last executing test programs: 19m27.288247418s ago: executing program 32 (id=34): socket$l2tp(0x2, 0x2, 0x73) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000001c}) 18m55.559685026s ago: executing program 33 (id=183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008200)=[{{&(0x7f0000002b80)={0xa, 0x4e20, 0x6, @loopback, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000004f80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}], 0x18}}], 0x1, 0x4) 18m21.642255593s ago: executing program 34 (id=602): mmap(&(0x7f0000735000/0x4000)=nil, 0x4000, 0x2000004, 0x6031, 0xffffffffffffffff, 0x23a2000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 18m2.103759329s ago: executing program 35 (id=671): socket$inet6_udp(0xa, 0x2, 0x0) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz7uNAjEUBdA7q/nsBKttCTogoQUqoAA6ISKBJohog5AyjOYDogGEkM5J/HTta+mFj6qe02/KS77K4jQOP3Pwd6lTSp/sxlqfps45SXu4pRuSajNctNn+z41rlyz7R7+ejn1pxufT3+vjW5cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC9xDwAA//+pRwzi") 17m18.653247338s ago: executing program 36 (id=1268): socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m13.872114668s ago: executing program 37 (id=1944): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 16m9.063513724s ago: executing program 38 (id=1967): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 16m8.861590523s ago: executing program 39 (id=1968): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffe84) 16m7.679592036s ago: executing program 40 (id=1977): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) listen(r0, 0x9) 15m32.79749596s ago: executing program 41 (id=2150): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000018000100000600bccf00000204"], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x24040484) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 7m26.448595091s ago: executing program 42 (id=4994): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) r3 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x6e, 0x10, 0x7f, 0x3aa, 0x3, 0x6, 0x200, 0x255, 0x34, 0x349, 0x7, 0x6, 0x20, 0x4, 0xffff, 0x6, 0x6}, [{0x70000000, 0x0, 0x9, 0x101, 0x400, 0x648, 0x3ff, 0xf33a}, {0x4, 0x80, 0x0, 0x8, 0x80000001, 0x1fffc, 0x4, 0x7}, {0x1474e550, 0xb, 0x8, 0x5, 0x1, 0x81, 0x1, 0x7}, {0x60000000, 0x80000001, 0xdb7, 0x741, 0x5, 0x2, 0x5, 0xff}], "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"}, 0x10b4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x13, 0x0, &(0x7f0000000c00)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r2, 0x8924, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) setrlimit(0xd, &(0x7f0000000300)={0x6a39, 0xffffffffffffffff}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) 4m57.51626213s ago: executing program 43 (id=5518): r0 = getpgid(0x0) syz_pidfd_open(0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x0) 4m30.0377288s ago: executing program 4 (id=5631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 4m26.906998621s ago: executing program 4 (id=5636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4m26.175220231s ago: executing program 4 (id=5639): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) 4m25.878626462s ago: executing program 4 (id=5641): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4040) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 4m23.158731577s ago: executing program 4 (id=5645): mkdir(&(0x7f0000000300)='./bus\x00', 0x6) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x81}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1fffffd, 0xb0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) fcntl$dupfd(r0, 0x0, r0) 4m20.219370056s ago: executing program 4 (id=5654): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000600)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000a00)=@usbdevfs_disconnect={0xb4}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x840, &(0x7f0000000040)={[{@nouid32}, {@grpid}]}, 0x1, 0x4e5, &(0x7f0000000480)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x3c, r5, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000000c0)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x3d0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050045}, 0x40804) 4m5.018946123s ago: executing program 44 (id=5654): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000600)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000a00)=@usbdevfs_disconnect={0xb4}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x840, &(0x7f0000000040)={[{@nouid32}, {@grpid}]}, 0x1, 0x4e5, &(0x7f0000000480)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x3c, r5, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000000c0)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x3d0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050045}, 0x40804) 3m40.745600034s ago: executing program 5 (id=5776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x52b242d) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) 3m39.22197064s ago: executing program 5 (id=5778): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000040)=@tcp=r4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m37.524066654s ago: executing program 5 (id=5780): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n', @ANYRES32=r5, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x68}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x884) 3m35.597026919s ago: executing program 5 (id=5784): socket$tipc(0x1e, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r4}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 3m32.837593501s ago: executing program 5 (id=5789): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3m31.876642314s ago: executing program 5 (id=5792): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 3m16.655582336s ago: executing program 45 (id=5792): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m35.562970808s ago: executing program 0 (id=5912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 2m31.873501002s ago: executing program 0 (id=5913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="cf042cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000600ab000802000005007400010000000c0081"], 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) 2m31.570053684s ago: executing program 0 (id=5914): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x4008010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2m30.462057066s ago: executing program 0 (id=5917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) unshare(0x40020000) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0xc}, 0x8) 2m29.418506673s ago: executing program 0 (id=5920): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000780)={[{@nombcache}, {@noauto_da_alloc}, {@discard}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_journal}, {@nodelalloc}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x7c, 0x591, &(0x7f0000000900)="$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") 2m27.546217017s ago: executing program 0 (id=5922): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 2m12.317525311s ago: executing program 46 (id=5922): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 2m12.054860893s ago: executing program 1 (id=5945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x784f9804, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m11.508409559s ago: executing program 1 (id=5948): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000035c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8884d3, 0x0, 0xf2, 0x0, &(0x7f00000000c0)) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0x100, 0x100000002}) 2m10.418430659s ago: executing program 1 (id=5952): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000640)=@ethtool_gstrings={0x1b, 0x9, 0x5, "022dee2148"}}) 2m9.427324512s ago: executing program 1 (id=5954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x33, &(0x7f0000000280)={@rand_addr=0x64010101, @remote, @empty}, 0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x4, @random="2000f040f10b"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xde46f1e64a0e3aa4}}, 0x10) 2m7.583540921s ago: executing program 1 (id=5958): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendto(r0, 0x0, 0x38, 0x4000, 0x0, 0x0) 2m7.196996241s ago: executing program 1 (id=5961): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/171, 0xab}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000b40)=""/144, 0x90}], 0x8}, 0x4}], 0x3, 0x12000, 0x0) 1m52.041792502s ago: executing program 47 (id=5961): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/171, 0xab}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000b40)=""/144, 0x90}], 0x8}, 0x4}], 0x3, 0x12000, 0x0) 25.342299604s ago: executing program 9 (id=6172): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) syslog(0x9, 0x0, 0x0) 24.476162409s ago: executing program 9 (id=6176): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRES64, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=';', 0x1}], 0x1, 0x800fff, 0xc, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x6, 0x80000000, 0x0, 0x3, 0x1, 0x0, [{0x2, 0x6, 0x2, '\x00', 0x80e}]}) 20.678566173s ago: executing program 9 (id=6191): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x70bd25, 0x25dfdbff, {0x1d, 0x4, 0x6, 0x9, {0x4e24, 0x4e24, [0x7, 0x800, 0x27, 0x8001], [0x800, 0x2, 0xfffffff7, 0xd622], 0x0, [0x714b819e, 0x1]}, 0x8, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x2000045}, 0x4000844) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) 20.591765104s ago: executing program 6 (id=6192): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x2, &(0x7f0000000280)={0x0, 0x6d08, 0x2, 0xfffffffe, 0x10d}, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xb62f6000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0x28) pipe2(&(0x7f0000000100), 0x0) sendfile(r1, r0, 0x0, 0x100000000) setfsuid(0xee01) 20.198977102s ago: executing program 9 (id=6193): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f000000e040)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALt1X68Xt1e/rtjm7fTt5RgMAAABcsq3Wi/qfWep/be5/b279bPpFRJQRcWnuPopPZ5mjJqd6ef7m9PnqVQ13EXXC4T0mzfUlIv401+OPrj8FAAAA+Lg2y9U8zdbTn9nQBdGntGhTfvubKa+IiGr2kCmtPOT9yhRWf7/H8T9TWr2ANc0UlpbcxrnS3qT+uR9X7aYnTZGa8uLLjkVmGzsAANCj0VnT7ywEAACAPv0bugCGUcTzVuZxK3CSmmZ77/NZDwAAAHiHiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zc7OxlbFNcoeIqLgQS92u62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/0nEAu8ZbDHiJ4jszszO7kB7j+6Mwm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+O4kjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+mR4ufwh6ozDvTqSAQAA4GyIi/o+hLCTbCymfaOd1f9JcU1a83//7Cgu6vnDdX/RF7V/2n77dffF8UDt0TjpTW+sDPoXj6bSfHKznG3P/e0VzezJZ+9e4uwLaXyw9sIwyZ5n9O3jx++1snCuimwBgH/jQtHnQfH7UNr36kwMgDOjWSq8i/o/btebEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAVhmvh6SKOQggLzUmc2tp7sHxc/2h9e6FoVx8+XA9fT+6Z3iIJIdxYGfQvVjqb2Xb33v1bS4NB/071wSshhLpGfyef/q2Pprg4hFqej+D/Cfbn8i97RvI5IUGNP5QAADiVkryldf1OsrGYnovmQ9j/4WD9/3opDlPW/7sfX90sj1Wu/3uVzXD2dVdvf969e+/+myu3l272b/Y/fetS7+3e5WtXrlzrZu9Kut6YAAAA8N+08lau/xvzR9f/z5fiMGX9/8V3va/KY8Xq/2NNFv3qzgQAAOBse/7VP/+IjjkftVrhy6XV1Tu90XH8+dLoWEOq/9hc3sr1fzxfd1YAAABAFYZr0YH1/+ulOEy5/v/Mjy/9XL5nHEI4l6//X1j+bHC9uunMtCr+nLjuOQIAAFCvc3krr/8n2f7/xnjLQyOE8MZrozj/N4BT1f/x+9/8VB6rvP//cnVTnEmNzuh5ZH0nhGan7owAAAA4zZ7KW1rs/55sLH7yy/kPW/b/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//RAE/8A==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/50, 0x32) 17.418922087s ago: executing program 9 (id=6202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_CMAP(r3, 0x4b70, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) close(r4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x400, 0x2002) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'vcan0\x00', 0x101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsmount(r7, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c}, 0x94) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 16.122668174s ago: executing program 6 (id=6205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) 15.931001359s ago: executing program 7 (id=6206): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x5, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r3 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 13.131989084s ago: executing program 2 (id=6213): socket$packet(0x11, 0x2, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8e7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000080000000e000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xf, 0x0, 0x0) 12.699839558s ago: executing program 7 (id=6214): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 11.985360454s ago: executing program 7 (id=6216): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) open$dir(&(0x7f0000000180)='.\x00', 0x80, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11.660595797s ago: executing program 6 (id=6217): socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4000, &(0x7f0000000280), 0x2, 0xbc1, &(0x7f00000028c0)="$eJzs3M1rXFUbAPDn3kymSZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQmmTRtJ71t+vvByT3nnrnzPM9cMvcemJkAHlgD2Z80Yl9EnEwiSs39aUQU672eiFrjcYsLc6O/L8yNJrG09MovSSQRcWNhbrT1XElzu6c56ImIb59P4n9vrY87NTM7MVKtViab44PTZ84fnJqZfWr8zMjpyunK2aHDzwwfGj48eGS4Y7X+8cOxy7899uJPtT8//uvSr+9+mMSx6GslvaqOThmIgeXXZLVCRIx0OlhOupr1rK4zKdzkoHSbkwIAoK101T3cQ1GKrli5eSvFl9/lmhwAAADQEUtdEUsAAADADpdY/wMAAMAO1/ocwI2FudFWy/cTCXfX9eMR0d+of7HZGjOFqNW3PdEdEbtvJLH6a61J47A7NhARP1478lnWYs33qe+G2nxEPLzR+U/q9ffXv8W9vv40IgY7EH9gzfh+qv9YB+LnXT8AD6YrxxsXsvXXv3T5/icietceV9jg2nU78r7+te7/Ftfd/63U39Xm/u/lLca4+NH7F9rNZfU/e/mFT1sti59t76ioW3B9PuKRwkb1J8v1J23qP7nFGKW/L1TazeVd/9IHEftj4/pbks1/n+jg2Hi1Mtj4u2GM+W+GP2kXP+/6s/O/u039rd9/anf+z28xxmsnTny+bue1le7m9ac/F5NX671ic88bI9PTk0MRxeSl9fsPbZ5L6zGt58jqP/D45v//G9WfvSfUmq9DthaYb26z8ZtrYj536eIX7fJprf/yPP+n2pz/1fV/XVh//t/eYownvnrnQLu51evfrGXxW2thAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhJI6IvkrS83E/TcjliT0T8P3an1XNT00+OnXv97KlsLqI/utOx8WplMCJKjXGSjYfq/ZXxoTXjpyNib0S8V+qtj8uj56qn8i4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZXsioi+StBwRaUQsltK0XM47KwAAAKDj+vNOAAAAANh21v8AAACw81n/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM32PnrlahIRtaO99ZYpNue6c80M2G5p3gkAuenKOwEgN4W8EwByc4trfLcLsAMlN5nvaTuzq+O5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDv2r/vytUkImpHe+stU2zOdeeaGbDd0rwTAHLTtdlkobn1JgE7UiHvBIDcWOMDyU3me1YeU/v3zK5tywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAe09fvSVpOSKKzX3lcsR/IqI/upOx8WplMCL+GxHfl7p3ZeOhnHMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg86ZmZidGqtXKZNZJo9lZ3qOz0kkar1jtXslH5w47xbj1o5YibuOo+7GT9zsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJqZnRipViuTU3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtamZ2YqRarUxuYyfvGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM8/AQAA///V5wfU") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) personality(0x8001a0ffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) madvise(&(0x7f0000160000/0x3000)=nil, 0x3000, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000004) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, r0, 0x0) 11.268546155s ago: executing program 2 (id=6218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x4008800) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.457995369s ago: executing program 7 (id=6219): close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_xen(0x0, 0x0, 0x0, 0x1006cd, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) syz_emit_ethernet(0x3b6, 0x0, 0x0) fallocate(r3, 0x60, 0x1, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup3(r4, r3, 0x0) 10.05698096s ago: executing program 3 (id=6220): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x20, 0x23, 0xaa, {0xaa, 0x31, "d3dc430b380aa640bb8a95e93a3e1e4276815287733043be620fa95c83a2d1fa58855c475a15fbd6b78ef95df2d777f13c3d810a1f69d7a07029069df41d12e9782b38ebef7817b5daebf760f627c3386a14bbc62539af8ccc0897baedee01fd088ab79f1e6381dd881e13d06566132ecf2adda523185b925b31a6b912841dbe5fa8d357b859eb2c7919275d984c289aaadb914c67d824844f694f07319f3b3c7579adc7960f4906"}}, 0x0}, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x20, 0x15, 0xa6, "1d91f5226a2119066393bd07b771d6bd2e78cb4549e9a2996082a8645aac5b7b341eda8d4369a1cb5288ec3a1f623e243293fb8f610f906ed425fdf1bcbeff196a02519be8058df9eccc9ded3108d64867d4a83093b65084371e55ae11752f8c86a80dd6e9eb7460b44e469759c5836d833fb528a84d4a7630bd2600d9e606490163bb97072f1c92e3460b6b8b84cac712a7b268bab3dd8e38fbadc9420a6f8f73319fec8944"}, &(0x7f0000000680)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700), &(0x7f0000000740)={0x40, 0x5, 0x3, "39c845"}}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 9.878542865s ago: executing program 9 (id=6221): timer_gettime(0x0, &(0x7f00000000c0)) timer_delete(0x0) r0 = open(&(0x7f0000000740)='./file1\x00', 0x145142, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0xc}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) sendfile(r0, r0, 0x0, 0x100000000) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) getitimer(0x1, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0274239ed0d85df9774992f0800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.51410265s ago: executing program 48 (id=6221): timer_gettime(0x0, &(0x7f00000000c0)) timer_delete(0x0) r0 = open(&(0x7f0000000740)='./file1\x00', 0x145142, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0xc}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) sendfile(r0, r0, 0x0, 0x100000000) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) getitimer(0x1, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0274239ed0d85df9774992f0800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.507510824s ago: executing program 7 (id=6223): socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) 7.275270248s ago: executing program 3 (id=6224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.122728057s ago: executing program 3 (id=6225): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000000180)=0x2, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r3, 0x5501) ptrace$peeksig(0x4209, r2, &(0x7f00000001c0)={0x6}, &(0x7f0000000280)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) get_robust_list(0x0, 0x0, 0x0) close(r4) r5 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14c4, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}, {@cache_fscache}, {@access_user}]}}) 6.48031454s ago: executing program 7 (id=6227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) utime(0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x5, 0xe, 0x4, 0xa20, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x2b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000024c0)={0x68, r5, 0x1, 0x70bd2e, 0x259fdbff, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4c880}, 0x8894) io_setup(0x239f, &(0x7f0000000380)=0x0) r7 = eventfd2(0x5, 0x1) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x405, r7, 0x0, 0x0, 0x6, 0x0, 0x1, r7}]) 6.418671928s ago: executing program 8 (id=6228): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.418261785s ago: executing program 6 (id=6229): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000000000000000000070000000189"], 0x20}, 0x4000) connect$inet6(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) lseek(0xffffffffffffffff, 0x5, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r6, 0x10, 0x4000, 0x4000) 6.383155058s ago: executing program 2 (id=6230): prctl$PR_SET_MM_MAP(0x23, 0xf, 0x0, 0x0) 4.992560841s ago: executing program 8 (id=6231): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 4.94561888s ago: executing program 3 (id=6232): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x5, &(0x7f0000000000)=0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180", 0x28}], 0x1}, 0x0) r1 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.875355664s ago: executing program 2 (id=6233): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012150, 0x0) 4.717151621s ago: executing program 8 (id=6234): close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_xen(0x0, 0x0, 0x0, 0x1006cd, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) syz_emit_ethernet(0x3b6, 0x0, 0x0) fallocate(r3, 0x60, 0x1, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup3(r4, r3, 0x0) 4.656512742s ago: executing program 2 (id=6235): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x4008010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 3.60676475s ago: executing program 8 (id=6236): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x507000, 0x1) prlimit64(0x0, 0x4, 0x0, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) openat(r0, &(0x7f0000000080)='./file0\x00', 0x420000, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000010000)=ANY=[], 0x50) close(0x3) 3.365843926s ago: executing program 2 (id=6237): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, 0x0, 0x800, 0x1) open(0x0, 0x0, 0x718bb647156ec3b7) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)={0x5c, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700000000000000006574683a7465616d30"], 0x34}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') unlink(0x0) 3.262444242s ago: executing program 8 (id=6238): socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) 2.149434821s ago: executing program 8 (id=6239): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsopen(0x0, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) 1.458591273s ago: executing program 6 (id=6240): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup(r0) recvfrom$packet(r1, 0x0, 0x0, 0x20, 0x0, 0x0) 1.214867934s ago: executing program 6 (id=6241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x4008800) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.193257472s ago: executing program 3 (id=6242): r0 = socket(0x28, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getsig(0x4202, r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) clock_adjtime(0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x4, @local, 0x7fffffff}, 0x1c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) epoll_create(0x632) umount2(&(0x7f0000000440)='./file0\x00', 0xb) sendto$inet6(r4, 0x0, 0x0, 0x4008091, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local, 0x11}, 0x10) 0s ago: executing program 3 (id=6243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): work [ 1101.597202][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 1101.667343][T23958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1101.756389][T24716] 9pnet_virtio: no channels available for device syz [ 1102.031798][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.039000][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.131709][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.139454][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.572998][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1102.591850][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1102.707999][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1102.716705][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1102.725332][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1103.202918][T24685] Bluetooth: hci4: command tx timeout [ 1103.591424][T24683] chnl_net:caif_netlink_parms(): no params data found [ 1104.770530][T24087] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1104.798402][T24087] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1104.877241][T24685] Bluetooth: hci7: command tx timeout [ 1104.922551][T24087] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1105.152523][T24087] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1105.417623][T24685] Bluetooth: hci4: command tx timeout [ 1106.514177][T24683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.534148][T24683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.545684][T24683] bridge_slave_0: entered allmulticast mode [ 1106.645015][T24683] bridge_slave_0: entered promiscuous mode [ 1106.674676][T24683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.703729][T24683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.737851][T24683] bridge_slave_1: entered allmulticast mode [ 1106.767155][T24683] bridge_slave_1: entered promiscuous mode [ 1106.974321][T24685] Bluetooth: hci7: command tx timeout [ 1107.143518][T24790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5838'. [ 1107.533025][T24683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.554944][T24683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.770086][T24730] chnl_net:caif_netlink_parms(): no params data found [ 1107.842727][T24683] team0: Port device team_slave_0 added [ 1107.895655][T24683] team0: Port device team_slave_1 added [ 1107.921027][T24798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5841'. [ 1107.931382][T24798] netlink: 'syz.7.5841': attribute type 30 has an invalid length. [ 1108.960629][ T6009] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.971948][ T6009] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.981951][ T6009] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.007062][T24683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.014180][T24683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.046930][T24685] Bluetooth: hci7: command tx timeout [ 1109.268199][T24683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.285358][T24817] 9pnet_virtio: no channels available for device syz [ 1109.398874][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1109.420489][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1109.430886][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1109.440060][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1109.455940][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1109.691452][T24811] tipc: Started in network mode [ 1109.726590][T24811] tipc: Node identity 76b5f8ef7dc3, cluster identity 4711 [ 1109.733920][T24811] tipc: Enabled bearer , priority 0 [ 1109.822236][T24829] loop1: detected capacity change from 0 to 8192 [ 1109.846703][ T6009] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.877583][T24683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.931489][T24683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.067686][T24683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.153304][T24807] tipc: Disabling bearer [ 1110.264303][T24833] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1110.316800][T24833] FAT-fs (loop1): Filesystem has been set read-only [ 1110.398138][T24829] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 1110.517753][T24829] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 1110.589650][T24837] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5847'. [ 1110.811819][T24730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.839768][T24730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.867821][T24730] bridge_slave_0: entered allmulticast mode [ 1110.886335][T24730] bridge_slave_0: entered promiscuous mode [ 1111.027223][T24730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.047912][T24730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.055445][T24730] bridge_slave_1: entered allmulticast mode [ 1111.095299][T24730] bridge_slave_1: entered promiscuous mode [ 1111.112753][ T1143] bridge_slave_1: left allmulticast mode [ 1111.126883][T24685] Bluetooth: hci7: command tx timeout [ 1111.314520][ T1143] bridge_slave_1: left promiscuous mode [ 1111.324573][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.356562][T22164] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1111.397149][ T1143] bridge_slave_0: left allmulticast mode [ 1111.406752][ T1143] bridge_slave_0: left promiscuous mode [ 1111.426663][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.556888][T22164] usb 2-1: Using ep0 maxpacket: 32 [ 1111.565605][T22164] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.586442][T22164] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1111.596876][T24685] Bluetooth: hci5: command tx timeout [ 1111.599577][T22164] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1111.651663][T22164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.842246][T22164] usb 2-1: config 0 descriptor?? [ 1112.106768][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5850'. [ 1112.331567][T22164] kye 0003:0458:501B.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1112.378742][T22164] kye 0003:0458:501B.0008: hidraw0: USB HID v0.03 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 1112.416540][T22164] kye 0003:0458:501B.0008: tablet-enabling feature report not found [ 1112.426144][T22164] kye 0003:0458:501B.0008: tablet enabling failed [ 1112.456896][T24851] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5852'. [ 1112.887292][T22164] usb 2-1: USB disconnect, device number 5 [ 1113.259542][T24861] loop1: detected capacity change from 0 to 2048 [ 1113.290216][T24863] 9pnet_virtio: no channels available for device syz [ 1113.362909][T24861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.388391][T24868] overlayfs: missing 'lowerdir' [ 1113.398367][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.411133][T24861] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.427987][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.451907][ T1143] bond0 (unregistering): Released all slaves [ 1113.480078][T24683] hsr_slave_0: entered promiscuous mode [ 1113.489791][T24683] hsr_slave_1: entered promiscuous mode [ 1113.497237][T24683] debugfs: 'hsr0' already exists in 'hsr' [ 1113.503027][T24683] Cannot create hsr debugfs directory [ 1113.631336][T24730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.645582][T24730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.695995][T23213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.710652][T24685] Bluetooth: hci5: command tx timeout [ 1113.751556][T24868] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1113.774003][T24869] team0: No ports can be present during mode change [ 1113.912180][ T1143] hsr_slave_0: left promiscuous mode [ 1113.922474][ T1143] hsr_slave_1: left promiscuous mode [ 1113.931521][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.957743][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.856957][T24685] Bluetooth: hci5: command tx timeout [ 1117.528977][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1117.650191][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1117.922160][T24685] Bluetooth: hci5: command tx timeout [ 1118.327688][T24904] 9pnet_virtio: no channels available for device syz [ 1118.478319][T24906] loop7: detected capacity change from 0 to 8192 [ 1118.549061][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.559708][T24906] FAT-fs (loop7): Filesystem has been set read-only [ 1118.568692][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.595367][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.604051][T24906] syz.7.5867: attempt to access beyond end of device [ 1118.604051][T24906] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 1118.623525][T24906] Buffer I/O error on dev loop7, logical block 57847, async page read [ 1118.635661][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.645825][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.654536][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.680603][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.688725][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.698258][T24906] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1118.707817][T24906] syz.7.5867: attempt to access beyond end of device [ 1118.707817][T24906] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 1118.722781][T24906] Buffer I/O error on dev loop7, logical block 57847, async page read [ 1118.741115][ T31] kauditd_printk_skb: 139 callbacks suppressed [ 1118.741135][ T31] audit: type=1800 audit(2000000121.476:1690): pid=24906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5867" name="file2" dev="loop7" ino=1048753 res=0 errno=0 [ 1118.833167][T24730] team0: Port device team_slave_0 added [ 1118.919612][T24894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1119.056973][T24730] team0: Port device team_slave_1 added [ 1119.232773][T24730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.258564][T24730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.304320][T24730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.380129][T24730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.428404][T24730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.475665][T24915] overlayfs: missing 'lowerdir' [ 1119.546248][T24730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.615175][T24922] team0: No ports can be present during mode change [ 1119.674334][T24915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1119.711389][T24926] tipc: Enabling of bearer rejected, failed to enable media [ 1120.047217][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.076119][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.064229][T24730] hsr_slave_0: entered promiscuous mode [ 1121.340076][T24730] hsr_slave_1: entered promiscuous mode [ 1121.371280][T24730] debugfs: 'hsr0' already exists in 'hsr' [ 1121.393975][T24730] Cannot create hsr debugfs directory [ 1122.752341][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 1123.570837][T24981] overlayfs: missing 'lowerdir' [ 1123.901488][T24820] chnl_net:caif_netlink_parms(): no params data found [ 1124.050804][T24981] bridge_slave_0: left allmulticast mode [ 1124.059773][T24981] bridge_slave_0: left promiscuous mode [ 1124.198585][T24981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.869109][T24981] bridge_slave_1: left allmulticast mode [ 1124.874851][T24981] bridge_slave_1: left promiscuous mode [ 1124.903522][T24981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.945668][T24981] bond0: (slave bond_slave_0): Releasing backup interface [ 1125.039230][T24981] bond0: (slave bond_slave_1): Releasing backup interface [ 1125.086965][T24981] team0: Port device team_slave_0 removed [ 1125.112882][T24981] team0: Port device team_slave_1 removed [ 1125.138783][T24981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.174265][T24981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.213204][T24981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1125.399668][T24984] team0: Mode changed to "random" [ 1125.406431][T24986] vlan0: entered promiscuous mode [ 1125.911451][T25012] netlink: 828 bytes leftover after parsing attributes in process `syz.0.5888'. [ 1126.017675][T25007] netlink: 'syz.0.5888': attribute type 29 has an invalid length. [ 1126.028977][T25009] netlink: 'syz.0.5888': attribute type 29 has an invalid length. [ 1126.029339][T25014] 9pnet_virtio: no channels available for device syz [ 1126.592128][T24820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.614978][T24820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.686606][T24820] bridge_slave_0: entered allmulticast mode [ 1126.694775][T24820] bridge_slave_0: entered promiscuous mode [ 1126.705320][T24820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.712719][T24820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.769000][T24820] bridge_slave_1: entered allmulticast mode [ 1126.777383][T24820] bridge_slave_1: entered promiscuous mode [ 1127.288356][T24820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.350952][T24820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.481217][T24820] team0: Port device team_slave_0 added [ 1127.531974][T24820] team0: Port device team_slave_1 added [ 1127.820805][T21800] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.907054][T24820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.928578][T24820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.979242][T25042] overlayfs: missing 'lowerdir' [ 1127.995957][T24820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.052073][T21800] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.107502][T25042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1128.128412][T24820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.139686][T24820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.173582][T24820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.310226][T25044] team0: Unable to change to the same mode the team is in [ 1128.319616][T24683] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1128.427579][T24683] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1128.458518][T21800] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.549986][T24683] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1128.574675][T24683] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1128.680705][T24820] hsr_slave_0: entered promiscuous mode [ 1128.706998][T24820] hsr_slave_1: entered promiscuous mode [ 1128.727065][T24820] debugfs: 'hsr0' already exists in 'hsr' [ 1128.732881][T24820] Cannot create hsr debugfs directory [ 1128.767982][T21800] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.925568][T22164] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1128.979888][T25058] loop1: detected capacity change from 0 to 512 [ 1129.000992][T25058] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1129.039663][T25058] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 0 [ 1129.744511][T25061] loop1: detected capacity change from 0 to 1024 [ 1130.644980][T22164] usb 1-1: Using ep0 maxpacket: 16 [ 1130.648304][T25061] EXT4-fs: Mount option(s) incompatible with ext2 [ 1130.693248][T22164] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1130.728477][T22164] usb 1-1: config 1 has no interface number 0 [ 1130.760275][T22164] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1130.909019][T22164] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1130.986525][T22164] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1131.009858][T22164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.029722][T22164] usb 1-1: Product: syz [ 1131.033940][T22164] usb 1-1: Manufacturer: syz [ 1131.043426][T22164] usb 1-1: SerialNumber: syz [ 1131.092492][T25050] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1131.359287][T22164] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 1131.483471][T21800] bridge_slave_1: left allmulticast mode [ 1131.505471][T21800] bridge_slave_1: left promiscuous mode [ 1131.511311][T21800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.556672][T21800] bridge_slave_0: left allmulticast mode [ 1131.562663][T21800] bridge_slave_0: left promiscuous mode [ 1131.586605][T22180] usb 1-1: USB disconnect, device number 5 [ 1131.616306][T21800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.047311][T21800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.070490][T21800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.088449][T21800] bond0 (unregistering): Released all slaves [ 1132.375513][T21800] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1132.385069][T21800] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1132.397212][T21800] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3e:8b:ef:13:bb:92 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1132.748618][ T31] audit: type=1326 audit(2000000135.507:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1132.801427][ T31] audit: type=1326 audit(2000000135.507:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1132.804994][T22161] libceph: connect (1)[c::]:6789 error -101 [ 1132.825818][ T31] audit: type=1326 audit(2000000135.507:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1132.854384][ T31] audit: type=1326 audit(2000000135.507:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1132.880899][T22161] libceph: mon0 (1)[c::]:6789 connect error [ 1132.914761][ T31] audit: type=1326 audit(2000000135.507:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1132.937695][ T31] audit: type=1326 audit(2000000135.507:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1132.962508][ T31] audit: type=1326 audit(2000000135.507:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1133.020360][ T31] audit: type=1326 audit(2000000135.507:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1133.044233][ T31] audit: type=1326 audit(2000000135.507:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1133.097504][ T31] audit: type=1326 audit(2000000135.507:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.0.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd586b9aeb9 code=0x7ffc0000 [ 1133.149004][T22161] libceph: connect (1)[c::]:6789 error -101 [ 1133.158424][T22161] libceph: mon0 (1)[c::]:6789 connect error [ 1133.268469][T21800] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1133.364199][T25076] ceph: No mds server is up or the cluster is laggy [ 1133.654226][T21800] bond0 (unregistering): Released all slaves [ 1133.972675][T21800] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1133.983323][T21800] bond1 (unregistering): Released all slaves [ 1134.003969][T21800] bond2 (unregistering): Released all slaves [ 1134.025005][T21800] bond3 (unregistering): Released all slaves [ 1134.321004][T24730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1134.408244][T24730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1134.433764][T21800] tipc: Disabling bearer [ 1134.477060][T21800] tipc: Left network mode [ 1134.800310][T24730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1134.992010][T25093] overlayfs: missing 'lowerdir' [ 1135.058018][T24730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1135.121765][T25093] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1135.181334][T25096] team0: No ports can be present during mode change [ 1135.479633][T24683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.490700][T25109] loop7: detected capacity change from 0 to 512 [ 1135.585055][T25109] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1135.604208][T25109] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 0 [ 1137.435980][T24683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.584645][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.591879][ T6119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.964334][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.971759][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.034371][T25116] 9pnet_virtio: no channels available for device syz [ 1138.092507][T21800] hsr_slave_0: left promiscuous mode [ 1138.128579][T21800] hsr_slave_1: left promiscuous mode [ 1138.152721][T21800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.198163][T21800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.212351][T21800] hsr_slave_0: left promiscuous mode [ 1138.235986][T21800] hsr_slave_1: left promiscuous mode [ 1139.041846][T21800] team0 (unregistering): Port device team_slave_1 removed [ 1139.142907][T21800] team0 (unregistering): Port device team_slave_0 removed [ 1142.310897][T25118] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5911'. [ 1142.390738][ T31] kauditd_printk_skb: 208 callbacks suppressed [ 1142.390762][ T31] audit: type=1326 audit(2000000145.158:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.429284][ T31] audit: type=1326 audit(2000000145.158:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.459902][ T31] audit: type=1326 audit(2000000145.158:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.518759][ T31] audit: type=1326 audit(2000000145.158:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.541386][T22162] libceph: connect (1)[c::]:6789 error -101 [ 1142.541582][T22162] libceph: mon0 (1)[c::]:6789 connect error [ 1142.599969][ T31] audit: type=1326 audit(2000000145.158:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.623465][ T31] audit: type=1326 audit(2000000145.158:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.764058][ T31] audit: type=1326 audit(2000000145.158:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.774095][T24820] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1142.790401][ T31] audit: type=1326 audit(2000000145.158:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1142.798063][T22162] libceph: connect (1)[c::]:6789 error -101 [ 1142.842239][T22162] libceph: mon0 (1)[c::]:6789 connect error [ 1142.848780][ T31] audit: type=1326 audit(2000000145.158:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1143.085142][T24820] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1143.098963][ T31] audit: type=1326 audit(2000000145.158:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25129 comm="syz.1.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1a99aeb9 code=0x7ffc0000 [ 1143.156153][T24820] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1143.169171][T24820] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1143.189654][T25130] ceph: No mds server is up or the cluster is laggy [ 1143.418025][T24730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.853778][T24730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.562960][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.570716][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.787192][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.794612][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.054167][T24820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.191014][T24820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.320363][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.327602][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.366504][T22162] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1146.391078][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.398489][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.427096][T24683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.560420][T22162] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1146.585864][T22162] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1146.639457][T22162] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1146.658622][T22162] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1146.677009][T22162] usb 8-1: SerialNumber: syz [ 1146.948585][T24730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.953057][T22164] usb 8-1: USB disconnect, device number 4 [ 1147.352417][T24730] veth0_vlan: entered promiscuous mode [ 1147.376691][T25193] loop1: detected capacity change from 0 to 512 [ 1147.397358][T24820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.406833][T25193] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1147.445320][T25193] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1147.462795][T25193] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1147.488136][T24730] veth1_vlan: entered promiscuous mode [ 1147.503432][T25193] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.5927: attempt to clear invalid blocks 2 len 1 [ 1147.580842][T25193] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5927: invalid indirect mapped block 1819239214 (level 0) [ 1147.653426][T25193] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5927: invalid indirect mapped block 1819239214 (level 1) [ 1147.672766][T24730] veth0_macvtap: entered promiscuous mode [ 1147.741404][T24730] veth1_macvtap: entered promiscuous mode [ 1147.757842][T25193] EXT4-fs (loop1): 1 truncate cleaned up [ 1147.804251][T25193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1147.838667][T24683] veth0_vlan: entered promiscuous mode [ 1147.899541][T24683] veth1_vlan: entered promiscuous mode [ 1147.946879][T25193] EXT4-fs error (device loop1): ext4_lookup:1782: inode #2: comm syz.1.5927: 'file1' linked to parent dir [ 1147.981197][T24730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.047414][T24730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.095915][T25206] 9pnet_virtio: no channels available for device syz [ 1148.150621][ T6009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.172897][T23213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.175896][ T6009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.225276][ T6009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.234079][ T6009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.550242][T25210] loop1: detected capacity change from 0 to 128 [ 1148.631608][T25210] ipip0: entered promiscuous mode [ 1148.637305][T25210] ipip0: entered allmulticast mode [ 1148.810911][T24683] veth0_macvtap: entered promiscuous mode [ 1148.861926][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.910961][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.293584][T25215] loop7: detected capacity change from 0 to 1024 [ 1149.311774][T25215] EXT4-fs: Ignoring removed orlov option [ 1149.848558][T25215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.862265][T25215] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.025476][T24683] veth1_macvtap: entered promiscuous mode [ 1150.060956][T24820] veth0_vlan: entered promiscuous mode [ 1150.800961][T25220] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1151.246104][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.274445][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.529360][T24683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.558681][T23431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1151.648208][T24820] veth1_vlan: entered promiscuous mode [ 1151.721423][T24683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.884011][T25223] loop7: detected capacity change from 0 to 512 [ 1151.918128][T25223] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1151.968030][T24820] veth0_macvtap: entered promiscuous mode [ 1151.987943][T25223] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 0 [ 1152.006521][T24147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.027843][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.063689][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.112088][T24820] veth1_macvtap: entered promiscuous mode [ 1152.144881][ T6009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.941640][T24820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.086500][T24820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.846166][T25234] loop7: detected capacity change from 0 to 1024 [ 1154.748966][T25234] EXT4-fs: Mount option(s) incompatible with ext2 [ 1155.025916][T25238] loop2: detected capacity change from 0 to 512 [ 1155.055707][ T1153] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.076405][T25238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1155.108038][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.169402][T25238] EXT4-fs (loop2): 1 truncate cleaned up [ 1155.180925][T25238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.196491][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.264031][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.395928][T24730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.637192][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.656790][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.767821][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.770764][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.800650][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.814172][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.915652][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.950456][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.375455][T25250] loop6: detected capacity change from 0 to 32768 [ 1156.388599][T25250] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5820 (25250) [ 1156.436575][T25250] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1156.447011][T25250] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm [ 1156.735678][T25250] BTRFS info (device loop6): enabling ssd optimizations [ 1156.743170][T25250] BTRFS info (device loop6): turning on async discard [ 1156.750193][T25250] BTRFS info (device loop6): enabling free space tree [ 1157.933314][T24683] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1158.104626][T25288] netlink: 'syz.2.5939': attribute type 7 has an invalid length. [ 1158.112511][T25288] netlink: 'syz.2.5939': attribute type 8 has an invalid length. [ 1161.878774][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1161.891945][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1161.902195][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1161.948340][T22213] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1161.958590][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1161.968174][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1162.139146][T25325] loop1: detected capacity change from 0 to 128 [ 1162.257605][T25325] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1162.273596][T22213] usb 8-1: Using ep0 maxpacket: 16 [ 1162.279698][T25325] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.394561][T22213] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1162.433721][T22213] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.483623][T22213] usb 8-1: Product: syz [ 1162.507276][T22213] usb 8-1: Manufacturer: syz [ 1162.529111][T22213] usb 8-1: SerialNumber: syz [ 1162.592549][T22213] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1162.615389][T22213] r8152-cfgselector 8-1: config 0 descriptor?? [ 1162.768659][T23213] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1162.845495][T22213] r8152-cfgselector 8-1: Needed 1 retries to read version [ 1163.093697][T12642] r8152-cfgselector 8-1: USB disconnect, device number 5 [ 1163.600421][T25348] loop6: detected capacity change from 0 to 512 [ 1163.787008][T25348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.913673][T25348] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.993600][ T5139] Bluetooth: hci1: command tx timeout [ 1164.171222][T24683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.280972][T25316] chnl_net:caif_netlink_parms(): no params data found [ 1166.093971][ T5139] Bluetooth: hci1: command tx timeout [ 1166.365232][T25383] loop6: detected capacity change from 0 to 32768 [ 1166.373662][T25383] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5960 (25383) [ 1166.411988][T25383] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1166.422818][T25383] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm [ 1166.538431][T25383] BTRFS info (device loop6): enabling ssd optimizations [ 1166.545546][T25383] BTRFS info (device loop6): turning on async discard [ 1166.552364][T25383] BTRFS info (device loop6): enabling free space tree [ 1166.630212][T24683] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1166.720801][T25316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.759265][T25316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.818168][T25316] bridge_slave_0: entered allmulticast mode [ 1166.855130][T25316] bridge_slave_0: entered promiscuous mode [ 1167.309863][T25316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.320457][T25424] loop2: detected capacity change from 0 to 512 [ 1167.333787][T25316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.399607][T25316] bridge_slave_1: entered allmulticast mode [ 1167.411087][T25426] netlink: 'syz.7.5966': attribute type 1 has an invalid length. [ 1167.416922][T25424] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1167.435462][T25316] bridge_slave_1: entered promiscuous mode [ 1167.504463][T25428] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5966'. [ 1168.164282][ T5139] Bluetooth: hci1: command tx timeout [ 1169.062584][T25316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.165436][T25316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.910271][T25441] syzkaller0: entered promiscuous mode [ 1169.977631][T25472] loop2: detected capacity change from 0 to 128 [ 1169.983126][T25441] syzkaller0: entered allmulticast mode [ 1170.043549][T25316] team0: Port device team_slave_0 added [ 1170.236648][ T5139] Bluetooth: hci1: command tx timeout [ 1170.587460][T25316] team0: Port device team_slave_1 added [ 1171.475252][T25483] loop7: detected capacity change from 0 to 40427 [ 1171.488484][T25483] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1171.527308][T25483] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1171.587551][T25483] F2FS-fs (loop7): invalid crc value [ 1171.816585][T25483] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1171.882752][T25483] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1171.950587][T25483] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1172.189129][ T31] kauditd_printk_skb: 64 callbacks suppressed [ 1172.189158][ T31] audit: type=1800 audit(2000000174.959:1983): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5978" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1172.466301][ T31] audit: type=1800 audit(2000000175.239:1984): pid=25483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5978" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1173.985361][T25530] input: syz0 as /devices/virtual/input/input14 [ 1175.027445][T25534] netlink: 'syz.7.5983': attribute type 1 has an invalid length. [ 1175.124876][T25535] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5983'. [ 1180.093499][T25534] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1180.309228][T25545] loop9: detected capacity change from 0 to 16 [ 1180.348688][T25545] erofs (device loop9): mounted with root inode @ nid 36. [ 1180.360426][T25547] loop2: detected capacity change from 0 to 256 [ 1180.367031][T25316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.389816][T25547] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1180.404329][T25316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.433956][T25545] syz.9.5985: attempt to access beyond end of device [ 1180.433956][T25545] loop9: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1180.491462][T25316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.502405][T25545] syz.9.5985: attempt to access beyond end of device [ 1180.502405][T25545] loop9: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1180.570246][ T31] audit: type=1800 audit(2000000183.340:1985): pid=25547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5986" name="file1" dev="loop2" ino=1048770 res=0 errno=0 [ 1180.750785][T25316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.758258][ T31] audit: type=1800 audit(2000000183.530:1986): pid=25545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5985" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 1180.791955][T25316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.937249][T25316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.446120][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.452593][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.541661][T24685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1182.558934][T24685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1182.584850][T24685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1182.605871][T24685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1182.622710][T24685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1184.135316][ T13] bond0 (unregistering): Released all slaves [ 1184.718666][T24685] Bluetooth: hci0: command tx timeout [ 1184.784312][T25568] lo speed is unknown, defaulting to 1000 [ 1184.790153][T25568] lo speed is unknown, defaulting to 1000 [ 1184.797778][T25568] lo speed is unknown, defaulting to 1000 [ 1184.820215][T25568] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1184.860482][T25316] hsr_slave_0: entered promiscuous mode [ 1184.867622][T25316] hsr_slave_1: entered promiscuous mode [ 1184.898081][T25316] debugfs: 'hsr0' already exists in 'hsr' [ 1184.908071][T25316] Cannot create hsr debugfs directory [ 1185.028407][ T13] tipc: Left network mode [ 1185.028467][T25568] lo speed is unknown, defaulting to 1000 [ 1185.040703][T25568] lo speed is unknown, defaulting to 1000 [ 1185.048465][T25568] lo speed is unknown, defaulting to 1000 [ 1185.056172][T25568] lo speed is unknown, defaulting to 1000 [ 1185.063897][T25568] lo speed is unknown, defaulting to 1000 [ 1185.071613][T25568] lo speed is unknown, defaulting to 1000 [ 1185.079457][T25568] lo speed is unknown, defaulting to 1000 [ 1185.087423][T25568] lo speed is unknown, defaulting to 1000 [ 1185.789298][T25610] input: syz0 as /devices/virtual/input/input15 [ 1185.899277][T25606] loop9: detected capacity change from 0 to 1024 [ 1186.021046][T25572] lo speed is unknown, defaulting to 1000 [ 1186.952507][T25618] loop9: detected capacity change from 0 to 4096 [ 1186.989408][T24685] Bluetooth: hci0: command tx timeout [ 1187.033014][T25618] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1187.049401][T25618] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1187.057641][T25618] System zones: 0-5 [ 1187.077659][T25618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.424486][T24820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.612917][T25627] netlink: 'syz.9.5998': attribute type 1 has an invalid length. [ 1188.493576][T25633] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5998'. [ 1188.807713][T25627] geneve2: entered promiscuous mode [ 1188.842085][T25627] geneve2: entered allmulticast mode [ 1188.978034][ T13] hsr_slave_0: left promiscuous mode [ 1189.032200][T24685] Bluetooth: hci0: command tx timeout [ 1189.203146][ T13] hsr_slave_1: left promiscuous mode [ 1190.730770][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6002'. [ 1190.739791][T25649] netlink: 'syz.6.6002': attribute type 30 has an invalid length. [ 1191.112677][T24685] Bluetooth: hci0: command tx timeout [ 1191.293270][T25653] loop7: detected capacity change from 0 to 512 [ 1191.307180][T25653] EXT4-fs: Ignoring removed i_version option [ 1191.313751][T25653] EXT4-fs: Ignoring removed oldalloc option [ 1191.363402][T25653] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1191.402855][T25653] EXT4-fs (loop7): 1 truncate cleaned up [ 1191.410730][T25653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1193.608295][T25663] siw: device registration error -23 [ 1196.569420][T25659] bridge0: port 1(gretap0) entered blocking state [ 1196.579050][T25659] bridge0: port 1(gretap0) entered disabled state [ 1196.585799][T25659] gretap0: entered allmulticast mode [ 1196.595171][T25659] bridge0: port 1(gretap0) entered blocking state [ 1196.601960][T25659] bridge0: port 1(gretap0) entered forwarding state [ 1196.841866][T23431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.908694][T25674] loop6: detected capacity change from 0 to 128 [ 1197.076942][T25674] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1197.341986][T25674] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.973825][T25683] syz.6.6009 (pid 25683) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1198.249894][T25685] input: syz0 as /devices/virtual/input/input16 [ 1198.374726][T25686] netlink: 'syz.2.6011': attribute type 1 has an invalid length. [ 1198.445038][T24147] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.556245][T24147] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.569216][T25688] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6011'. [ 1198.613281][T24683] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1198.701048][T24147] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.807270][T25686] geneve2: entered promiscuous mode [ 1198.865329][T25694] loop6: detected capacity change from 0 to 512 [ 1198.871595][T25686] geneve2: entered allmulticast mode [ 1198.880302][T25693] loop9: detected capacity change from 0 to 128 [ 1198.936088][T25694] EXT4-fs: Invalid commit interval -2147483648, must be smaller than 21474836 [ 1198.977334][T25693] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1199.067999][T25693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1200.249910][T24147] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1200.698623][T25721] siw: device registration error -23 [ 1201.611396][T25709] lo speed is unknown, defaulting to 1000 [ 1201.736669][T25572] chnl_net:caif_netlink_parms(): no params data found [ 1203.768668][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.836180][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6020'. [ 1203.846119][T25743] netlink: 'syz.6.6020': attribute type 30 has an invalid length. [ 1203.855345][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.905014][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1204.214134][T25747] loop2: detected capacity change from 0 to 512 [ 1204.267643][T25747] EXT4-fs (loop2): 1 truncate cleaned up [ 1204.293476][T25747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.551433][T25753] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1204.597020][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1204.607887][T12642] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1204.633426][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.648451][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1204.665264][T25762] loop7: detected capacity change from 0 to 128 [ 1204.687772][T25572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.718199][T25572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.740081][T25762] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1204.751565][T25572] bridge_slave_0: entered allmulticast mode [ 1204.776121][T25762] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.791632][T12642] usb 3-1: Using ep0 maxpacket: 16 [ 1204.803475][T25572] bridge_slave_0: entered promiscuous mode [ 1204.846619][T12642] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1204.870064][T12642] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 1204.911333][T12642] usb 3-1: config 13 has no interface number 0 [ 1204.917677][T12642] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1204.959428][T12642] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1205.001473][T12642] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1205.079155][T12642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.114813][T23431] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1205.154963][T12642] usb 3-1: Product: syz [ 1205.182244][T12642] usb 3-1: Manufacturer: syz [ 1205.200235][T12642] usb 3-1: SerialNumber: syz [ 1205.293403][T25747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1205.399916][T25772] input: syz0 as /devices/virtual/input/input17 [ 1205.602744][T12642] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1205.613292][T25775] loop7: detected capacity change from 0 to 128 [ 1205.621900][T12642] usb 3-1: MIDIStreaming interface descriptor not found [ 1205.674293][T25775] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1205.994125][T25775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1206.004088][T12642] usb 3-1: USB disconnect, device number 10 [ 1206.878895][T25782] udevd[25782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.021771][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.055339][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.095453][T24730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.124847][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1207.274826][T25572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.315636][T25572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.351499][T25572] bridge_slave_1: entered allmulticast mode [ 1207.371477][T25572] bridge_slave_1: entered promiscuous mode [ 1208.531624][ T5806] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1208.667979][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.668049][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.668085][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1208.734507][ T5806] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.734571][ T5806] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.737777][ T5806] usb 7-1: New USB device found, idVendor=2596, idProduct=006d, bcdDevice= 0.00 [ 1208.737819][ T5806] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1208.737851][ T5806] usb 7-1: Manufacturer: syz [ 1208.741400][ T5806] usb 7-1: config 0 descriptor?? [ 1208.870617][T25572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.727350][T25316] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1209.777404][T25316] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1209.783386][T25316] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1209.798492][T25316] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1209.845550][ T5806] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1209.926915][T25572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.075460][T25572] team0: Port device team_slave_0 added [ 1210.104521][T25572] team0: Port device team_slave_1 added [ 1210.439054][T25572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.498339][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.862894][ T5806] usb 7-1: USB disconnect, device number 2 [ 1210.910524][T25572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.780037][T25572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.824073][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.031585][T25572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.374992][T25572] hsr_slave_0: entered promiscuous mode [ 1212.400906][T22162] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1212.426147][T25572] hsr_slave_1: entered promiscuous mode [ 1212.645090][T22162] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1212.721341][T22162] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1212.791751][T22162] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1212.838987][T22162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.886582][T22162] usb 7-1: Product: syz [ 1212.934108][T22162] usb 7-1: Manufacturer: syz [ 1212.969822][T22162] usb 7-1: SerialNumber: syz [ 1212.994473][T25316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.061889][T22162] usb 7-1: config 0 descriptor?? [ 1213.071063][T25833] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1213.100945][T25833] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1213.376062][T25833] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1213.383499][T25833] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1213.410751][T22181] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1213.425041][ T5806] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1214.264160][ T5806] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.276144][T22181] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.300197][T22162] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1214.320930][T22181] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.341667][ T5806] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1214.368680][T22181] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1214.390300][ T5806] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1214.402045][ T5806] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1214.417158][T22181] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1214.422712][T25861] input: syz1 as /devices/virtual/input/input18 [ 1214.456580][T22181] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.465926][ T5806] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.483416][T22181] usb 10-1: config 0 descriptor?? [ 1214.495787][ T5806] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.512635][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.516265][T22162] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1214.535881][ T5806] usb 8-1: Product: syz [ 1214.540127][ T5806] usb 8-1: Manufacturer: syz [ 1214.580846][T22162] usb 7-1: USB disconnect, device number 3 [ 1214.604020][ T5806] usb 8-1: SerialNumber: syz [ 1214.740248][T25846] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1214.780075][ T5806] cdc_mbim 8-1:1.0: skipping garbage [ 1215.009238][T25846] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1215.087721][T22181] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1215.153584][T25870] input: syz0 as /devices/virtual/input/input19 [ 1215.344816][T22181] usb 10-1: USB disconnect, device number 3 [ 1215.935062][T25846] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1216.110734][T25878] loop6: detected capacity change from 0 to 1024 [ 1216.126357][T25878] EXT4-fs: Ignoring removed orlov option [ 1216.960821][T25878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1216.974595][T25878] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.503395][T25872] fido_id[25872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1218.710494][T25881] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1218.880983][T25885] loop9: detected capacity change from 0 to 256 [ 1218.888399][T25885] exfat: Deprecated parameter 'namecase' [ 1218.930512][ T5806] cdc_mbim 8-1:1.0: bind() failure [ 1218.949633][T25885] exfat: Deprecated parameter 'namecase' [ 1218.955818][ T5806] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1218.960465][ T5806] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1218.992008][ T5806] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 1219.022185][T25889] loop7: detected capacity change from 0 to 512 [ 1219.089542][ T5806] usb 8-1: USB disconnect, device number 6 [ 1219.102191][T25889] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1219.126926][T25885] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf794f3fa, utbl_chksum : 0xe619d30d) [ 1219.133735][T25889] EXT4-fs (loop7): blocks per group (255) and clusters per group (8192) inconsistent [ 1219.511077][ T13] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1219.687724][T24685] Bluetooth: hci4: command 0x0406 tx timeout [ 1220.617433][T25913] siw: device registration error -23 [ 1221.424284][T25917] loop9: detected capacity change from 0 to 512 [ 1221.547176][T25917] EXT4-fs (loop9): 1 truncate cleaned up [ 1221.555509][T25917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1221.591597][ T31] audit: type=1800 audit(2000000224.352:1987): pid=25917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6055" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1221.757406][ T13] bond0 (unregistering): Released all slaves [ 1222.298698][T24820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.308531][ T13] bond1 (unregistering): Released all slaves [ 1222.410847][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1222.424072][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1222.438732][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1222.449230][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1222.457856][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.580330][T25923] lo speed is unknown, defaulting to 1000 [ 1222.754831][T24683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1223.432649][T22164] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1223.542471][T25938] input: syz0 as /devices/virtual/input/input20 [ 1223.753649][T22164] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.839698][T22164] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.860549][T22164] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1223.874082][T22164] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1223.883478][T22164] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.967908][T22164] usb 7-1: config 0 descriptor?? [ 1224.429769][T22164] usbhid 7-1:0.0: can't add hid device: -71 [ 1224.437017][T22164] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1224.467855][T22164] usb 7-1: USB disconnect, device number 4 [ 1224.551300][T24685] Bluetooth: hci2: command tx timeout [ 1224.612923][T25926] lo speed is unknown, defaulting to 1000 [ 1225.867636][T25964] netlink: 'syz.9.6064': attribute type 1 has an invalid length. [ 1225.979727][T25966] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6064'. [ 1226.052466][ T13] hsr_slave_0: left promiscuous mode [ 1226.070389][ T13] hsr_slave_1: left promiscuous mode [ 1226.155168][T25972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6065'. [ 1226.507273][ T13] veth1_macvtap: left promiscuous mode [ 1226.534642][ T13] veth0_macvtap: left promiscuous mode [ 1226.576330][ T13] veth1_vlan: left promiscuous mode [ 1226.632120][T24685] Bluetooth: hci2: command tx timeout [ 1227.512854][T25988] loop7: detected capacity change from 0 to 1024 [ 1227.530889][T25988] EXT4-fs: Ignoring removed orlov option [ 1228.860011][ T5139] Bluetooth: hci2: command tx timeout [ 1228.983426][T25988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.996417][T25988] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.016704][T25988] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.6068: lblock 3 mapped to illegal pblock 3 (length 3) [ 1230.032479][ T5139] Bluetooth: hci7: command 0x0406 tx timeout [ 1230.141567][T25988] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1230.154849][T25988] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1230.154849][T25988] [ 1230.624003][ T13] team0 (unregistering): Port device vlan0 removed [ 1231.832387][T24685] Bluetooth: hci2: command tx timeout [ 1232.298135][T25964] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1232.407739][T25968] geneve2: entered promiscuous mode [ 1232.422140][T25968] geneve2: entered allmulticast mode [ 1232.447623][T25985] lo speed is unknown, defaulting to 1000 [ 1232.559781][T25991] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1232.626302][T25292] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 1232.693585][T26016] loop9: detected capacity change from 0 to 1024 [ 1232.735559][T25292] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1232.742790][T26016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1232.837578][T25292] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1232.837578][T25292] [ 1232.923809][T23431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1233.122382][T21381] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 1233.377451][T26026] bridge0: port 1(gretap0) entered disabled state [ 1233.404631][T26026] netlink: 136 bytes leftover after parsing attributes in process `syz.7.6070'. [ 1233.420486][T26026] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1233.437377][T21381] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1233.467393][T21381] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1233.501877][T21381] usb 10-1: string descriptor 0 read error: -22 [ 1233.526612][T21381] usb 10-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 1233.568625][T21381] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.619281][T26016] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1233.951125][T21381] usbhid 10-1:1.0: can't add hid device: -71 [ 1233.991437][T21381] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1234.180326][T21381] usb 10-1: USB disconnect, device number 4 [ 1234.412666][T25926] chnl_net:caif_netlink_parms(): no params data found [ 1234.608621][T24820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.723467][T24685] Bluetooth: hci5: command 0x0406 tx timeout [ 1235.418648][T26059] loop7: detected capacity change from 0 to 1024 [ 1235.496841][T26059] EXT4-fs: Ignoring removed bh option [ 1235.563144][T26066] loop2: detected capacity change from 0 to 256 [ 1235.617721][T26059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.673022][T26066] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1235.757962][T25572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1236.024993][T23431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.053195][T26079] loop6: detected capacity change from 0 to 1024 [ 1236.180745][T26082] loop9: detected capacity change from 0 to 16 [ 1236.623684][T26082] erofs (device loop9): mounted with root inode @ nid 36. [ 1236.672941][T26079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.751708][T26079] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.773631][T25926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.814152][T25926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.863783][T26089] netlink: 'syz.7.6081': attribute type 1 has an invalid length. [ 1236.905027][T25926] bridge_slave_0: entered allmulticast mode [ 1236.954986][T25926] bridge_slave_0: entered promiscuous mode [ 1237.005990][T26079] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.6082: lblock 0 mapped to illegal pblock 0 (length 1) [ 1237.010867][T25572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1237.049406][T26079] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1237.066537][T26091] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6081'. [ 1237.108319][T25572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1237.123547][T26079] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1237.123547][T26079] [ 1237.217424][T25926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.225397][T25926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.475264][T25926] bridge_slave_1: entered allmulticast mode [ 1237.484034][T25926] bridge_slave_1: entered promiscuous mode [ 1238.055647][ T6119] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:11: lblock 4 mapped to illegal pblock 4 (length 2) [ 1238.093986][T26091] bond3: (slave bridge1): making interface the new active one [ 1238.107112][T26091] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1238.139308][ T6119] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 1238.208233][ T6119] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1238.208233][ T6119] [ 1238.238481][ T6119] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 1238.273766][ T6119] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1238.294761][ T6119] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1238.294761][ T6119] [ 1238.350010][T24683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1239.286561][T25572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1240.993590][T25926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.163115][T25926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.649872][T26136] netlink: 'syz.9.6090': attribute type 1 has an invalid length. [ 1241.688194][T25926] team0: Port device team_slave_0 added [ 1242.024005][T25926] team0: Port device team_slave_1 added [ 1242.178007][T24685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1242.196715][T24685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1242.209929][T24685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1242.221900][T24685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1242.233666][T24685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1242.875717][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.882250][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.006393][T25926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.065651][T25926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.065690][T25926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.074028][T25926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.074047][T25926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.074074][T25926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.197562][T26163] netlink: 'syz.9.6096': attribute type 1 has an invalid length. [ 1243.318825][T25926] hsr_slave_0: entered promiscuous mode [ 1243.326993][T25926] hsr_slave_1: entered promiscuous mode [ 1243.367817][T26166] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6096'. [ 1243.425710][T25926] debugfs: 'hsr0' already exists in 'hsr' [ 1243.473234][T25926] Cannot create hsr debugfs directory [ 1243.505192][ T13] bridge_slave_1: left allmulticast mode [ 1243.511400][ T13] bridge_slave_1: left promiscuous mode [ 1243.556074][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.602571][ T13] bridge_slave_0: left allmulticast mode [ 1243.619907][ T13] bridge_slave_0: left promiscuous mode [ 1243.639750][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.309110][T24685] Bluetooth: hci1: command tx timeout [ 1244.637562][T26179] loop2: detected capacity change from 0 to 512 [ 1244.647666][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.681334][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.699133][T26179] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1244.738970][ T13] bond0 (unregistering): Released all slaves [ 1245.142696][T26163] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1245.165414][T26175] syzkaller0: entered promiscuous mode [ 1245.230410][T26175] syzkaller0: entered allmulticast mode [ 1245.352314][T26197] loop6: detected capacity change from 0 to 512 [ 1245.402729][T26150] lo speed is unknown, defaulting to 1000 [ 1245.426094][T26197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1245.512262][T26197] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1245.653296][ T13] hsr_slave_0: left promiscuous mode [ 1245.658930][ T31] audit: type=1800 audit(2000000248.423:1988): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6101" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1245.726808][ T13] hsr_slave_1: left promiscuous mode [ 1245.765923][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.780284][T24683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.784471][T26210] netlink: 'syz.7.6103': attribute type 1 has an invalid length. [ 1245.835017][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.406165][T24685] Bluetooth: hci1: command tx timeout [ 1247.431378][T26218] loop2: detected capacity change from 0 to 40427 [ 1247.468313][T26218] F2FS-fs (loop2): invalid crc value [ 1247.608511][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1247.830883][T26218] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1247.858906][T26218] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1247.868062][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1247.969470][T24730] syz-executor: attempt to access beyond end of device [ 1247.969470][T24730] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1248.005525][T24730] CPU: 0 UID: 0 PID: 24730 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1248.005561][T24730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1248.005577][T24730] Call Trace: [ 1248.005587][T24730] [ 1248.005598][T24730] dump_stack_lvl+0xe8/0x150 [ 1248.005638][T24730] f2fs_handle_critical_error+0x37c/0x540 [ 1248.005680][T24730] f2fs_write_end_io+0xc1d/0xfd0 [ 1248.005736][T24730] __submit_merged_bio+0x256/0x650 [ 1248.005774][T24730] __submit_merged_write_cond+0x269/0x530 [ 1248.005813][T24730] f2fs_write_data_pages+0x2806/0x3360 [ 1248.005892][T24730] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1248.005944][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.005975][T24730] ? css_rstat_updated+0x23a/0x530 [ 1248.006042][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006071][T24730] ? rcu_is_watching+0x15/0xb0 [ 1248.006102][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006130][T24730] ? __lock_acquire+0x6b5/0x2cf0 [ 1248.006186][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006213][T24730] ? __lock_acquire+0x6b5/0x2cf0 [ 1248.006259][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006287][T24730] ? do_raw_spin_lock+0x12b/0x2f0 [ 1248.006324][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006358][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006387][T24730] ? do_raw_spin_unlock+0xf5/0x210 [ 1248.006417][T24730] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1248.006451][T24730] do_writepages+0x32e/0x550 [ 1248.006489][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006520][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006553][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006579][T24730] ? do_raw_spin_unlock+0xf5/0x210 [ 1248.006614][T24730] filemap_fdatawrite+0x1e9/0x2f0 [ 1248.006653][T24730] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1248.006740][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006773][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.006808][T24730] ? do_raw_spin_unlock+0xf5/0x210 [ 1248.006845][T24730] f2fs_sync_dirty_inodes+0x30e/0x810 [ 1248.006902][T24730] f2fs_write_checkpoint+0x9c6/0x2490 [ 1248.006980][T24730] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1248.007013][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.007120][T24730] kill_f2fs_super+0x308/0x710 [ 1248.007164][T24730] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1248.007236][T24730] deactivate_locked_super+0xbc/0x130 [ 1248.007276][T24730] cleanup_mnt+0x437/0x4d0 [ 1248.007309][T24730] ? _raw_spin_unlock_irq+0x23/0x50 [ 1248.007357][T24730] task_work_run+0x1d9/0x270 [ 1248.007396][T24730] ? __pfx_task_work_run+0x10/0x10 [ 1248.007429][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.007472][T24730] exit_to_user_mode_loop+0xed/0x480 [ 1248.007506][T24730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.007535][T24730] ? rcu_is_watching+0x15/0xb0 [ 1248.007564][T24730] do_syscall_64+0x2b7/0xf80 [ 1248.007593][T24730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.007618][T24730] ? trace_irq_disable+0x37/0x100 [ 1248.007652][T24730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.007677][T24730] RIP: 0033:0x7f176679c117 [ 1248.007700][T24730] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1248.007722][T24730] RSP: 002b:00007ffe74158bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1248.007749][T24730] RAX: 0000000000000000 RBX: 00007f176680471f RCX: 00007f176679c117 [ 1248.007767][T24730] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe74158cb0 [ 1248.007782][T24730] RBP: 00007ffe74158cb0 R08: 00007ffe74159cb0 R09: 00000000ffffffff [ 1248.007800][T24730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe74159d40 [ 1248.007818][T24730] R13: 00007f176680471f R14: 0000000000130bc5 R15: 00007ffe74159d80 [ 1248.007862][T24730] [ 1248.007872][T24730] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1248.476139][T24685] Bluetooth: hci1: command tx timeout [ 1248.602441][T26253] netlink: 'syz.6.6112': attribute type 1 has an invalid length. [ 1248.654589][T26255] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6112'. [ 1249.224931][T26271] netlink: 'syz.2.6110': attribute type 30 has an invalid length. [ 1249.429352][T26255] bond1: (slave bridge1): making interface the new active one [ 1249.466049][T26255] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1249.654673][T26264] syzkaller0: entered promiscuous mode [ 1249.665886][T26264] syzkaller0: entered allmulticast mode [ 1250.549099][T24685] Bluetooth: hci1: command tx timeout [ 1250.889088][T26310] loop9: detected capacity change from 0 to 128 [ 1250.979473][T26310] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1251.083346][T26310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1251.546615][T26325] loop7: detected capacity change from 0 to 512 [ 1252.407247][T26325] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.421049][T26325] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.557644][T26334] loop6: detected capacity change from 0 to 256 [ 1253.536210][T26334] exfat: Unknown parameter 'dçÀz„ÖY' [ 1254.797988][T26150] chnl_net:caif_netlink_parms(): no params data found [ 1254.831417][T26346] netlink: 'syz.9.6125': attribute type 1 has an invalid length. [ 1255.951686][T26348] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 1256.027764][T23431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.427163][T26372] loop7: detected capacity change from 0 to 256 [ 1256.456331][T26374] loop2: detected capacity change from 0 to 512 [ 1256.463800][T26372] exfat: Deprecated parameter 'utf8' [ 1256.552252][T26374] EXT4-fs (loop2): 1 truncate cleaned up [ 1256.601915][T26372] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1256.621589][T26374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.675192][ T31] audit: type=1800 audit(2000000259.444:1989): pid=26374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6131" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 1256.805172][T24730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.040256][T26392] loop7: detected capacity change from 0 to 256 [ 1257.846216][T26400] loop7: detected capacity change from 0 to 128 [ 1257.871699][T26400] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1257.904275][T26400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1258.057344][T26403] loop6: detected capacity change from 0 to 128 [ 1258.110147][T26403] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1258.223892][T26403] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1258.722379][T24683] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1259.247171][T26427] netlink: 'syz.7.6140': attribute type 1 has an invalid length. [ 1259.431831][T26430] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 1259.452698][T26150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.484762][T26150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.528888][T26150] bridge_slave_0: entered allmulticast mode [ 1259.537398][T26150] bridge_slave_0: entered promiscuous mode [ 1260.393292][T26150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.428432][T26150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.435951][T26150] bridge_slave_1: entered allmulticast mode [ 1260.508500][T26150] bridge_slave_1: entered promiscuous mode [ 1261.417441][T26150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.501258][T26150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.600560][ T6010] bridge_slave_1: left allmulticast mode [ 1261.606605][ T6010] bridge_slave_1: left promiscuous mode [ 1261.626997][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.669252][ T6010] bridge_slave_0: left allmulticast mode [ 1261.675076][ T6010] bridge_slave_0: left promiscuous mode [ 1261.701587][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.808482][T21381] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1261.958711][T21381] usb 7-1: Using ep0 maxpacket: 16 [ 1261.978693][T21381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.012802][T21381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.044738][T21381] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1262.094353][T21381] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1262.122398][T21381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.125991][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.128906][T21381] usb 7-1: config 0 descriptor?? [ 1262.142534][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.172572][ T6010] bond0 (unregistering): Released all slaves [ 1262.255846][T26459] syzkaller0: entered promiscuous mode [ 1262.269396][T26459] syzkaller0: entered allmulticast mode [ 1262.494099][T26150] team0: Port device team_slave_0 added [ 1262.540810][ T6010] hsr_slave_0: left promiscuous mode [ 1262.557970][ T6010] hsr_slave_1: left promiscuous mode [ 1262.566320][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.579583][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.586877][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.609244][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.618026][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.625387][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.658088][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.665381][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.687936][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.695275][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.717746][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.730424][T21381] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1262.796270][T21381] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000A/input/input21 [ 1262.889487][T21381] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1262.971813][T21381] usb 7-1: USB disconnect, device number 5 [ 1263.059528][T26481] fido_id[26481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1263.251123][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 1263.323700][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 1265.014831][T25926] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1265.044414][T25926] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1265.136665][T25926] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1265.179241][T26150] team0: Port device team_slave_1 added [ 1265.341898][T26500] loop2: detected capacity change from 0 to 512 [ 1265.353095][T26150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.362739][T26150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.403742][T26500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1265.448759][T26150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.463452][T26500] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.6159: inode has both inline data and extents flags [ 1265.504938][T26493] vlan3: entered allmulticast mode [ 1265.510637][T26493] bridge_slave_0: entered allmulticast mode [ 1265.517105][T26493] bridge0: port 2(vlan3) entered blocking state [ 1265.523654][T26493] bridge0: port 2(vlan3) entered disabled state [ 1265.533022][T26493] vlan3: entered promiscuous mode [ 1265.538191][T26493] bridge_slave_0: entered promiscuous mode [ 1265.556769][T25926] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1265.574860][T26500] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6159: couldn't read orphan inode 15 (err -117) [ 1265.636288][T26150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.670032][T26500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1265.727447][T26150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.900405][T26150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.056463][T24730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.371051][T26150] hsr_slave_0: entered promiscuous mode [ 1266.409045][T26150] hsr_slave_1: entered promiscuous mode [ 1266.652789][T26528] xt_hashlimit: size too large, truncated to 1048576 [ 1267.271707][T26547] syzkaller0: entered promiscuous mode [ 1267.287493][T26547] syzkaller0: entered allmulticast mode [ 1267.305224][T26551] loop9: detected capacity change from 0 to 512 [ 1267.325811][T26551] EXT4-fs: Ignoring removed orlov option [ 1267.395423][T26551] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1267.464116][T26551] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1267.507672][T26551] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.6170: corrupted in-inode xattr: e_value size too large [ 1267.529698][T25926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.587122][T26551] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6170: couldn't read orphan inode 15 (err -117) [ 1267.634677][T26551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1268.123603][T24820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.351471][T25926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.411107][T25292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.418423][T25292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.476495][T25292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.483771][T25292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.527770][ T31] audit: type=1326 audit(2000000271.295:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.9.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b999aeb9 code=0x7ffc0000 [ 1268.616469][ T31] audit: type=1326 audit(2000000271.295:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.9.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b999aeb9 code=0x7ffc0000 [ 1268.717960][ T31] audit: type=1326 audit(2000000271.305:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.9.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb5b999aeb9 code=0x7ffc0000 [ 1268.824974][ T31] audit: type=1326 audit(2000000271.305:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.9.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b999aeb9 code=0x7ffc0000 [ 1268.889047][T26582] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1268.927574][ T31] audit: type=1326 audit(2000000271.305:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.9.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b999aeb9 code=0x7ffc0000 [ 1269.900742][T26150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1269.963763][T26150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1270.003660][T26604] loop2: detected capacity change from 0 to 2048 [ 1270.051123][T26150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1270.125821][T26150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1270.318746][T26608] loop7: detected capacity change from 0 to 16 [ 1270.362952][T26608] erofs (device loop7): mounted with root inode @ nid 36. [ 1270.534010][T26613] No such timeout policy "syz1" [ 1271.103123][T25926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.110659][T26578] loop9: detected capacity change from 0 to 40427 [ 1271.207440][T26578] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1271.231413][T26578] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1271.274411][T26578] F2FS-fs (loop9): invalid crc value [ 1271.712214][T26629] syzkaller0: entered promiscuous mode [ 1271.740787][T26629] syzkaller0: entered allmulticast mode [ 1271.800513][T26578] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1272.125280][T26649] netlink: 'syz.6.6188': attribute type 1 has an invalid length. [ 1272.245866][T26654] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6188'. [ 1272.374124][T26657] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 1272.633086][T26150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.731563][T26150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.749332][ T5806] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1272.821714][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.828969][ T6119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.857434][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.864622][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.957478][ T5806] usb 3-1: Using ep0 maxpacket: 32 [ 1272.984336][ T5806] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1273.023626][ T5806] usb 3-1: config 0 has no interface number 0 [ 1273.053514][ T5806] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1273.066081][T25926] veth0_vlan: entered promiscuous mode [ 1273.077812][ T5806] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1273.124257][ T5806] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1273.143998][T25926] veth1_vlan: entered promiscuous mode [ 1273.150098][ T5806] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1273.169621][ T5806] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1273.212290][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.247591][ T5806] usb 3-1: Product: syz [ 1273.251843][ T5806] usb 3-1: Manufacturer: syz [ 1273.267038][ T5806] usb 3-1: SerialNumber: syz [ 1273.318963][ T5806] usb 3-1: config 0 descriptor?? [ 1273.351471][T25926] veth0_macvtap: entered promiscuous mode [ 1273.416659][T25926] veth1_macvtap: entered promiscuous mode [ 1273.512114][T25926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.543486][ T5806] appletouch 3-1:0.85: Failed to read mode from device. [ 1273.581296][ T5806] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1273.603755][T25926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.671563][ T5962] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.682308][ T5806] usb 3-1: USB disconnect, device number 11 [ 1273.702378][ T5962] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.758917][ T5962] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.794187][ T5962] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.050979][ T6119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.055967][T26150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.100713][ T6119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.334806][T26676] loop9: detected capacity change from 0 to 40427 [ 1274.349414][ T6119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.365617][T26676] F2FS-fs (loop9): Image doesn't support compression [ 1274.394465][T26676] F2FS-fs (loop9): build fault injection rate: 684 [ 1274.418890][T26676] F2FS-fs (loop9): build fault injection type: 0x35f7 [ 1274.445719][T26676] F2FS-fs (loop9): invalid crc value [ 1274.594099][ T6119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.765350][T26150] veth0_vlan: entered promiscuous mode [ 1274.776394][T26676] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1274.847477][T26676] F2FS-fs (loop9): Start checkpoint disabled! [ 1274.893518][T26150] veth1_vlan: entered promiscuous mode [ 1274.926422][T26676] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1274.987967][T26676] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1275.075783][T26150] veth0_macvtap: entered promiscuous mode [ 1275.149594][T26150] veth1_macvtap: entered promiscuous mode [ 1275.211507][T26705] 9p: Unknown uid 00000000004294967295 [ 1275.304731][T26150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.363572][T26676] F2FS-fs (loop9): inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0x99d/0xd40 [ 1275.417546][T26150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.487389][ T6119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.501481][T26711] loop7: detected capacity change from 0 to 4096 [ 1275.558292][T26711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1275.668799][ T6119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.693911][T26711] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1275.710182][T24820] F2FS-fs (loop9): access invalid blkaddr:4043309056 [ 1275.747833][T26710] syzkaller0: entered promiscuous mode [ 1275.761049][T26710] syzkaller0: entered allmulticast mode [ 1275.781318][T24820] CPU: 0 UID: 0 PID: 24820 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1275.781351][T24820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1275.781368][T24820] Call Trace: [ 1275.781380][T24820] [ 1275.781391][T24820] dump_stack_lvl+0xe8/0x150 [ 1275.781431][T24820] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 1275.781464][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.781503][T24820] f2fs_map_blocks+0xded/0x41b0 [ 1275.781550][T24820] ? __lock_acquire+0x6b5/0x2cf0 [ 1275.781617][T24820] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 1275.781643][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.781676][T24820] ? xa_load+0x60/0x210 [ 1275.781708][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.781748][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.781776][T24820] ? xa_load+0x1db/0x210 [ 1275.781813][T24820] f2fs_mpage_readpages+0xd62/0x1bf0 [ 1275.781904][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.781943][T24820] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 1275.782016][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.782045][T24820] ? f2fs_readahead+0x167/0x310 [ 1275.782081][T24820] read_pages+0x193/0x5a0 [ 1275.782105][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.782141][T24820] ? __pfx_read_pages+0x10/0x10 [ 1275.782175][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.782203][T24820] ? filemap_add_folio+0x356/0x530 [ 1275.782250][T24820] page_cache_ra_unbounded+0x74f/0x980 [ 1275.782301][T24820] f2fs_readdir+0x4c0/0xaa0 [ 1275.782364][T24820] ? __pfx_f2fs_readdir+0x10/0x10 [ 1275.782403][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.782440][T24820] ? iterate_dir+0x292/0x570 [ 1275.782475][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.782504][T24820] ? down_read_killable+0x1bb/0x340 [ 1275.782536][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.782570][T24820] iterate_dir+0x399/0x570 [ 1275.782611][T24820] __se_sys_getdents64+0xf1/0x280 [ 1275.782653][T24820] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1275.782688][T24820] ? exc_page_fault+0x6a/0xc0 [ 1275.782712][T24820] ? __pfx_filldir64+0x10/0x10 [ 1275.782753][T24820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.782781][T24820] ? do_user_addr_fault+0xc7c/0x1360 [ 1275.782835][T24820] do_syscall_64+0xe2/0xf80 [ 1275.782862][T24820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.782886][T24820] ? trace_irq_disable+0x37/0x100 [ 1275.782918][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.782943][T24820] RIP: 0033:0x7fb5b99c3873 [ 1275.782966][T24820] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 1275.782995][T24820] RSP: 002b:00007ffcb35220f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1275.783021][T24820] RAX: ffffffffffffffda RBX: 0000555562c0ca30 RCX: 00007fb5b99c3873 [ 1275.783041][T24820] RDX: 0000000000008000 RSI: 0000555562c0ca60 RDI: 0000000000000005 [ 1275.783058][T24820] RBP: 0000555562c0ca60 R08: 00007fb5b9be4cc0 R09: 0000000000000001 [ 1275.783075][T24820] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555562c0ca34 [ 1275.783091][T24820] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffcb35243a0 [ 1275.783131][T24820] [ 1276.102473][T24820] syz-executor: attempt to access beyond end of device [ 1276.102473][T24820] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1276.117549][T24820] syz-executor: attempt to access beyond end of device [ 1276.117549][T24820] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1276.338530][T23431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.437740][T25292] kworker/u8:14: attempt to access beyond end of device [ 1276.437740][T25292] loop9: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 1276.455205][T25292] CPU: 1 UID: 0 PID: 25292 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1276.455246][T25292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1276.455264][T25292] Workqueue: writeback wb_workfn (flush-7:9) [ 1276.455311][T25292] Call Trace: [ 1276.455322][T25292] [ 1276.455334][T25292] dump_stack_lvl+0xe8/0x150 [ 1276.455371][T25292] f2fs_handle_critical_error+0x37c/0x540 [ 1276.455414][T25292] f2fs_write_end_io+0xc1d/0xfd0 [ 1276.455472][T25292] __submit_merged_bio+0x256/0x650 [ 1276.455512][T25292] __submit_merged_write_cond+0x269/0x530 [ 1276.455553][T25292] f2fs_write_data_pages+0x2806/0x3360 [ 1276.455635][T25292] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1276.455687][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.455760][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.455790][T25292] ? __lock_acquire+0x6b5/0x2cf0 [ 1276.455867][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.455926][T25292] ? __lock_acquire+0x6b5/0x2cf0 [ 1276.455965][T25292] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1276.456000][T25292] do_writepages+0x32e/0x550 [ 1276.456046][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456075][T25292] ? reacquire_held_locks+0x104/0x190 [ 1276.456101][T25292] ? writeback_sb_inodes+0x42a/0x1940 [ 1276.456136][T25292] __writeback_single_inode+0x133/0x1230 [ 1276.456165][T25292] ? do_raw_spin_unlock+0xf5/0x210 [ 1276.456203][T25292] writeback_sb_inodes+0x92e/0x1940 [ 1276.456245][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456303][T25292] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1276.456326][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.456409][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456436][T25292] ? rcu_is_watching+0x15/0xb0 [ 1276.456461][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456500][T25292] wb_writeback+0x445/0xad0 [ 1276.456531][T25292] ? queue_io+0x271/0x450 [ 1276.456565][T25292] ? __pfx_wb_writeback+0x10/0x10 [ 1276.456586][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.456639][T25292] wb_workfn+0x3f8/0xef0 [ 1276.456671][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456700][T25292] ? look_up_lock_class+0x57/0x110 [ 1276.456755][T25292] ? __pfx_wb_workfn+0x10/0x10 [ 1276.456788][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456820][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456857][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456886][T25292] ? do_raw_spin_unlock+0xf5/0x210 [ 1276.456923][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456957][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.456990][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.457027][T25292] ? process_scheduled_works+0xa0f/0x17a0 [ 1276.457073][T25292] ? process_scheduled_works+0xa0f/0x17a0 [ 1276.457112][T25292] process_scheduled_works+0xaec/0x17a0 [ 1276.457189][T25292] ? __pfx_process_scheduled_works+0x10/0x10 [ 1276.457224][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.457264][T25292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1276.457291][T25292] ? schedule+0x90/0x360 [ 1276.457319][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.457353][T25292] worker_thread+0xda6/0x1360 [ 1276.457414][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.457442][T25292] ? __kthread_parkme+0x19c/0x1f0 [ 1276.457478][T25292] kthread+0x726/0x8b0 [ 1276.457513][T25292] ? __pfx_worker_thread+0x10/0x10 [ 1276.457553][T25292] ? __pfx_kthread+0x10/0x10 [ 1276.457579][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.457617][T25292] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.457659][T25292] ? __pfx_kthread+0x10/0x10 [ 1276.457690][T25292] ret_from_fork+0x51b/0xa40 [ 1276.457742][T25292] ? __pfx_ret_from_fork+0x10/0x10 [ 1276.457778][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.457808][T25292] ? __switch_to+0xc82/0x1410 [ 1276.457856][T25292] ? __pfx_kthread+0x10/0x10 [ 1276.457889][T25292] ret_from_fork_asm+0x1a/0x30 [ 1276.457952][T25292] [ 1276.845639][ T6119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.870071][ T6119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.941806][T25292] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1276.950445][T25292] CPU: 1 UID: 0 PID: 25292 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1276.950478][T25292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1276.950494][T25292] Workqueue: writeback wb_workfn (flush-7:9) [ 1276.950547][T25292] Call Trace: [ 1276.950558][T25292] [ 1276.950570][T25292] dump_stack_lvl+0xe8/0x150 [ 1276.950608][T25292] f2fs_handle_critical_error+0x37c/0x540 [ 1276.950651][T25292] f2fs_write_end_io+0xc1d/0xfd0 [ 1276.950712][T25292] __submit_merged_bio+0x256/0x650 [ 1276.950751][T25292] __submit_merged_write_cond+0x269/0x530 [ 1276.950791][T25292] f2fs_write_data_pages+0x2806/0x3360 [ 1276.950871][T25292] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1276.950922][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951002][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951031][T25292] ? __lock_acquire+0x6b5/0x2cf0 [ 1276.951109][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951167][T25292] ? __lock_acquire+0x6b5/0x2cf0 [ 1276.951205][T25292] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1276.951241][T25292] do_writepages+0x32e/0x550 [ 1276.951290][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951318][T25292] ? reacquire_held_locks+0x104/0x190 [ 1276.951344][T25292] ? writeback_sb_inodes+0x42a/0x1940 [ 1276.951379][T25292] __writeback_single_inode+0x133/0x1230 [ 1276.951407][T25292] ? do_raw_spin_unlock+0xf5/0x210 [ 1276.951444][T25292] writeback_sb_inodes+0x92e/0x1940 [ 1276.951476][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951531][T25292] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1276.951555][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.951642][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951671][T25292] ? rcu_is_watching+0x15/0xb0 [ 1276.951697][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951738][T25292] wb_writeback+0x445/0xad0 [ 1276.951770][T25292] ? queue_io+0x271/0x450 [ 1276.951805][T25292] ? __pfx_wb_writeback+0x10/0x10 [ 1276.951827][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.951881][T25292] wb_workfn+0x3f8/0xef0 [ 1276.951912][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.951940][T25292] ? look_up_lock_class+0x57/0x110 [ 1276.952002][T25292] ? __pfx_wb_workfn+0x10/0x10 [ 1276.952033][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952066][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952101][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952130][T25292] ? do_raw_spin_unlock+0xf5/0x210 [ 1276.952168][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952201][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952235][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952271][T25292] ? process_scheduled_works+0xa0f/0x17a0 [ 1276.952310][T25292] ? process_scheduled_works+0xa0f/0x17a0 [ 1276.952351][T25292] process_scheduled_works+0xaec/0x17a0 [ 1276.952431][T25292] ? __pfx_process_scheduled_works+0x10/0x10 [ 1276.952467][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.952501][T25292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1276.952529][T25292] ? schedule+0x90/0x360 [ 1276.952559][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952597][T25292] worker_thread+0xda6/0x1360 [ 1276.952659][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952688][T25292] ? __kthread_parkme+0x19c/0x1f0 [ 1276.952725][T25292] kthread+0x726/0x8b0 [ 1276.952761][T25292] ? __pfx_worker_thread+0x10/0x10 [ 1276.952800][T25292] ? __pfx_kthread+0x10/0x10 [ 1276.952826][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.952863][T25292] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.952902][T25292] ? __pfx_kthread+0x10/0x10 [ 1276.952934][T25292] ret_from_fork+0x51b/0xa40 [ 1276.952990][T25292] ? __pfx_ret_from_fork+0x10/0x10 [ 1276.953027][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.953056][T25292] ? __switch_to+0xc82/0x1410 [ 1276.953101][T25292] ? __pfx_kthread+0x10/0x10 [ 1276.953133][T25292] ret_from_fork_asm+0x1a/0x30 [ 1276.953197][T25292] [ 1276.953208][T25292] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1277.351533][T25292] CPU: 1 UID: 0 PID: 25292 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1277.351576][T25292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1277.351598][T25292] Workqueue: writeback wb_workfn (flush-7:9) [ 1277.351645][T25292] Call Trace: [ 1277.351655][T25292] [ 1277.351680][T25292] dump_stack_lvl+0xe8/0x150 [ 1277.351715][T25292] f2fs_handle_critical_error+0x37c/0x540 [ 1277.351757][T25292] f2fs_write_end_io+0xc1d/0xfd0 [ 1277.351828][T25292] __submit_merged_bio+0x256/0x650 [ 1277.351869][T25292] __submit_merged_write_cond+0x269/0x530 [ 1277.351910][T25292] f2fs_write_data_pages+0x2806/0x3360 [ 1277.351995][T25292] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1277.352044][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.352112][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.352141][T25292] ? __lock_acquire+0x6b5/0x2cf0 [ 1277.352219][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.352283][T25292] ? __lock_acquire+0x6b5/0x2cf0 [ 1277.352337][T25292] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1277.352381][T25292] do_writepages+0x32e/0x550 [ 1277.352439][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.352475][T25292] ? reacquire_held_locks+0x104/0x190 [ 1277.352505][T25292] ? writeback_sb_inodes+0x42a/0x1940 [ 1277.352548][T25292] __writeback_single_inode+0x133/0x1230 [ 1277.352582][T25292] ? do_raw_spin_unlock+0xf5/0x210 [ 1277.352628][T25292] writeback_sb_inodes+0x92e/0x1940 [ 1277.352669][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.352738][T25292] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1277.352854][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.352940][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.352969][T25292] ? rcu_is_watching+0x15/0xb0 [ 1277.352993][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353033][T25292] wb_writeback+0x445/0xad0 [ 1277.353066][T25292] ? queue_io+0x271/0x450 [ 1277.353100][T25292] ? __pfx_wb_writeback+0x10/0x10 [ 1277.353120][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.353178][T25292] wb_workfn+0x3f8/0xef0 [ 1277.353209][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353246][T25292] ? look_up_lock_class+0x57/0x110 [ 1277.353296][T25292] ? __pfx_wb_workfn+0x10/0x10 [ 1277.353328][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353359][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353393][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353421][T25292] ? do_raw_spin_unlock+0xf5/0x210 [ 1277.353458][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353491][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353523][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353560][T25292] ? process_scheduled_works+0xa0f/0x17a0 [ 1277.353600][T25292] ? process_scheduled_works+0xa0f/0x17a0 [ 1277.353640][T25292] process_scheduled_works+0xaec/0x17a0 [ 1277.353720][T25292] ? __pfx_process_scheduled_works+0x10/0x10 [ 1277.353756][T25292] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.353790][T25292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1277.353817][T25292] ? schedule+0x90/0x360 [ 1277.353848][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353884][T25292] worker_thread+0xda6/0x1360 [ 1277.353945][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.353973][T25292] ? __kthread_parkme+0x19c/0x1f0 [ 1277.354009][T25292] kthread+0x726/0x8b0 [ 1277.354042][T25292] ? __pfx_worker_thread+0x10/0x10 [ 1277.354081][T25292] ? __pfx_kthread+0x10/0x10 [ 1277.354106][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.354143][T25292] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.354183][T25292] ? __pfx_kthread+0x10/0x10 [ 1277.354214][T25292] ret_from_fork+0x51b/0xa40 [ 1277.354270][T25292] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.354305][T25292] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.354333][T25292] ? __switch_to+0xc82/0x1410 [ 1277.354376][T25292] ? __pfx_kthread+0x10/0x10 [ 1277.354407][T25292] ret_from_fork_asm+0x1a/0x30 [ 1277.354465][T25292] [ 1277.354479][T25292] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1278.217079][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.245727][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.259552][T26739] loop2: detected capacity change from 0 to 1024 [ 1278.305366][T26739] EXT4-fs: Ignoring removed bh option [ 1278.333043][T26739] EXT4-fs: inline encryption not supported [ 1278.432163][T26739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1278.552903][ T6119] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.646597][T24730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.701974][T21800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.764441][T21800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.128745][T26748] input: syz0 as /devices/virtual/input/input23 [ 1279.179300][ T6119] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.517982][ T6119] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.909242][ T6119] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.526994][T26580] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1280.742288][T26580] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1280.780938][T26770] loop7: detected capacity change from 0 to 2048 [ 1280.798203][T26580] usb 4-1: config 0 has no interface number 0 [ 1280.808279][T26767] loop2: detected capacity change from 0 to 4096 [ 1280.830897][T26580] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1280.857463][T26767] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1280.882114][T26580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.915354][T26770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1280.917236][T26580] usb 4-1: Product: syz [ 1280.943593][T26580] usb 4-1: Manufacturer: syz [ 1280.949273][T26580] usb 4-1: SerialNumber: syz [ 1280.962222][T26580] usb 4-1: config 0 descriptor?? [ 1280.999351][T26767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.077306][ T6119] bridge_slave_1: left allmulticast mode [ 1281.083053][ T6119] bridge_slave_1: left promiscuous mode [ 1281.144661][T23431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.160777][T26778] overlayfs: missing 'lowerdir' [ 1281.182390][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.197536][T26767] EXT4-fs (loop2): shut down requested (0) [ 1281.270232][ T6119] bridge_slave_0: left allmulticast mode [ 1281.348104][ T6119] bridge_slave_0: left promiscuous mode [ 1281.398159][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.859030][T26792] loop6: detected capacity change from 0 to 4096 [ 1281.878924][T26580] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1281.959046][T26794] siw: device registration error -23 [ 1282.562054][T26580] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1282.578993][T24730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.632597][T26580] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1282.702430][T26580] usb 4-1: USB disconnect, device number 4 [ 1282.793470][T26792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1283.556761][T22140] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1283.747117][T22140] usb 4-1: Using ep0 maxpacket: 16 [ 1283.759114][T22140] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.814867][T22140] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.368678][T22140] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1284.405920][T22140] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1284.487924][T22140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.544119][T22140] usb 4-1: config 0 descriptor?? [ 1285.092672][T22140] hid (null): invalid report_size 21121 [ 1285.118028][T22140] hid (null): report_id 3192074355 is invalid [ 1285.124177][T22140] hid (null): global environment stack underflow [ 1285.159993][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1285.178816][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1285.186268][T22140] hid (null): unknown global tag 0xd [ 1285.193446][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1285.205303][ T5139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1285.208786][T22140] hid (null): unknown global tag 0xc3 [ 1285.238728][ T5139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1285.240423][T22140] hid (null): report_id 0 is invalid [ 1285.273043][T22140] hid (null): invalid report_count 18703 [ 1285.339076][T22140] usb 4-1: USB disconnect, device number 5 [ 1285.418580][ T6119] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1285.511664][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.525642][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.549596][ T6119] bond0 (unregistering): Released all slaves [ 1285.564277][ T6119] bond1 (unregistering): Released all slaves [ 1285.584879][ T6119] bond2 (unregistering): Released all slaves [ 1285.624101][T26778] bridge_slave_0: left allmulticast mode [ 1285.649674][T26778] bridge_slave_0: left promiscuous mode [ 1285.677570][T26778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.742067][T26778] bridge_slave_1: left allmulticast mode [ 1285.768221][T26778] bridge_slave_1: left promiscuous mode [ 1285.774164][T26778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.811218][T26778] bond0: (slave bond_slave_0): Releasing backup interface [ 1285.865603][T26778] bond0: (slave bond_slave_1): Releasing backup interface [ 1285.932261][T26778] team0: Port device team_slave_0 removed [ 1285.954467][T26778] team0: Port device team_slave_1 removed [ 1285.984668][T26778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.004785][T26778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.029283][T26778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.037909][T26778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.107676][T26778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1286.124542][T26782] team0: Mode changed to "random" [ 1286.145275][T26784] vlan0: entered promiscuous mode [ 1286.165218][T26833] input: syz0 as /devices/virtual/input/input24 [ 1286.189654][T26784] team0: Port device vlan0 added [ 1286.285147][T26808] syzkaller0: entered promiscuous mode [ 1286.313562][T26808] syzkaller0: entered allmulticast mode [ 1286.726246][T24683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.040395][T26827] lo speed is unknown, defaulting to 1000 [ 1287.064050][ T6119] hsr_slave_0: left promiscuous mode [ 1287.347311][T24685] Bluetooth: hci0: command tx timeout [ 1287.685931][ T6119] hsr_slave_1: left promiscuous mode [ 1287.718671][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.836722][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.210697][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.251869][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.365255][T26856] loop6: detected capacity change from 0 to 2048 [ 1288.431197][ T6119] veth1_macvtap: left promiscuous mode [ 1288.461093][ T6119] veth0_macvtap: left promiscuous mode [ 1288.493089][ T6119] veth1_vlan: left promiscuous mode [ 1288.506854][T25556] loop6: p1 < > p4 [ 1288.518867][T25556] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1288.526693][ T6119] veth0_vlan: left promiscuous mode [ 1288.556058][T26856] loop6: p1 < > p4 [ 1288.603565][T26856] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1289.426471][T24685] Bluetooth: hci0: command tx timeout [ 1289.485983][T25782] udevd[25782]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1289.516817][T25556] udevd[25556]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1289.690760][T25782] udevd[25782]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1289.701937][T25556] udevd[25556]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1290.192684][T26878] overlayfs: missing 'lowerdir' [ 1291.507057][T24685] Bluetooth: hci0: command tx timeout [ 1293.326159][T26909] [ 1293.345219][T26909] ============================= [ 1293.350981][T26909] WARNING: suspicious RCU usage [ 1293.357074][T26909] syzkaller #0 Tainted: G L [ 1293.363067][T26909] ----------------------------- [ 1293.369039][T26909] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1293.377629][T26909] [ 1293.377629][T26909] other info that might help us debug this: [ 1293.377629][T26909] [ 1293.388213][T26909] [ 1293.388213][T26909] rcu_scheduler_active = 2, debug_locks = 1 [ 1293.396378][T26909] 1 lock held by syz.3.6243/26909: [ 1293.401505][T26909] #0: ffffffff8e55a540 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x80 [ 1293.411832][T26909] [ 1293.411832][T26909] stack backtrace: [ 1293.417984][T26909] CPU: 1 UID: 0 PID: 26909 Comm: syz.3.6243 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.418029][T26909] Tainted: [L]=SOFTLOCKUP [ 1293.418041][T26909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1293.418062][T26909] Call Trace: [ 1293.418077][T26909] [ 1293.418090][T26909] dump_stack_lvl+0xe8/0x150 [ 1293.418140][T26909] lockdep_rcu_suspicious+0x13f/0x1d0 [ 1293.418200][T26909] get_callchain_entry+0x2b6/0x3c0 [ 1293.418264][T26909] get_perf_callchain+0xcb/0x830 [ 1293.418321][T26909] ? __pfx_get_perf_callchain+0x10/0x10 [ 1293.418381][T26909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.418433][T26909] __bpf_get_stack+0x445/0xab0 [ 1293.418498][T26909] ? __pfx___bpf_get_stack+0x10/0x10 [ 1293.418548][T26909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.418582][T26909] ? __lock_acquire+0x6b5/0x2cf0 [ 1293.418629][T26909] bpf_get_stack+0x33/0x50 [ 1293.418674][T26909] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 1293.418704][T26909] bpf_get_stack_raw_tp+0x1a9/0x220 [ 1293.418764][T26909] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 1293.418794][T26909] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 1293.418842][T26909] bpf_prog_test_run_syscall+0x318/0x4c0 [ 1293.418883][T26909] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1293.418918][T26909] ? __fget_files+0x2a/0x420 [ 1293.418960][T26909] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1293.418993][T26909] bpf_prog_test_run+0x2c7/0x340 [ 1293.419029][T26909] __sys_bpf+0x5cb/0x920 [ 1293.419061][T26909] ? __pfx___sys_bpf+0x10/0x10 [ 1293.419108][T26909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.419141][T26909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.419171][T26909] ? rcu_is_watching+0x15/0xb0 [ 1293.419208][T26909] __x64_sys_bpf+0x7c/0x90 [ 1293.419256][T26909] do_syscall_64+0xe2/0xf80 [ 1293.419287][T26909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.419312][T26909] ? trace_irq_disable+0x37/0x100 [ 1293.419345][T26909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.419372][T26909] RIP: 0033:0x7fa826f9aeb9 [ 1293.419396][T26909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1293.419418][T26909] RSP: 002b:00007fa827dad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1293.419445][T26909] RAX: ffffffffffffffda RBX: 00007fa827215fa0 RCX: 00007fa826f9aeb9 [ 1293.419465][T26909] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1293.419482][T26909] RBP: 00007fa827008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1293.419499][T26909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1293.419515][T26909] R13: 00007fa827216038 R14: 00007fa827215fa0 R15: 00007fff9dcdc608 [ 1293.419555][T26909] [ 1293.728578][T24685] Bluetooth: hci0: command tx timeout [ 1295.015797][ T6119] team0 (unregistering): Port device team_slave_1 removed [ 1295.102369][ T6119] team0 (unregistering): Port device team_slave_0 removed [ 1296.111445][T26878] bridge_slave_0: left allmulticast mode [ 1296.127169][T26878] bridge_slave_0: left promiscuous mode [ 1296.133012][T26878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.163743][T26878] bridge_slave_1: left allmulticast mode [ 1296.169527][T26878] bridge_slave_1: left promiscuous mode [ 1296.175384][T26878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.194886][T26878] bond0: (slave bond_slave_0): Releasing backup interface [ 1296.213567][T26878] bond0: (slave bond_slave_1): Releasing backup interface [ 1296.240654][T26878] team0: Port device team_slave_0 removed [ 1296.270952][T26878] team0: Port device team_slave_1 removed [ 1296.289301][T26878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.307832][T26878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.327780][T26878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.335200][T26878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.358997][T26878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1296.387928][T26880] vlan0: entered promiscuous mode [ 1296.410068][T26880] team0: Port device vlan0 added [ 1296.427363][T26898] syzkaller0: entered promiscuous mode [ 1296.432877][T26898] syzkaller0: entered allmulticast mode [ 1296.768619][T22179] lo speed is unknown, defaulting to 1000 [ 1297.983818][ T6119] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.035977][ T6119] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.217774][ T6119] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.228250][ T6119] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.392808][ T6119] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.403645][ T6119] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.494597][ T6119] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.507040][ T6119] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.750504][ T6119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.851542][ T6119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.952612][ T6119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.039592][ T6119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.258328][ T6119] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.272944][ T6119] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.383330][ T6119] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.394547][ T6119] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.482686][ T6119] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.493039][ T6119] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.578836][ T6119] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.589189][ T6119] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.844650][ T6119] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.994876][ T6119] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.099944][ T6119] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.189708][ T6119] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.455976][ T6119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.604334][ T6119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.697164][ T6119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.770238][ T6119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.009835][ T6119] bridge_slave_1: left allmulticast mode [ 1301.015552][ T6119] bridge_slave_1: left promiscuous mode [ 1301.041387][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.052582][ T6119] bridge_slave_0: left allmulticast mode [ 1301.058721][ T6119] bridge_slave_0: left promiscuous mode [ 1301.064544][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.090186][ T6119] vlan3: left promiscuous mode [ 1301.095051][ T6119] bridge_slave_0: left promiscuous mode [ 1301.104112][ T6119] bridge0: port 2(vlan3) entered disabled state [ 1301.120975][ T6119] gretap0: left allmulticast mode [ 1301.127125][ T6119] bridge0: port 1(gretap0) entered disabled state [ 1301.154332][ T6119] bridge_slave_1: left allmulticast mode [ 1301.160163][ T6119] bridge_slave_1: left promiscuous mode [ 1301.167148][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.189135][ T6119] bridge_slave_0: left allmulticast mode [ 1301.194894][ T6119] bridge_slave_0: left promiscuous mode [ 1301.201324][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.138068][ T6119] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1302.225167][ T6119] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1302.323032][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.337128][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.349653][ T6119] bond0 (unregistering): Released all slaves [ 1302.361272][ T6119] bond1 (unregistering): Released all slaves [ 1302.378524][ T6119] bond2 (unregistering): Released all slaves [ 1302.936295][ T6119] bond0 (unregistering): Released all slaves [ 1303.233214][ T6119] bond1 (unregistering): (slave geneve2): Releasing active interface