ C1] filemap_map_pages+0x690/0x1d50 [ 542.955728][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 542.961219][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.966886][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 542.972364][ C1] do_pte_missing+0xe33/0x3ba0 [ 542.977148][ C1] ? find_held_lock+0x2b/0x80 [ 542.981846][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.987509][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 542.992652][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.998303][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 543.003783][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.009444][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 543.014947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.020597][ C1] ? find_held_lock+0x2b/0x80 [ 543.025308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.030955][ C1] ? follow_page_pte+0x5cf/0x1390 [ 543.036003][ C1] handle_mm_fault+0x589/0xd10 [ 543.040796][ C1] __get_user_pages+0x54e/0x3530 [ 543.045762][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 543.051150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.056812][ C1] populate_vma_page_range+0x267/0x3f0 [ 543.062292][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 543.068285][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 543.074124][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.079773][ C1] ? do_mmap+0x69c/0x1210 [ 543.084251][ C1] __mm_populate+0x1d8/0x380 [ 543.088861][ C1] ? __pfx___mm_populate+0x10/0x10 [ 543.093987][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.099635][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.105283][ C1] ? up_write+0x1b2/0x520 [ 543.109631][ C1] vm_mmap_pgoff+0x37f/0x470 [ 543.114260][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 543.119420][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.125076][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.130724][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 543.135704][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 543.140441][ C1] ? xfd_validate_state+0x61/0x180 [ 543.145596][ C1] __x64_sys_mmap+0x125/0x190 [ 543.150296][ C1] do_syscall_64+0xcd/0xfa0 [ 543.154836][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.160752][ C1] RIP: 0033:0x7f512498f6c9 [ 543.165181][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.184894][ C1] RSP: 002b:00007f5125781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 543.193379][ C1] RAX: ffffffffffffffda RBX: 00007f5124be5fa0 RCX: 00007f512498f6c9 [ 543.201360][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 543.209431][ C1] RBP: 00007f5124a11f91 R08: ffffffffffffffff R09: 00000000ffffe000 [ 543.217410][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 543.225383][ C1] R13: 00007f5124be6038 R14: 00007f5124be5fa0 R15: 00007ffe18a92528 [ 543.233384][ C1] [ 543.236737][ C1] Kernel Offset: disabled [ 543.241069][ C1] Rebooting in 86400 seconds..