last executing test programs: 11m58.21291448s ago: executing program 4 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1}], 0x1, 0x4040840) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 11m57.132939768s ago: executing program 4 (id=1429): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_kvm_assert_syzos_kvm_exit$x86(0x0, 0x6) 11m55.710104511s ago: executing program 4 (id=1432): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1, 0x0) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11m50.314384924s ago: executing program 4 (id=1440): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='.\x00', 0x8, &(0x7f0000000180)={[{@dax_always}, {@nolazytime}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x8}}]}, 0x2, 0x546, &(0x7f0000000a40)="$eJzs3U9sG1kZAPBv3LhJuynpwh4AAVt2Fwqq6jTubrXaC90LCK1WQqw4cdgNjhNFsesodsUm9JAcua9EJU7AmQs3Dkh74sCNG0gc9rIckApUoA0SB6MZTxJvYiduauwm/v2kyfx50/nes/ve8zzL8wKYWNciYjsiLkbEexExlx9P8iXudpb0vE8eP6jsPn5QSaLdfucfSZaeHouuf5N6Lr/mTER8/zsRP0qOxm1ubq0t1mrVjXx/vlVfn29ubt1cLeRHyncW7tx6/fZr5aGV9cX6bx59e/WtH/zut1/++I/b3/xJmq3Zn17J0rrLcaB46li/ztdJfp3ZrrSpiHjr1Fd+9kzl/384e9La9tmIeCmr/3NxIXs3AYDzrN2ei/Zc9z4AcN6l9/+zkRRK+VjAbBQKpVJnDO+FuFyoNZqtG3ON+/eWIhvDuhrFwvJqrXorHyu8GsUk3V/Itg/2y5/a/6B6OyKej4gPpi9l6aVKo7Y0zg8+ADDBnjvU//97utP/dzv9t2AAwDNrZtwZAABGrqv/vzrOfAAAo+P+HwAmzxP0/34dCADnhPt/AJg8+n8AmDwn9v87o8kHADAS33v77XRp73aef733pO6bS9XmWql+v1KqNDbWSyuNxkqtWqq02yddr9ZorC+8ur/b3Nx6t964f6/17mr95UpE1bMEAGD8nn/xwz+nnf72G5eyJbrmctBXw/lWGHcGgLG5MO4MAGPj9zwwuQa4xzcMAOdcjyl6O/IBgqTfCQ9N/gpn1fUvGP+HSfU04//GDuBsO934/7eGng9g9PThMLna7cSc/wAwYYzxA32//8/1fUTIwwEufvfJ8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnwWy2JIVSNhf4dvq3UCpFXImIq1FMlrsmCP/TdHF6ebVWXRhnhgGAISj8Lcnn/7o+98rs4dSLyX+ms3VE/Pjn7/zs/cVWa2MhPf7P/eOth+nxS62N8sVxFAAA6LY37+ZHB4ey/rucr7tu5D95/KCyt4wyi4/ejIiZS1n83XzppEzFVLaeiWJEXP5Xku93pJ9XLgwh/vZORHx+r/wz8X5XhNlsDKQz8+nh+GnsK0OP3/36H45f+FR5C1laui5mr8Xn4lDmgBN9+GannczrXlrF8/pXiGvZunf9n8laqKeXtn9pdd090v4V9tu/C0fiJ1mdv7a/f3xOHr36++8eOdie66TtRHxxqlf8ZD9+0rv9Lb4yYBk/+tJXXuqX1v5FxPWe5d+bkbqeNbPzrfr6fHNz6+ZqfXGlulK9Vy7fWbhz6/Xbr5Xnl1dr1Vudv3/oFePvb9z4TL/4afkv94k/c3z542sDlv+X/33vh189Jv43Xu79/r9wTPy0T/z6gPEXL9/tO313Gn+pT/lPeP/jxoDxP/7r1tKApwIAI9Dc3FpbrNWqGydspJ81TzrHxuAb6b39M5CNbCO2I4Z1wWxQIiJ6npN+oh5a5pOI7bG/dIc3krFF/9WwLzjulgn4fzuo9P3P+csoMwQAAAAAAAAAAAAAABzR3Nxam+79a62ujZ2n+jnRuMsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+fW/AAAA//+o7MNa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x80002001}) 11m48.666417416s ago: executing program 4 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x10) lseek(r5, 0x538a, 0x1) 11m47.654745672s ago: executing program 4 (id=1445): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2020c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 11m31.946903251s ago: executing program 32 (id=1445): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2020c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 10m53.011487382s ago: executing program 1 (id=1540): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf0) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m43.976798268s ago: executing program 1 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000007"], 0x68}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 10m42.550851611s ago: executing program 1 (id=1558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 10m39.162236318s ago: executing program 1 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fspick(0xffffffffffffff9c, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x1, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}]}, 0x58) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_setup(0x20, 0x0) 10m32.103536005s ago: executing program 1 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r4, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293e5a644eed79d79f02308ff67a9", 0x11}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 10m30.806691742s ago: executing program 1 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x10104a8, &(0x7f00000003c0)=ANY=[], 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x3, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000060000000000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) 10m15.111276863s ago: executing program 33 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x10104a8, &(0x7f00000003c0)=ANY=[], 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x3, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000060000000000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) 2m51.221654181s ago: executing program 2 (id=2223): symlinkat(0x0, 0xffffffffffffff9c, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setaffinity(0x0, 0x0, 0x0) 2m47.355527392s ago: executing program 2 (id=2231): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0x1, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 2m46.161383479s ago: executing program 2 (id=2232): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=""/4096, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0x1, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) 2m44.139296595s ago: executing program 2 (id=2237): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f00000008c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) syz_open_dev$sg(0x0, 0x0, 0x142000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m39.424882217s ago: executing program 2 (id=2242): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"6538535a2270f2bfb7a7624449262a0d764e59779d15ef996f25c5c3f2c04f8d"}) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) 2m36.627204007s ago: executing program 2 (id=2244): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7c", 0x38}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68", 0x34}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa551", 0x2e}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31", 0x97}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8) pwritev(r2, &(0x7f0000000300)=[{&(0x7f0000000e00)}, {&(0x7f0000000880)="ff83bffdd1f4828b21f97bfb9940a94f3600d85f12df214732c443800a73983dfaf6de4c374f0430f40f8c9f23cea42a1929bb54c905bfd614893fe2bbfe9a38d0524352a1ac9251e7569869bf3baee47afb50cb4030870b0065d0eb2dcec756e8c33e660f62a5dd4df32d499f758f93808e65071d1c9a4336effbaa73d2ebd7375c0c0a41d106174888647715ff2d162210a4a9c2", 0x95}, {&(0x7f0000000a80)="d14780f76141f88b8e37361c51910b20695a4cfb5a96f3a2716a92a7d1294e0777f665eddaced14e561bf05c6a64ce16fa1d43994ccccca85827f41dd9e8cb01ff39f940fefc7511fc", 0x49}], 0x3, 0x46, 0x3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m21.21982777s ago: executing program 34 (id=2244): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7c", 0x38}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68", 0x34}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa551", 0x2e}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff700710000000030203070004ffffffffffffff01082bdb86d1ce6a20c20000000018"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31", 0x97}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8) pwritev(r2, &(0x7f0000000300)=[{&(0x7f0000000e00)}, {&(0x7f0000000880)="ff83bffdd1f4828b21f97bfb9940a94f3600d85f12df214732c443800a73983dfaf6de4c374f0430f40f8c9f23cea42a1929bb54c905bfd614893fe2bbfe9a38d0524352a1ac9251e7569869bf3baee47afb50cb4030870b0065d0eb2dcec756e8c33e660f62a5dd4df32d499f758f93808e65071d1c9a4336effbaa73d2ebd7375c0c0a41d106174888647715ff2d162210a4a9c2", 0x95}, {&(0x7f0000000a80)="d14780f76141f88b8e37361c51910b20695a4cfb5a96f3a2716a92a7d1294e0777f665eddaced14e561bf05c6a64ce16fa1d43994ccccca85827f41dd9e8cb01ff39f940fefc7511fc", 0x49}], 0x3, 0x46, 0x3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 26.030970474s ago: executing program 5 (id=2418): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x8a142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x2, @loopback, 0x7fff}}, {{0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000140)="d0db9fa66bba5aee56607af18ee734f37a28c8c8d0897e9a20f1011e00"/43, 0x2b}, {&(0x7f00000004c0)="2704b0a7a74ec383d30000", 0xb}], 0x2) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x12) r7 = dup(r6) read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x2020) 23.280776804s ago: executing program 0 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r0, 0x22, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000", 0x1a) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd29, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) getsockname$netrom(r3, 0x0, &(0x7f0000000380)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1f}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000100), 0xff, 0x400400) 21.841591186s ago: executing program 0 (id=2423): syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x7, @output={0x0, 0x0, {0x4, 0x9}, 0x4f2, 0x5}}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) mmap(&(0x7f000037a000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x6c1e6000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r2, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c8", 0x14, 0x800, 0x0, 0x0) 19.580806204s ago: executing program 6 (id=2425): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) 19.357823819s ago: executing program 0 (id=2427): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff08000240000000330800014000000000080001400000000508000140000000c1"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000005"], 0x50) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000540)={0x3, &(0x7f0000000900)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000680)="fb8ad565a230f7a905b3dccbbafb7d04f4af3b2cb680907494e07ca62f76922c6137e89ae7de66d12141e314b3984672b930225d613aabbe43eae312071ed670e6b8aa2448bbd36452cde600699b8a188b7b88555286180838b3da0082ebde0000a4d9ab0688a8de836e4e579638137830db04cc64d177e9d1502a1ad937e19c4b812b0ac980ce7cb89e27fa54eb2a25e150dcb0996af1bda0bb346eac55b7683853412a7ca40000000011fe1feb728e91bf9a9e090dfc28285aa0fa84b3ee6262921580899ceca9ad22b7476d44919f48d6a4f5de3428350918feb2751d8105aa60bbffffff7f0000000017c8e57d01f13d41c36cd92d4fd5", &(0x7f0000000040)=@tcp, 0x4}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093", 0x3d}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66", 0x8}], 0x1}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0xf01c, 0x524f01) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18.082944478s ago: executing program 0 (id=2429): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 16.390905559s ago: executing program 0 (id=2430): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x2, 0x1, 0x4, 0x7, 0x8000009658, 0x7, 0x9, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x87d0339841435164, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_procfs(r0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x24, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x2, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x21}, [@FRA_FLOW={0x8, 0xb, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x4004004) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='hsr0\x00') 12.861948019s ago: executing program 3 (id=2434): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x3, &(0x7f0000000100)={0x101, 0x520}) r1 = syz_open_procfs(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) syz_open_procfs(0x0, 0x0) 12.722682614s ago: executing program 6 (id=2435): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x4, 0xfcc0, 0x41, 0x0, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2038060, &(0x7f0000000340)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) 11.543901334s ago: executing program 6 (id=2436): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@delchain={0x840, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x810, 0x2, [@TCA_FLOW_POLICE={0x80c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x800, 0x2, 0x2, 0x1, 0xd728, 0x8, 0x6, 0x9, 0x2, 0xff, 0x40, 0x3, 0x3, 0x0, 0x7, 0x9, 0x9, 0xfffffffa, 0x7fffffff, 0x9, 0x2, 0x401, 0x4, 0x40, 0x40, 0x6, 0x4, 0x6, 0x5, 0x6, 0xad2c, 0x4, 0x63, 0x913, 0x3, 0x3, 0x5, 0x4, 0x7fff, 0x7, 0xfffff000, 0x4, 0x8, 0xba73, 0x2, 0x7, 0x7fff, 0x1, 0x33, 0x3, 0x5, 0xb, 0x1ff, 0x10001, 0x20, 0x2, 0x4, 0xda6c, 0x7, 0x2, 0x0, 0xfffff800, 0xfffffff3, 0x776a, 0x8000000, 0xfffffffe, 0xc5, 0x194a6517, 0x0, 0x6, 0x9, 0xe, 0x2, 0x3, 0x80000000, 0x7ff, 0x40, 0xb, 0x7f, 0x9, 0x9, 0x1, 0xa, 0x4, 0x8c, 0x6, 0x8, 0x9, 0x4, 0x0, 0x2, 0x9, 0x2ac3, 0x10001, 0xfffffff8, 0x1, 0x4, 0x0, 0x7, 0x4, 0x0, 0x7, 0x5, 0x0, 0x6, 0x7, 0xed, 0x8, 0x5, 0x1ff, 0x6160, 0x85c4, 0x7, 0x6, 0x5, 0x800, 0x8, 0x5, 0x7, 0x0, 0x1, 0x40, 0x9, 0x4, 0x9, 0xff, 0x4, 0x2000000, 0x9, 0x2, 0x10000, 0x8, 0x7, 0x55, 0x7f, 0x9, 0x9, 0x8000, 0x2, 0x7, 0xdad, 0x45a6, 0x1, 0x8000, 0xbd, 0x4d689eca, 0x2, 0x9, 0xfffffff8, 0x5, 0x3, 0xffff, 0x10000, 0xc, 0x4, 0x3, 0x9, 0x4, 0x9, 0x9, 0x80000001, 0x5, 0x5, 0x9, 0x5, 0xf62d, 0x3, 0xff, 0x8, 0xef2a, 0x6, 0x8, 0x7, 0x1, 0xcf2c, 0xffffffff, 0xa, 0x8, 0x6599, 0x1, 0x9, 0x7, 0xff, 0x2, 0x1, 0x8, 0x1100000, 0x3, 0x8, 0x7fffffff, 0xb2c, 0x80, 0x9, 0x0, 0x80000001, 0x5, 0x8, 0x5, 0x60000, 0x9, 0x1, 0x1, 0x0, 0x6c5, 0xfff, 0x7, 0x7c, 0xffffa214, 0x9, 0x0, 0xfe1, 0x3, 0x40, 0x4, 0x5, 0x7, 0x8, 0x3, 0x2, 0x80000000, 0x5, 0x0, 0x45, 0x6, 0x8, 0x100, 0x0, 0x7, 0x0, 0x4, 0x0, 0xd, 0x9, 0x3, 0x83, 0x1b, 0x401, 0x2, 0x7, 0x6, 0x9, 0x2, 0x6, 0x0, 0x8, 0x401, 0x5, 0x0, 0x8, 0x1, 0xf, 0x6, 0x7ff, 0x1, 0xb]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x2, 0x5, 0x1, 0xff, 0x4, 0x1494, 0x7f, 0x8000, 0xa, 0x0, 0xb4fd, 0x3, 0x1ff, 0x7b1b86f6, 0x10001, 0x68f, 0x5, 0x3000000, 0x7fff, 0x7, 0x7956687f, 0x4, 0x7, 0x10, 0x1, 0x9, 0x2015, 0x3ff, 0xffffffff, 0x8, 0x1ff, 0x9000000, 0x8, 0x6, 0x1, 0xffffffff, 0x6, 0x8, 0x0, 0x7, 0x1ff, 0xfffffffe, 0x2c8, 0x0, 0x8, 0x8, 0xfffffffc, 0x0, 0x10040000, 0x6, 0x5, 0x9, 0x3de4, 0x2e, 0x3, 0x8, 0x3, 0xf1, 0x465e53f4, 0xfffffffc, 0x5, 0x42e7a71d, 0x9, 0x4, 0x3, 0xfffeffff, 0x1, 0x2, 0x9, 0x20f426, 0xb, 0x3, 0x0, 0x1, 0xdc0, 0x2, 0x6, 0xc51a, 0xff9, 0x9, 0x7, 0x8, 0xb, 0x6, 0x5, 0x1, 0x401, 0x7f, 0x2, 0xff, 0x7, 0x2, 0xffffffff, 0x3, 0x6, 0xfffffffc, 0x38e, 0x454c, 0x3ff, 0xea, 0x4a, 0x3, 0x84, 0x7, 0x7, 0x7, 0xff, 0x8000, 0x3, 0x0, 0x800, 0xc25, 0x2, 0x3, 0x1, 0x24cf70c8, 0x1, 0x1ff, 0x81, 0x5, 0x1000, 0x2, 0x100, 0x1000, 0x10000, 0x10000, 0x1800, 0xffff, 0x24, 0x6, 0x6, 0x10, 0x6b, 0x6, 0xfffffffb, 0x7, 0x4, 0x80000000, 0x8, 0xfffffffb, 0x9, 0x1ff, 0x401, 0x1, 0x1, 0xffffff81, 0x80, 0x8, 0x1, 0x31a, 0x5, 0x1, 0x10000, 0x9, 0x5, 0xffffe8ab, 0x8000, 0x800, 0x81, 0x7f2c, 0x3, 0x8e6, 0x7, 0x8, 0x2, 0x1, 0x1, 0x9, 0xfffffff8, 0x1, 0x8, 0xfffff895, 0xe804, 0x8, 0x5451, 0x3ff, 0x101, 0x8, 0xfffffff6, 0x10000, 0x10001, 0xcfde, 0x0, 0x100, 0x4, 0xfffffffe, 0x7, 0x4, 0xd4a3, 0x9, 0x2, 0xffffffff, 0x800, 0x4, 0x595, 0x7, 0x6, 0xc, 0x5, 0x0, 0x7, 0x7, 0xffff, 0x3, 0x545b, 0x7ff, 0x8, 0x7f, 0x9, 0x4, 0x3, 0x7, 0x1, 0x3, 0x7, 0x2, 0x401, 0xed4, 0xc737, 0x2, 0xfffffff9, 0xfffffc15, 0x6, 0x6, 0x4, 0x2, 0x1, 0xc89, 0x4, 0x7, 0x963, 0x8, 0x6, 0x6, 0x6, 0x3522, 0x5, 0x0, 0x7, 0x7ff, 0x4, 0x0, 0x9, 0x3, 0x5, 0x0, 0x80000001, 0x2, 0x80000000, 0x0, 0x6c71, 0xbf31, 0x9, 0x4]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4080}, 0xc810) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000400)) 11.224975587s ago: executing program 5 (id=2437): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e8d2745585f6400d1de4d18f5127e7a79a91a95161c79fb72b118bbcca20a4f", 0x34565559}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x8000000004) 10.096820447s ago: executing program 6 (id=2438): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000880)) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000500)=""/124) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) read$FUSE(r2, &(0x7f00000079c0)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_clone3(&(0x7f0000000300)={0x100000400, &(0x7f0000000040), 0x0, 0x0, {0x11}, &(0x7f00000005c0)=""/199, 0xc7, &(0x7f00000006c0)=""/235, &(0x7f0000000240)=[0x0], 0x1, {r2}}, 0x58) 7.840521438s ago: executing program 5 (id=2439): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x2) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) landlock_restrict_self(r0, 0x0) 7.694113745s ago: executing program 0 (id=2440): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x7e5, 0xb8c}, {0x7f, 0xffff}]}, 0x14, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) recvmmsg(r2, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x2400000}], 0x1, 0x12000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) connect$bt_sco(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) 7.411031823s ago: executing program 5 (id=2441): dup(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfd, 0x2, @loopback}, 0x1c) 4.619083412s ago: executing program 3 (id=2442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)}, 0x20002100) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$igmp(0x2, 0x3, 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, &(0x7f0000000040)=0x121) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x6f, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)}}], 0x1, 0x40004000) 4.618716552s ago: executing program 5 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000402f1701050000000000010902"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x141900) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[], 0x0) syz_open_dev$video(&(0x7f00000008c0), 0x7, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 4.616433772s ago: executing program 6 (id=2451): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) 3.38975512s ago: executing program 6 (id=2444): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) 3.28035293s ago: executing program 3 (id=2445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x8000, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)=@fd={0xfffffffe, 0x1, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x82, ';\'S;'}, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001100)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_emit_vhci(0x0, 0x17) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 2.032006918s ago: executing program 3 (id=2446): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000180)=0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(r0, 0x4, 0x0, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) stat(0x0, &(0x7f00000004c0)) chdir(0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xb0883, 0x84) 1.316795509s ago: executing program 3 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpjquota}]}, 0xfe, 0x524, &(0x7f0000000e00)="$eJzs3U9vI2cZAPBnJvEmu5uSFDiUSi0VLcpWsHbS0Dbi0C4S4lYJVO7bKHGiKE4cxU7ZRD2k4gMgIQS9cuKCxAdAQv0IqFIlekeAQAi2cOAADBp7TF0zzh9tbC/J7yeNPfPOzPs87649fudPZgK4tp6LiHsRMRURL0bEfFGeFkOcdId8uY8fvrOeD/mcN/+SRFKURcRCr7687HZnlZunxm0dHe+sNRr1g2K61t7dr7WOju9u765t1bfqeysry6+svrr68urSpbQzb9dr3/zDj3/ws2+99quvfu+39/90Z7p/ftGO80gvEvejzmslZvvK8sAHF6nkMTZVtKcy6UQAADiXvDP72Yj4Uqf/Px9T8d9u8WCXbnb82QEAAACXIXt9Lv6ZRGQAAADAlfV6RMxFklaLawHmIk2r1e41vJ+PW2mj2Wp/ZbN5uLeRz4tYiEq6ud2oLxXX1C5EJcmnl4uLgHvTLw1Mr0TEkxHxo/mbnenqerOxMemDHwAAAHBN3B7Y///7fHf/HwAAALhiFiadAAAAADByw/b/kzHnAQAAAIzOsP3/mTHnAQAAAIzEt994Ix+y2eg+/3rj7aPDnebbdzfqrZ3q7uF6db15sF/daja3Ovfs2z2rvkazuf+12Dt8UGvX7yW11tHx/d3m4V77/rbnBwIAAMCkPPnF9z9KIuLk6zc7Q+7GxlsRU0NWcK8AuDLSiyz8+9HlAYzfsJ954OqbnnQCwOScTDoBYNI+dauPkk5B/8U7af/Cvx5hUgAAwKVa/ELJ+f9iF6Ay6eSAkbrQ+X/gSnH+H66vC57//2BUeQDjV/mkB+BSILimznrUx9Cbd5Sd/79RtmCWnVkXAAAwUnOd1yStFucC5yJNq9WIJzp/6l9JNrcb9aWI+ExE/Ga+MpNPL3fX8XhAAAAAAAAAAAAAAAAAAAAAAAAAADinLEsiAwAAAK60iPSPSfH8r8X5F+YGjw/cSP4xH91HevWeD9g+WM7L/9orj/Z7b/7kwVq7ffDSuI9eAAAAAGV6++md9+VJZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVfPxw3fWi+HGOOP++RsRsfCp+OvdOdMx23mfjUpE3PpbEtN96yURMXUJ8U/ejYinyuIneVqxUGQxGD+NiJvjif9MlmWl8W9fQny4zt7Ptz/3yr5/aTzXeS///k8Xw6Pqbf9mSuL3tn9TQ7Z/T5wzxtMf/qI2NP67EU9Pl29/evGTIfGfL6uw5B/lre8eH/9PYbfyyH4asRjl8ftj1dq7+7XW0fHd7d21rfpWfW9lZfmV1VdXX15dqm1uN+rFa2kbf/jML/89UPSvrKvT/hgSf+GM9r+Qj1T6CrPBMEWwDx88/Fx3tDJQRSf+nefLP39PnRI//0x8ufgdyOcv9sZPuuP9nv35B8+WJlbE3xjS/rP+/+8Mq3TAi9/5/u/OuSgAMAato+OdtUajfjDykfeyLHuUem6NL9VrOdLr3Z2yzMwjhZh9XFr6/zgyExHjC3oZR7YAAIDHzSed/klnAgAAAAAAAAAAAAAAAAAAANdX6yjSUd9ObDDmyWSaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwqv8EAAD//57g0/s=") r6 = open(&(0x7f0000000040)='./bus\x00', 0xc0d40, 0x20) sendfile(r6, r6, 0x0, 0x1000000201005) 136.402382ms ago: executing program 3 (id=2448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 0s ago: executing program 5 (id=2449): timer_create(0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x147142, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M") ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000240)) listxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fallocate(r0, 0x0, 0x9, 0x10001) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000200)={0xb, 0x29, 0x1, {0x6}}, 0xfffffff4) kernel console output (not intermixed with test programs): s_write_data_pages+0x10/0x10 [ 966.833892][ T6377] do_writepages+0x32e/0x550 [ 966.833924][ T6377] ? reacquire_held_locks+0x104/0x190 [ 966.833946][ T6377] ? writeback_sb_inodes+0x477/0x1a20 [ 966.833978][ T6377] __writeback_single_inode+0x133/0x11a0 [ 966.834005][ T6377] ? do_raw_spin_unlock+0xf5/0x210 [ 966.834036][ T6377] writeback_sb_inodes+0x992/0x1a20 [ 966.834083][ T6377] ? __lock_acquire+0x6b5/0x2cf0 [ 966.834127][ T6377] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 966.834150][ T6377] ? do_raw_spin_lock+0x12b/0x2f0 [ 966.834219][ T6377] ? rcu_is_watching+0x15/0xb0 [ 966.834252][ T6377] wb_writeback+0x456/0xb70 [ 966.834280][ T6377] ? queue_io+0x2c1/0x4a0 [ 966.834313][ T6377] ? __pfx_wb_writeback+0x10/0x10 [ 966.834335][ T6377] ? do_raw_spin_lock+0x12b/0x2f0 [ 966.834378][ T6377] wb_workfn+0x414/0xf50 [ 966.834414][ T6377] ? look_up_lock_class+0x57/0x110 [ 966.834461][ T6377] ? __pfx_wb_workfn+0x10/0x10 [ 966.834497][ T6377] ? do_raw_spin_lock+0x12b/0x2f0 [ 966.834526][ T6377] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 966.834576][ T6377] ? process_one_work+0x870/0x1720 [ 966.834605][ T6377] process_one_work+0x963/0x1720 [ 966.834660][ T6377] ? __pfx_process_one_work+0x10/0x10 [ 966.834689][ T6377] ? do_raw_spin_lock+0x12b/0x2f0 [ 966.834733][ T6377] worker_thread+0xb46/0x1140 [ 966.834794][ T6377] kthread+0x388/0x470 [ 966.834819][ T6377] ? __pfx_worker_thread+0x10/0x10 [ 966.834848][ T6377] ? __pfx_kthread+0x10/0x10 [ 966.834874][ T6377] ret_from_fork+0x51e/0xb90 [ 966.834908][ T6377] ? __pfx_ret_from_fork+0x10/0x10 [ 966.834936][ T6377] ? __switch_to+0xc7d/0x1450 [ 966.834966][ T6377] ? __pfx_kthread+0x10/0x10 [ 966.834992][ T6377] ret_from_fork_asm+0x1a/0x30 [ 966.835032][ T6377] [ 966.835319][ T6377] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 967.120246][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.196357][ T69] bridge_slave_1: left allmulticast mode [ 967.202221][ T69] bridge_slave_1: left promiscuous mode [ 967.208086][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.245329][ T69] bridge_slave_0: left allmulticast mode [ 967.808583][ T69] bridge_slave_0: left promiscuous mode [ 967.816460][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.064081][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.087252][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.098552][ T69] bond0 (unregistering): Released all slaves [ 970.124282][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.138767][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.169591][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.246393][T13647] syzkaller0: entered promiscuous mode [ 970.259093][T13647] syzkaller0: entered allmulticast mode [ 970.347656][ T69] hsr_slave_0: left promiscuous mode [ 970.373075][ T69] hsr_slave_1: left promiscuous mode [ 970.379560][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.388154][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.596700][ T69] team0 (unregistering): Port device team_slave_1 removed [ 970.647924][ T69] team0 (unregistering): Port device team_slave_0 removed [ 971.015905][ T29] audit: type=1804 audit(2000000656.458:752): pid=13655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1884" name="file0" dev="tmpfs" ino=2299 res=1 errno=0 [ 971.951618][T13475] hsr_slave_0: entered promiscuous mode [ 972.699737][T13475] hsr_slave_1: entered promiscuous mode [ 972.792667][T13475] debugfs: 'hsr0' already exists in 'hsr' [ 972.798761][T13475] Cannot create hsr debugfs directory [ 973.944253][T13307] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 974.368432][T13674] loop2: detected capacity change from 0 to 512 [ 974.570871][T13674] EXT4-fs (loop2): Test dummy encryption mode enabled [ 974.588978][T13674] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 974.635788][T13674] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1889: bad orphan inode 131083 [ 974.663333][T13307] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 974.677654][T13674] loop2: lost filesystem error report for type 5 error -117 [ 974.685262][T13674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.809872][T13679] loop0: detected capacity change from 0 to 256 [ 974.852023][T13307] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 975.865244][T13686] xt_CT: No such helper "pptp" [ 976.086649][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.831198][T13307] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 977.754078][T13705] netlink: 'syz.3.1893': attribute type 4 has an invalid length. [ 980.527353][T13307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.034468][T13307] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.144006][T13731] loop2: detected capacity change from 0 to 256 [ 981.549280][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.556543][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.558474][T13731] FAT-fs (loop2): Directory bread(block 64) failed [ 981.570549][T13731] FAT-fs (loop2): Directory bread(block 65) failed [ 981.577190][T13731] FAT-fs (loop2): Directory bread(block 66) failed [ 981.583814][T13731] FAT-fs (loop2): Directory bread(block 67) failed [ 981.591769][T13731] FAT-fs (loop2): Directory bread(block 68) failed [ 981.598342][T13731] FAT-fs (loop2): Directory bread(block 69) failed [ 981.606445][T13731] FAT-fs (loop2): Directory bread(block 70) failed [ 981.613167][T13731] FAT-fs (loop2): Directory bread(block 71) failed [ 981.619830][T13731] FAT-fs (loop2): Directory bread(block 72) failed [ 981.626391][T13731] FAT-fs (loop2): Directory bread(block 73) failed [ 981.637484][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.644794][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.118758][T13738] set match dimension is over the limit! [ 983.765460][T13749] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 983.773110][T13749] overlayfs: failed to set xattr on upper [ 983.779022][T13749] overlayfs: ...falling back to redirect_dir=nofollow. [ 983.788316][T13749] overlayfs: ...falling back to index=off. [ 983.794320][T13749] overlayfs: ...falling back to uuid=null. [ 983.870496][T13750] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 986.457999][T13748] loop0: detected capacity change from 0 to 4096 [ 987.093677][T13748] ntfs3(loop0): Failed to read $AttrDef (-4). [ 988.389463][T13475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 988.437312][T13475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 988.450865][T11453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 988.473304][T11453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 988.485053][T11453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 988.498373][T11453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 988.517678][T11453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 988.858203][T13475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 988.922032][T13475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 989.087743][T13776] lo speed is unknown, defaulting to 1000 [ 989.132284][T13776] lo speed is unknown, defaulting to 1000 [ 990.394160][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 990.970859][ T5839] Bluetooth: hci5: command tx timeout [ 993.044605][ T5839] Bluetooth: hci5: command tx timeout [ 993.373941][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.394140][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 993.421955][T13475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.507912][ T29] audit: type=1800 audit(2000000678.988:753): pid=13819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1917" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 993.509348][T13819] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 993.537897][T13475] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.538483][T13819] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 993.554459][T13819] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 993.603582][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.611060][ T9823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.678198][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.685585][ T9823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.803765][T13776] chnl_net:caif_netlink_parms(): no params data found [ 993.847785][T13822] loop0: detected capacity change from 0 to 4096 [ 995.252233][ T5839] Bluetooth: hci5: command tx timeout [ 995.840873][T13776] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.848395][T13776] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.855995][T13776] bridge_slave_0: entered allmulticast mode [ 995.864770][T13776] bridge_slave_0: entered promiscuous mode [ 995.874457][T13776] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.881944][T13776] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.847612][T13776] bridge_slave_1: entered allmulticast mode [ 996.856790][T13776] bridge_slave_1: entered promiscuous mode [ 997.279089][ T5839] Bluetooth: hci5: command tx timeout [ 998.319916][T13853] loop2: detected capacity change from 0 to 131072 [ 998.344423][T13853] F2FS-fs (loop2): Test dummy encryption mode enabled [ 998.403913][T13853] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 998.414237][T13853] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 998.655172][T13776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.676313][T13776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.038852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 999.046913][ C1] lec:lec_tx_timeout: lec0 [ 999.368189][T13866] fscrypt (loop2, inode 3): Unsupported encryption flags (0x10) [ 999.627834][T13776] team0: Port device team_slave_0 added [ 999.663427][T13864] tipc: Enabling of bearer rejected, failed to enable media [ 999.820219][ T69] bridge_slave_1: left allmulticast mode [ 999.864860][ T69] bridge_slave_1: left promiscuous mode [ 999.891542][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.968966][ T69] bridge_slave_0: left allmulticast mode [ 999.994147][ T69] bridge_slave_0: left promiscuous mode [ 1000.008895][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.852170][ T29] audit: type=1326 audit(2000000686.298:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1001.006403][ T29] audit: type=1326 audit(2000000686.298:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1001.714567][ T29] audit: type=1326 audit(2000000686.298:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.356817][ T29] audit: type=1326 audit(2000000686.298:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.381366][ T29] audit: type=1326 audit(2000000686.298:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.421952][ T29] audit: type=1326 audit(2000000686.298:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.498968][ T29] audit: type=1326 audit(2000000686.358:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.549030][ T29] audit: type=1326 audit(2000000686.358:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.595210][ T29] audit: type=1326 audit(2000000686.358:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.642082][ T29] audit: type=1326 audit(2000000686.358:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54659c799 code=0x7ffc0000 [ 1002.811270][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.834051][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.863107][ T69] bond0 (unregistering): Released all slaves [ 1002.907796][T13776] team0: Port device team_slave_1 added [ 1003.020738][T13889] lo speed is unknown, defaulting to 1000 [ 1003.029084][T13889] lo speed is unknown, defaulting to 1000 [ 1004.017856][ T69] hsr_slave_0: left promiscuous mode [ 1004.056244][ T69] hsr_slave_1: left promiscuous mode [ 1004.084942][T11453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1004.105732][T11453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1004.115332][T11453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1004.126975][T11453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1004.147160][T11453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1004.155400][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.236199][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.178606][T13906] trusted_key: encrypted_key: insufficient parameters specified [ 1005.294088][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1005.326346][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1005.754758][T13776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.765029][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.792150][T13776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.373842][T11453] Bluetooth: hci2: command tx timeout [ 1006.587694][T13906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.604049][T13906] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1006.671462][T13776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.682321][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.752061][T13776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.774287][T13895] lo speed is unknown, defaulting to 1000 [ 1006.901961][T13895] lo speed is unknown, defaulting to 1000 [ 1006.997563][T13913] loop2: detected capacity change from 0 to 128 [ 1007.289855][T13921] loop0: detected capacity change from 0 to 64 [ 1008.400454][T11453] Bluetooth: hci2: command tx timeout [ 1008.818279][T13929] /dev/nullb0: Can't open blockdev [ 1009.291384][T13776] hsr_slave_0: entered promiscuous mode [ 1009.320492][T13776] hsr_slave_1: entered promiscuous mode [ 1009.340661][T13776] debugfs: 'hsr0' already exists in 'hsr' [ 1009.508380][T13776] Cannot create hsr debugfs directory [ 1009.653450][T13933] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1010.479137][T11453] Bluetooth: hci2: command tx timeout [ 1012.250053][T13946] 8021q: VLANs not supported on wg2 [ 1012.589076][T11453] Bluetooth: hci2: command tx timeout [ 1014.044627][T13962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1945'. [ 1014.448845][T13969] loop2: detected capacity change from 0 to 64 [ 1014.530560][T13969] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 1015.158566][T12009] udevd[12009]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1015.315036][T12009] udevd[12009]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1017.394933][T13991] netlink: 'syz.3.1951': attribute type 10 has an invalid length. [ 1017.479748][T13991] team0: Port device team_slave_0 removed [ 1017.544528][T13991] team0: Port device team_slave_1 removed [ 1017.576302][T13991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.626873][T13991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.674969][T13991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1021.334957][T13895] chnl_net:caif_netlink_parms(): no params data found [ 1022.839412][T14053] loop0: detected capacity change from 0 to 128 [ 1023.104843][T14053] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1023.124138][T14053] ext4 filesystem being mounted at /433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.549210][ T13] bridge_slave_1: left allmulticast mode [ 1024.565725][ T13] bridge_slave_1: left promiscuous mode [ 1025.028445][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.091979][ T13] bridge_slave_0: left allmulticast mode [ 1025.102911][ T5825] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1025.113890][ T13] bridge_slave_0: left promiscuous mode [ 1025.125794][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.687507][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 1026.212578][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.224756][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.238934][ T13] bond0 (unregistering): Released all slaves [ 1026.345711][T13895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.376432][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.386359][T13895] bridge_slave_0: entered allmulticast mode [ 1026.395508][T13895] bridge_slave_0: entered promiscuous mode [ 1026.410692][T13895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.418200][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.425924][T13895] bridge_slave_1: entered allmulticast mode [ 1026.435217][T13895] bridge_slave_1: entered promiscuous mode [ 1026.500664][T13895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.521318][T13895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.576925][T13895] team0: Port device team_slave_0 added [ 1026.588431][T13895] team0: Port device team_slave_1 added [ 1026.686651][T13895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.742203][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.534424][T13895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.555559][T13895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.563576][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.278925][T13895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.614497][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 1028.898333][ T13] hsr_slave_0: left promiscuous mode [ 1029.082408][ T13] hsr_slave_1: left promiscuous mode [ 1029.175369][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.290073][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.653188][T14133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1031.712543][T14133] block device autoloading is deprecated and will be removed. [ 1031.835342][T14144] netlink: 'syz.3.1979': attribute type 16 has an invalid length. [ 1031.857852][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 1032.190676][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1032.208736][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1033.158029][T14152] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1033.568468][T14155] loop2: detected capacity change from 0 to 40427 [ 1033.579711][T14155] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1033.587527][T14155] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1033.608006][T14155] F2FS-fs (loop2): invalid crc value [ 1033.719254][T14155] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1033.741786][T14155] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1033.748941][T14155] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1033.960961][ T7021] lec:lec_start_xmit: lec0:No lecd attached [ 1034.163394][T14164] bio_check_eod: 123 callbacks suppressed [ 1034.163443][T14164] syz.2.1983: attempt to access beyond end of device [ 1034.163443][T14164] loop2: rw=8423425, sector=78248, nr_sectors = 4 limit=40427 [ 1034.242591][T14164] overlayfs: missing 'lowerdir' [ 1034.254485][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1034.254536][ T29] audit: type=1800 audit(2000000719.568:775): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1983" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 res=0 errno=0 [ 1034.793305][T13895] hsr_slave_0: entered promiscuous mode [ 1034.817105][T13895] hsr_slave_1: entered promiscuous mode [ 1034.817955][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'. [ 1034.841847][T13895] debugfs: 'hsr0' already exists in 'hsr' [ 1034.868207][T13895] Cannot create hsr debugfs directory [ 1034.976269][ T5831] syz-executor: attempt to access beyond end of device [ 1034.976269][ T5831] loop2: rw=8390659, sector=77824, nr_sectors = 432 limit=40427 [ 1035.009572][ T5831] F2FS-fs (loop2): Issue discard(9728, 9728, 54) failed, ret: -5 [ 1037.338577][T14198] netlink: 'syz.3.1992': attribute type 16 has an invalid length. [ 1037.371625][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 1037.458691][T13776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1039.038925][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 1039.046993][ C1] lec:lec_tx_timeout: lec0 [ 1039.367845][T13776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1039.388472][T13776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1039.595237][T13776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1039.625561][T14218] loop0: detected capacity change from 0 to 4096 [ 1039.707139][T14216] loop2: detected capacity change from 0 to 40427 [ 1039.723203][T14216] F2FS-fs (loop2): invalid crc value [ 1039.824197][T14216] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1039.839023][T14216] F2FS-fs (loop2): Start checkpoint disabled! [ 1039.856480][T14216] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1039.864641][T14216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1040.090029][ T29] audit: type=1800 audit(2000000725.548:776): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1995" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1040.471059][T14230] syz.2.1995: attempt to access beyond end of device [ 1040.471059][T14230] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1040.938708][T14230] syz.2.1995: attempt to access beyond end of device [ 1040.938708][T14230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1040.963283][T14230] syz.2.1995: attempt to access beyond end of device [ 1040.963283][T14230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1041.011556][T14230] syz.2.1995: attempt to access beyond end of device [ 1041.011556][T14230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1041.029871][T14230] syz.2.1995: attempt to access beyond end of device [ 1041.029871][T14230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1041.120886][T14230] syz.2.1995: attempt to access beyond end of device [ 1041.120886][T14230] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1041.136094][T14230] syz.2.1995: attempt to access beyond end of device [ 1041.136094][T14230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1041.156523][T14230] syz.2.1995: attempt to access beyond end of device [ 1041.156523][T14230] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1041.173906][T14230] syz.2.1995: attempt to access beyond end of device [ 1041.173906][T14230] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1041.192414][T14230] syz.2.1995: attempt to access beyond end of device [ 1041.192414][T14230] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1043.336547][ T9823] CPU: 1 UID: 0 PID: 9823 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.336584][ T9823] Tainted: [L]=SOFTLOCKUP [ 1043.336592][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1043.336604][ T9823] Workqueue: writeback wb_workfn (flush-7:2) [ 1043.336644][ T9823] Call Trace: [ 1043.336652][ T9823] [ 1043.336661][ T9823] dump_stack_lvl+0xe8/0x150 [ 1043.336709][ T9823] f2fs_handle_critical_error+0x37c/0x540 [ 1043.336745][ T9823] f2fs_write_end_io+0xcdb/0xff0 [ 1043.336789][ T9823] __submit_merged_bio+0x256/0x700 [ 1043.336814][ T9823] __submit_merged_write_cond+0x3c9/0x4e0 [ 1043.336840][ T9823] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1043.336879][ T9823] f2fs_write_data_pages+0x2975/0x35e0 [ 1043.336935][ T9823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1043.336972][ T9823] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1043.337031][ T9823] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1043.337072][ T9823] ? __lock_acquire+0x6b5/0x2cf0 [ 1043.337114][ T9823] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1043.337148][ T9823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1043.337172][ T9823] do_writepages+0x32e/0x550 [ 1043.337198][ T9823] ? reacquire_held_locks+0x104/0x190 [ 1043.337215][ T9823] ? writeback_sb_inodes+0x477/0x1a20 [ 1043.337240][ T9823] __writeback_single_inode+0x133/0x11a0 [ 1043.337263][ T9823] ? do_raw_spin_unlock+0xf5/0x210 [ 1043.337289][ T9823] writeback_sb_inodes+0x992/0x1a20 [ 1043.337339][ T9823] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1043.337358][ T9823] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.337419][ T9823] ? rcu_is_watching+0x15/0xb0 [ 1043.337448][ T9823] wb_writeback+0x456/0xb70 [ 1043.337470][ T9823] ? queue_io+0x2c1/0x4a0 [ 1043.337496][ T9823] ? __pfx_wb_writeback+0x10/0x10 [ 1043.337513][ T9823] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.337547][ T9823] wb_workfn+0x414/0xf50 [ 1043.337575][ T9823] ? look_up_lock_class+0x57/0x110 [ 1043.337614][ T9823] ? __pfx_wb_workfn+0x10/0x10 [ 1043.337645][ T9823] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.337668][ T9823] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1043.337722][ T9823] ? process_one_work+0x870/0x1720 [ 1043.337748][ T9823] process_one_work+0x963/0x1720 [ 1043.337796][ T9823] ? __pfx_process_one_work+0x10/0x10 [ 1043.337820][ T9823] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.337856][ T9823] worker_thread+0xb46/0x1140 [ 1043.337907][ T9823] kthread+0x388/0x470 [ 1043.337930][ T9823] ? __pfx_worker_thread+0x10/0x10 [ 1043.337957][ T9823] ? __pfx_kthread+0x10/0x10 [ 1043.337980][ T9823] ret_from_fork+0x51e/0xb90 [ 1043.338007][ T9823] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.338029][ T9823] ? __switch_to+0xc7d/0x1450 [ 1043.338053][ T9823] ? __pfx_kthread+0x10/0x10 [ 1043.338073][ T9823] ret_from_fork_asm+0x1a/0x30 [ 1043.338105][ T9823] [ 1043.354336][ T9823] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1044.001600][T14262] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1044.340955][T12801] IPVS: starting estimator thread 0... [ 1044.429126][T14263] IPVS: using max 25 ests per chain, 60000 per kthread [ 1044.645999][T13776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.926245][T14272] libceph: resolve '400' (ret=-3): failed [ 1045.615335][T13776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.683281][T13776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1045.694285][T13776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.745381][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.752692][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.763094][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.770509][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.069453][T14297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2005'. [ 1048.252027][T14302] loop2: detected capacity change from 0 to 4096 [ 1048.509459][T14306] tipc: Started in network mode [ 1048.514512][T14306] tipc: Node identity 4004, cluster identity 4711 [ 1048.521353][T14306] tipc: Node number set to 16388 [ 1049.243035][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1049.328712][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.342170][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1049.352862][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1049.360947][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1051.666241][ T5839] Bluetooth: hci3: command tx timeout [ 1053.682372][ T5839] Bluetooth: hci3: command tx timeout [ 1054.071363][T14344] vlan2: entered allmulticast mode [ 1054.089281][T14344] dummy0: entered allmulticast mode [ 1054.120634][T14344] bridge0: port 1(vlan2) entered blocking state [ 1054.139197][T14344] bridge0: port 1(vlan2) entered disabled state [ 1054.168449][T14344] dummy0: entered promiscuous mode [ 1054.213457][T14344] bridge0: port 1(vlan2) entered blocking state [ 1054.222816][T14344] bridge0: port 1(vlan2) entered forwarding state [ 1054.403198][T14308] lo speed is unknown, defaulting to 1000 [ 1054.651770][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.666919][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 1054.759364][T14375] loop2: detected capacity change from 0 to 40427 [ 1054.786266][T14375] F2FS-fs (loop2): invalid crc value [ 1054.907709][T14308] lo speed is unknown, defaulting to 1000 [ 1055.069078][T14375] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1055.094785][T14375] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1055.519793][T14386] loop0: detected capacity change from 0 to 64 [ 1055.538584][T14386] hfs: get root inode failed [ 1055.765734][ T5839] Bluetooth: hci3: command tx timeout [ 1056.336107][ T29] audit: type=1800 audit(2000000741.588:777): pid=14388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2019" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 1057.269882][ T5831] bio_check_eod: 182 callbacks suppressed [ 1057.269906][ T5831] syz-executor: attempt to access beyond end of device [ 1057.269906][ T5831] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1057.601339][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.601375][ T5831] Tainted: [L]=SOFTLOCKUP [ 1057.601383][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.601396][ T5831] Call Trace: [ 1057.601405][ T5831] [ 1057.601414][ T5831] dump_stack_lvl+0xe8/0x150 [ 1057.601453][ T5831] f2fs_handle_critical_error+0x37c/0x540 [ 1057.601487][ T5831] f2fs_write_end_io+0xcdb/0xff0 [ 1057.601539][ T5831] __submit_merged_bio+0x256/0x700 [ 1057.601572][ T5831] __submit_merged_write_cond+0x3c9/0x4e0 [ 1057.601608][ T5831] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1057.601661][ T5831] f2fs_write_data_pages+0x2975/0x35e0 [ 1057.601749][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1057.601792][ T5831] ? css_rstat_updated+0x23a/0x530 [ 1057.601850][ T5831] ? mod_memcg_lruvec_state+0x20c/0x440 [ 1057.601880][ T5831] ? __lock_acquire+0x6b5/0x2cf0 [ 1057.601927][ T5831] ? __lock_acquire+0x6b5/0x2cf0 [ 1057.601961][ T5831] ? do_raw_spin_lock+0x12b/0x2f0 [ 1057.601998][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 1057.602024][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1057.602051][ T5831] do_writepages+0x32e/0x550 [ 1057.602088][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 1057.602119][ T5831] filemap_fdatawrite+0x1e9/0x2f0 [ 1057.602149][ T5831] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1057.602230][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 1057.602261][ T5831] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1057.602307][ T5831] f2fs_write_checkpoint+0x9df/0x26a0 [ 1057.602377][ T5831] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1057.602470][ T5831] kill_f2fs_super+0x314/0x720 [ 1057.602504][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1057.602547][ T5831] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.602600][ T5831] deactivate_locked_super+0xbc/0x130 [ 1057.602631][ T5831] cleanup_mnt+0x437/0x4d0 [ 1057.602668][ T5831] task_work_run+0x1d9/0x270 [ 1057.602718][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 1057.602757][ T5831] exit_to_user_mode_loop+0xed/0x480 [ 1057.602784][ T5831] ? rcu_is_watching+0x15/0xb0 [ 1057.602809][ T5831] do_syscall_64+0x32d/0xf80 [ 1057.602838][ T5831] ? trace_irq_disable+0x3b/0x150 [ 1057.602861][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.602883][ T5831] ? clear_bhb_loop+0x40/0x90 [ 1057.602909][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.602930][ T5831] RIP: 0033:0x7fbdabb9d9d7 [ 1057.602950][ T5831] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1057.602968][ T5831] RSP: 002b:00007ffd90ec9548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1057.602990][ T5831] RAX: 0000000000000000 RBX: 00007fbdabc31f90 RCX: 00007fbdabb9d9d7 [ 1057.603004][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd90ec9600 [ 1057.603017][ T5831] RBP: 00007ffd90ec9600 R08: 00007ffd90eca600 R09: 00000000ffffffff [ 1057.603031][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd90eca690 [ 1057.603043][ T5831] R13: 00007fbdabc31f90 R14: 0000000000101ee5 R15: 00007ffd90eca6d0 [ 1057.603081][ T5831] [ 1057.603932][ T5831] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1057.900203][ T5839] Bluetooth: hci3: command tx timeout [ 1058.074016][T13895] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1058.702692][T13895] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1058.803778][T13895] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1058.855603][T13895] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1059.849082][T14415] Device name cannot be null; rc = [-22] [ 1060.078855][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 1060.086912][ C1] lec:lec_tx_timeout: lec0 [ 1060.567134][T14421] loop0: detected capacity change from 0 to 8192 [ 1060.592238][T14421] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1060.640520][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 1060.663221][ T29] audit: type=1800 audit(2000000746.148:778): pid=14421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2028" name="file2" dev="loop0" ino=1048634 res=0 errno=0 [ 1060.765489][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1060.806131][T14421] FAT-fs (loop0): Filesystem has been set read-only [ 1060.836732][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1060.879697][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1060.926226][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1060.962572][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1061.002047][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1061.057416][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1061.088966][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1061.121490][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1061.288660][T14421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1061.558175][ T138] bridge_slave_1: left allmulticast mode [ 1061.581683][ T138] bridge_slave_1: left promiscuous mode [ 1061.606259][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.672753][ T138] bridge_slave_0: left allmulticast mode [ 1061.691333][ T138] bridge_slave_0: left promiscuous mode [ 1061.709215][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.227502][T14451] loop0: detected capacity change from 0 to 40427 [ 1062.483370][T14451] F2FS-fs (loop0): invalid crc value [ 1062.624956][T14451] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1062.637657][T14451] F2FS-fs (loop0): Start checkpoint disabled! [ 1062.709399][T14451] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1062.719157][T14451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1063.228694][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.228694][T14451] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1063.243062][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.243062][T14451] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1063.257564][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.257564][T14451] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1063.271896][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.271896][T14451] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1063.286148][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.286148][T14451] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1063.301014][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.301014][T14451] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1063.315288][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.315288][T14451] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1063.329610][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.329610][T14451] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1063.343989][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.343989][T14451] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1063.358328][T14451] syz.0.2030: attempt to access beyond end of device [ 1063.358328][T14451] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1063.436452][ T29] audit: type=1800 audit(2000000748.718:779): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2030" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 1063.688553][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.745334][ T69] CPU: 0 UID: 0 PID: 69 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.745371][ T69] Tainted: [L]=SOFTLOCKUP [ 1063.745383][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1063.745397][ T69] Workqueue: writeback wb_workfn (flush-7:0) [ 1063.745441][ T69] Call Trace: [ 1063.745450][ T69] [ 1063.745459][ T69] dump_stack_lvl+0xe8/0x150 [ 1063.745493][ T69] f2fs_handle_critical_error+0x37c/0x540 [ 1063.745526][ T69] f2fs_write_end_io+0xcdb/0xff0 [ 1063.745574][ T69] __submit_merged_bio+0x256/0x700 [ 1063.745605][ T69] __submit_merged_write_cond+0x3c9/0x4e0 [ 1063.745639][ T69] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1063.745689][ T69] f2fs_write_data_pages+0x2975/0x35e0 [ 1063.745755][ T69] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1063.745796][ T69] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1063.745864][ T69] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1063.745915][ T69] ? __lock_acquire+0x6b5/0x2cf0 [ 1063.745960][ T69] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1063.745995][ T69] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1063.746024][ T69] do_writepages+0x32e/0x550 [ 1063.746055][ T69] ? reacquire_held_locks+0x104/0x190 [ 1063.746077][ T69] ? writeback_sb_inodes+0x477/0x1a20 [ 1063.746108][ T69] __writeback_single_inode+0x133/0x11a0 [ 1063.746134][ T69] ? do_raw_spin_unlock+0xf5/0x210 [ 1063.746166][ T69] writeback_sb_inodes+0x992/0x1a20 [ 1063.746220][ T69] ? __lock_acquire+0x6b5/0x2cf0 [ 1063.746256][ T69] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1063.746279][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 1063.746348][ T69] ? rcu_is_watching+0x15/0xb0 [ 1063.746380][ T69] wb_writeback+0x456/0xb70 [ 1063.746408][ T69] ? queue_io+0x2c1/0x4a0 [ 1063.746441][ T69] ? __pfx_wb_writeback+0x10/0x10 [ 1063.746463][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 1063.746507][ T69] wb_workfn+0x414/0xf50 [ 1063.746541][ T69] ? look_up_lock_class+0x57/0x110 [ 1063.746587][ T69] ? __pfx_wb_workfn+0x10/0x10 [ 1063.746623][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 1063.746652][ T69] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1063.746701][ T69] ? process_one_work+0x870/0x1720 [ 1063.746731][ T69] process_one_work+0x963/0x1720 [ 1063.746785][ T69] ? __pfx_process_one_work+0x10/0x10 [ 1063.746813][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 1063.746858][ T69] worker_thread+0xb46/0x1140 [ 1063.746919][ T69] kthread+0x388/0x470 [ 1063.746943][ T69] ? __pfx_worker_thread+0x10/0x10 [ 1063.746972][ T69] ? __pfx_kthread+0x10/0x10 [ 1063.746997][ T69] ret_from_fork+0x51e/0xb90 [ 1063.747032][ T69] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.747059][ T69] ? __switch_to+0xc7d/0x1450 [ 1063.747091][ T69] ? __pfx_kthread+0x10/0x10 [ 1063.747116][ T69] ret_from_fork_asm+0x1a/0x30 [ 1063.747156][ T69] [ 1063.747380][ T69] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1064.055603][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.147648][ T138] bond0 (unregistering): Released all slaves [ 1064.209194][T11453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1064.229579][T11453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1064.241929][T11453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1064.250189][T11453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1064.258013][T11453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1064.438278][T14308] chnl_net:caif_netlink_parms(): no params data found [ 1065.415919][T14477] nbd: couldn't find a device at index 2147483646 [ 1065.621416][ T138] hsr_slave_0: left promiscuous mode [ 1065.660758][ T138] hsr_slave_1: left promiscuous mode [ 1065.692782][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.737110][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.769864][T14489] loop0: detected capacity change from 0 to 256 [ 1065.906898][T14489] FAT-fs (loop0): Directory bread(block 64) failed [ 1065.920694][T14489] FAT-fs (loop0): Directory bread(block 65) failed [ 1065.934870][T14489] FAT-fs (loop0): Directory bread(block 66) failed [ 1065.948452][T14489] FAT-fs (loop0): Directory bread(block 67) failed [ 1065.964420][T14489] FAT-fs (loop0): Directory bread(block 68) failed [ 1065.982327][T14489] FAT-fs (loop0): Directory bread(block 69) failed [ 1065.997565][T14489] FAT-fs (loop0): Directory bread(block 70) failed [ 1066.012871][T14489] FAT-fs (loop0): Directory bread(block 71) failed [ 1066.031795][T14489] FAT-fs (loop0): Directory bread(block 72) failed [ 1066.048584][T14489] FAT-fs (loop0): Directory bread(block 73) failed [ 1066.318905][T13777] Bluetooth: hci5: command tx timeout [ 1066.444799][T14500] loop2: detected capacity change from 0 to 128 [ 1066.645437][T14502] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 1067.105870][ T138] team0 (unregistering): Port device team_slave_1 removed [ 1067.133598][ T138] team0 (unregistering): Port device team_slave_0 removed [ 1067.338042][T14466] lo speed is unknown, defaulting to 1000 [ 1067.346437][T14466] lo speed is unknown, defaulting to 1000 [ 1067.379049][T14477] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1067.400254][T14477] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1067.422091][T14477] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1067.691186][T14477] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1067.950278][T14308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.958395][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.972638][T14308] bridge_slave_0: entered allmulticast mode [ 1067.981920][T14308] bridge_slave_0: entered promiscuous mode [ 1067.992535][T14308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.028038][T14308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.049628][T14308] bridge_slave_1: entered allmulticast mode [ 1068.069338][T14308] bridge_slave_1: entered promiscuous mode [ 1068.409681][T13777] Bluetooth: hci5: command tx timeout [ 1068.912612][T14308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.096464][T14308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.407936][T14524] xt_CT: No such helper "pptp" [ 1070.489096][T13777] Bluetooth: hci5: command tx timeout [ 1070.612122][T14308] team0: Port device team_slave_0 added [ 1070.656553][T14308] team0: Port device team_slave_1 added [ 1071.190229][T14532] loop2: detected capacity change from 0 to 32768 [ 1071.318310][T14532] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1071.357267][T14532] XFS (loop2): Ending clean mount [ 1071.368840][T14532] XFS (loop2): Quotacheck needed: Please wait. [ 1071.491145][T14308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.536293][T14308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.610027][T14308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.661209][T14308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.676329][T14308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.725611][T14308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.865254][T14532] XFS (loop2): Quotacheck: Done. [ 1072.845913][T13777] Bluetooth: hci5: command tx timeout [ 1075.268462][T14466] chnl_net:caif_netlink_parms(): no params data found [ 1075.859620][ T5831] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1077.267790][T14308] hsr_slave_0: entered promiscuous mode [ 1077.275519][T14308] hsr_slave_1: entered promiscuous mode [ 1077.283503][T14308] debugfs: 'hsr0' already exists in 'hsr' [ 1077.317250][T14308] Cannot create hsr debugfs directory [ 1077.567537][T14589] loop0: detected capacity change from 0 to 40427 [ 1077.603152][T14589] F2FS-fs (loop0): invalid crc value [ 1077.684422][T14589] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1077.695872][T14589] F2FS-fs (loop0): Start checkpoint disabled! [ 1077.712057][T14589] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1077.738980][T14589] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1078.700893][ T29] audit: type=1800 audit(2000000764.188:780): pid=14593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2051" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 1078.765092][T14593] bio_check_eod: 182 callbacks suppressed [ 1078.765114][T14593] syz.0.2051: attempt to access beyond end of device [ 1078.765114][T14593] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1078.862645][T14593] syz.0.2051: attempt to access beyond end of device [ 1078.862645][T14593] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1078.940841][T14593] syz.0.2051: attempt to access beyond end of device [ 1078.940841][T14593] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1079.185479][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 1079.554206][ T998] kworker/u8:6: attempt to access beyond end of device [ 1079.554206][ T998] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1079.593788][ T998] CPU: 1 UID: 0 PID: 998 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1079.593824][ T998] Tainted: [L]=SOFTLOCKUP [ 1079.593831][ T998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.593845][ T998] Workqueue: writeback wb_workfn (flush-7:0) [ 1079.593893][ T998] Call Trace: [ 1079.593902][ T998] [ 1079.593912][ T998] dump_stack_lvl+0xe8/0x150 [ 1079.593948][ T998] f2fs_handle_critical_error+0x37c/0x540 [ 1079.593982][ T998] f2fs_write_end_io+0xcdb/0xff0 [ 1079.594043][ T998] __submit_merged_bio+0x256/0x700 [ 1079.594077][ T998] __submit_merged_write_cond+0x3c9/0x4e0 [ 1079.594109][ T998] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1079.594160][ T998] f2fs_write_data_pages+0x2975/0x35e0 [ 1079.594231][ T998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1079.594274][ T998] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1079.594345][ T998] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1079.594401][ T998] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.594450][ T998] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1079.594486][ T998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1079.594516][ T998] do_writepages+0x32e/0x550 [ 1079.594549][ T998] ? reacquire_held_locks+0x104/0x190 [ 1079.594570][ T998] ? writeback_sb_inodes+0x477/0x1a20 [ 1079.594604][ T998] __writeback_single_inode+0x133/0x11a0 [ 1079.594631][ T998] ? do_raw_spin_unlock+0xf5/0x210 [ 1079.594663][ T998] writeback_sb_inodes+0x992/0x1a20 [ 1079.594715][ T998] ? do_raw_spin_unlock+0xf5/0x210 [ 1079.594748][ T998] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1079.594770][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.594847][ T998] ? rcu_is_watching+0x15/0xb0 [ 1079.594881][ T998] wb_writeback+0x456/0xb70 [ 1079.594910][ T998] ? queue_io+0x2c1/0x4a0 [ 1079.594946][ T998] ? __pfx_wb_writeback+0x10/0x10 [ 1079.594967][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.595013][ T998] wb_workfn+0x414/0xf50 [ 1079.595058][ T998] ? look_up_lock_class+0x57/0x110 [ 1079.595108][ T998] ? __pfx_wb_workfn+0x10/0x10 [ 1079.595146][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.595176][ T998] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1079.595230][ T998] ? process_one_work+0x870/0x1720 [ 1079.595260][ T998] process_one_work+0x963/0x1720 [ 1079.595319][ T998] ? __pfx_process_one_work+0x10/0x10 [ 1079.595346][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.595394][ T998] worker_thread+0xb46/0x1140 [ 1079.595460][ T998] kthread+0x388/0x470 [ 1079.595486][ T998] ? __pfx_worker_thread+0x10/0x10 [ 1079.595515][ T998] ? __pfx_kthread+0x10/0x10 [ 1079.595542][ T998] ret_from_fork+0x51e/0xb90 [ 1079.595577][ T998] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.595606][ T998] ? __switch_to+0xc7d/0x1450 [ 1079.595638][ T998] ? __pfx_kthread+0x10/0x10 [ 1079.595665][ T998] ret_from_fork_asm+0x1a/0x30 [ 1079.595708][ T998] [ 1079.878706][ T998] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1080.078180][T14604] fuse: Bad value for 'fd' [ 1080.717286][T14610] loop2: detected capacity change from 0 to 64 [ 1081.526993][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.597308][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.615601][T14466] bridge_slave_0: entered allmulticast mode [ 1081.630618][T14466] bridge_slave_0: entered promiscuous mode [ 1081.669567][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.699257][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.718182][T14466] bridge_slave_1: entered allmulticast mode [ 1081.749423][T14466] bridge_slave_1: entered promiscuous mode [ 1083.963097][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.095116][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.503995][T14466] team0: Port device team_slave_0 added [ 1085.514994][T14466] team0: Port device team_slave_1 added [ 1085.554216][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'. [ 1086.697588][T14466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.713740][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.815041][T14466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.492349][T14466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.822515][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.084002][T14466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.420249][ T138] bridge_slave_1: left allmulticast mode [ 1090.437944][ T138] bridge_slave_1: left promiscuous mode [ 1090.782885][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.827465][ T138] bridge_slave_0: left allmulticast mode [ 1090.855847][ T138] bridge_slave_0: left promiscuous mode [ 1090.875238][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.297717][T14681] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1093.309195][T14681] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1094.096158][T14685] loop0: detected capacity change from 0 to 64 [ 1094.115997][T14685] hfs: get root inode failed [ 1094.309025][T14688] fuse: root generation should be zero [ 1094.352332][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.365846][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.377536][ T138] bond0 (unregistering): Released all slaves [ 1095.223982][T14466] hsr_slave_0: entered promiscuous mode [ 1095.235438][T14466] hsr_slave_1: entered promiscuous mode [ 1095.243652][T14466] debugfs: 'hsr0' already exists in 'hsr' [ 1095.250440][T14466] Cannot create hsr debugfs directory [ 1095.576556][T14686] lo speed is unknown, defaulting to 1000 [ 1095.703360][ T138] hsr_slave_0: left promiscuous mode [ 1095.781992][ T138] hsr_slave_1: left promiscuous mode [ 1095.825443][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.889017][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.847356][ T138] team0 (unregistering): Port device team_slave_1 removed [ 1097.905291][ T138] team0 (unregistering): Port device team_slave_0 removed [ 1098.998132][T14686] lo speed is unknown, defaulting to 1000 [ 1099.220314][T14722] overlayfs: missing 'lowerdir' [ 1099.232479][T14722] overlayfs: failed to clone lowerpath [ 1103.837115][T14742] loop0: detected capacity change from 0 to 32768 [ 1103.845685][T14742] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2084 (14742) [ 1103.868578][T14742] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1103.879263][T14742] BTRFS info (device loop0): using sha256 checksum algorithm [ 1104.122051][T14742] BTRFS info (device loop0): rebuilding free space tree [ 1104.251950][T14308] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1104.287979][T14742] BTRFS info (device loop0): disabling free space tree [ 1104.295259][T14742] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1104.305024][T14742] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1104.319377][T14742] BTRFS info (device loop0): setting nodatasum [ 1104.325589][T14742] BTRFS info (device loop0): setting nodatacow [ 1104.332053][T14742] BTRFS info (device loop0): turning off barriers [ 1104.338477][T14742] BTRFS info (device loop0): force clearing of disk cache [ 1104.415068][T14308] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1104.497594][T14308] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1105.348647][T14308] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1106.677317][ T5825] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1110.018576][T11453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1110.229555][T11453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1110.272798][T11453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1110.281121][T11453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1110.291526][T11453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1111.213461][T14466] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1111.854512][T14466] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1111.875032][T14796] lo speed is unknown, defaulting to 1000 [ 1111.881261][T14466] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1111.907141][T14466] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1111.914822][T14796] lo speed is unknown, defaulting to 1000 [ 1112.493965][T11453] Bluetooth: hci2: command tx timeout [ 1112.923263][T14800] loop2: detected capacity change from 0 to 40427 [ 1112.983852][T14800] F2FS-fs (loop2): invalid crc value [ 1113.435431][T14800] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1113.457191][T14800] F2FS-fs (loop2): Start checkpoint disabled! [ 1114.443206][T14800] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1114.589009][T13777] Bluetooth: hci2: command tx timeout [ 1114.838156][T14834] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2098'. [ 1116.105574][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.114032][T14838] xt_hashlimit: size too large, truncated to 1048576 [ 1116.134540][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 1117.048350][T13777] Bluetooth: hci2: command tx timeout [ 1118.793617][T14862] loop0: detected capacity change from 0 to 1024 [ 1118.944370][T14862] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1118.977020][T14862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 1119.013247][T14862] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.2106: lblock 2 mapped to illegal pblock 2 (length 1) [ 1119.027714][T14862] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1119.029576][ C1] EXT4-fs (loop0): initial error at time 2000000804: ext4_map_blocks:776: inode 3: block 2 [ 1119.048645][ C1] EXT4-fs (loop0): last error at time 2000000804: ext4_map_blocks:776: inode 3: block 2 [ 1119.061153][T14862] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1119.069485][T14862] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.2106: lblock 0 mapped to illegal pblock 48 (length 1) [ 1119.083649][T14862] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1119.088187][T14862] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1119.106578][T14862] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.2106: Failed to acquire dquot type 0 [ 1119.118113][T14862] loop0: lost filesystem error report for type 5 error -117 [ 1119.120551][T13777] Bluetooth: hci2: command tx timeout [ 1119.134055][T14862] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1119.143614][T14862] loop0: lost filesystem error report for type 5 error -117 [ 1119.147063][T14862] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.2106: mark_inode_dirty error [ 1119.165758][T14862] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1119.167929][T14862] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1119.187746][T14862] EXT4-fs (loop0): 1 orphan inode deleted [ 1119.195321][T14862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.278176][T13078] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1119.432528][T13078] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1119.603603][T13078] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 1119.775287][ T6906] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 1119.810521][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.820191][ T6906] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1119.821764][ T6906] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1119.888997][ T6906] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 0 [ 1119.909618][ T6906] loop0: lost filesystem error report for type 5 error -117 [ 1119.923214][ T5825] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1119.977664][ T5825] loop0: lost filesystem error report for type 5 error -117 [ 1119.989907][T14796] chnl_net:caif_netlink_parms(): no params data found [ 1120.023564][ T5825] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1120.055546][ T5825] loop0: lost filesystem error report for type 5 error -117 [ 1120.055851][ T5825] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1120.093169][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.124444][ T5825] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1120.902953][T14876] loop0: detected capacity change from 0 to 40427 [ 1120.926625][T14876] F2FS-fs (loop0): invalid crc value [ 1120.977058][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.998342][ T69] bridge_slave_1: left allmulticast mode [ 1121.017325][ T69] bridge_slave_1: left promiscuous mode [ 1121.148793][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1121.156872][ C1] lec:lec_tx_timeout: lec0 [ 1121.325846][T14876] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1121.350562][T14876] F2FS-fs (loop0): Start checkpoint disabled! [ 1121.386668][T14876] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1121.397645][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.418985][T14876] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1122.001853][ T69] bridge_slave_0: left allmulticast mode [ 1122.759164][ T29] audit: type=1800 audit(2000000808.238:781): pid=14888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2108" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 1122.862276][ T69] bridge_slave_0: left promiscuous mode [ 1124.884925][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.001347][ T6379] kworker/u8:11: attempt to access beyond end of device [ 1125.001347][ T6379] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1125.021495][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 1125.021544][ T6379] Tainted: [L]=SOFTLOCKUP [ 1125.021552][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1125.021565][ T6379] Workqueue: writeback wb_workfn (flush-7:0) [ 1125.021607][ T6379] Call Trace: [ 1125.021615][ T6379] [ 1125.021624][ T6379] dump_stack_lvl+0xe8/0x150 [ 1125.021658][ T6379] f2fs_handle_critical_error+0x37c/0x540 [ 1125.021692][ T6379] f2fs_write_end_io+0xcdb/0xff0 [ 1125.021742][ T6379] __submit_merged_bio+0x256/0x700 [ 1125.021775][ T6379] __submit_merged_write_cond+0x3c9/0x4e0 [ 1125.021808][ T6379] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1125.021861][ T6379] f2fs_write_data_pages+0x2975/0x35e0 [ 1125.021888][ T6379] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1125.021957][ T6379] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1125.022001][ T6379] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1125.022079][ T6379] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1125.022132][ T6379] ? __lock_acquire+0x6b5/0x2cf0 [ 1125.022184][ T6379] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1125.022213][ T6379] do_writepages+0x32e/0x550 [ 1125.022247][ T6379] ? reacquire_held_locks+0x104/0x190 [ 1125.022267][ T6379] ? writeback_sb_inodes+0x477/0x1a20 [ 1125.022300][ T6379] __writeback_single_inode+0x133/0x11a0 [ 1125.022327][ T6379] ? do_raw_spin_unlock+0xf5/0x210 [ 1125.022358][ T6379] writeback_sb_inodes+0x992/0x1a20 [ 1125.022419][ T6379] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1125.022442][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1125.022523][ T6379] ? rcu_is_watching+0x15/0xb0 [ 1125.022555][ T6379] wb_writeback+0x456/0xb70 [ 1125.022584][ T6379] ? queue_io+0x2c1/0x4a0 [ 1125.022619][ T6379] ? __pfx_wb_writeback+0x10/0x10 [ 1125.022640][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1125.022686][ T6379] wb_workfn+0x414/0xf50 [ 1125.022721][ T6379] ? look_up_lock_class+0x57/0x110 [ 1125.022769][ T6379] ? __pfx_wb_workfn+0x10/0x10 [ 1125.022805][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1125.022833][ T6379] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1125.022886][ T6379] ? process_one_work+0x870/0x1720 [ 1125.022915][ T6379] process_one_work+0x963/0x1720 [ 1125.022973][ T6379] ? __pfx_process_one_work+0x10/0x10 [ 1125.023000][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1125.023052][ T6379] worker_thread+0xb46/0x1140 [ 1125.023118][ T6379] kthread+0x388/0x470 [ 1125.023142][ T6379] ? __pfx_worker_thread+0x10/0x10 [ 1125.023171][ T6379] ? __pfx_kthread+0x10/0x10 [ 1125.023197][ T6379] ret_from_fork+0x51e/0xb90 [ 1125.023231][ T6379] ? __pfx_ret_from_fork+0x10/0x10 [ 1125.023258][ T6379] ? __switch_to+0xc7d/0x1450 [ 1125.023289][ T6379] ? __pfx_kthread+0x10/0x10 [ 1125.023315][ T6379] ret_from_fork_asm+0x1a/0x30 [ 1125.023358][ T6379] [ 1125.024505][ T6379] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1125.436429][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.464828][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.485903][ T69] bond0 (unregistering): Released all slaves [ 1125.498903][T14796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.519224][T14796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.526532][T14796] bridge_slave_0: entered allmulticast mode [ 1125.549766][T14796] bridge_slave_0: entered promiscuous mode [ 1125.578061][T14796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.599786][T14796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.629444][T14796] bridge_slave_1: entered allmulticast mode [ 1125.641668][T14796] bridge_slave_1: entered promiscuous mode [ 1125.937022][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.944291][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.539622][T14916] fuse: Unknown parameter 'use00000000000000000000' [ 1127.579018][T14916] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1128.067351][ T69] hsr_slave_0: left promiscuous mode [ 1128.101776][ T69] hsr_slave_1: left promiscuous mode [ 1128.120598][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.162168][T11453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1128.176529][T11453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1128.176659][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.196720][T11453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1128.205988][T11453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1128.216017][T11453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1130.258858][T11453] Bluetooth: hci3: command tx timeout [ 1131.219940][T14935] loop2: detected capacity change from 0 to 32768 [ 1131.249099][T14935] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1131.279388][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1131.316652][T14935] XFS (loop2): Ending clean mount [ 1132.328563][T11453] Bluetooth: hci3: command tx timeout [ 1132.439756][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1134.062492][T14948] Invalid ELF header magic: != ELF [ 1134.193106][T14796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.260381][T14796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.386375][ T5831] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1134.418833][T11453] Bluetooth: hci3: command tx timeout [ 1134.551029][T14796] team0: Port device team_slave_0 added [ 1134.565186][T14796] team0: Port device team_slave_1 added [ 1134.725411][T14917] lo speed is unknown, defaulting to 1000 [ 1134.740453][T14796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.760342][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.818829][T14796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.852170][T14796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.869418][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.918641][T14796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.463335][T14970] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1135.719955][T14917] lo speed is unknown, defaulting to 1000 [ 1136.918828][T11453] Bluetooth: hci3: command tx timeout [ 1137.232067][T14985] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1138.593830][T14796] hsr_slave_0: entered promiscuous mode [ 1138.606764][T14796] hsr_slave_1: entered promiscuous mode [ 1139.618061][T14796] debugfs: 'hsr0' already exists in 'hsr' [ 1139.624984][T14796] Cannot create hsr debugfs directory [ 1140.115305][T15011] loop2: detected capacity change from 0 to 512 [ 1140.140003][T15011] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1140.203847][T15011] EXT4-fs (loop2): 1 truncate cleaned up [ 1140.227786][T15011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.796073][ T29] audit: type=1800 audit(2000000826.188:782): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2136" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1141.415199][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.901219][T15035] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1144.168324][T14917] chnl_net:caif_netlink_parms(): no params data found [ 1144.237062][T15042] loop0: detected capacity change from 0 to 1024 [ 1144.687779][T15049] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2147'. [ 1144.706980][ T6377] hfsplus: b-tree write err: -5, ino 25 [ 1144.716164][ T6377] hfsplus: b-tree write err: -5, ino 4 [ 1144.723009][T15049] overlayfs: failed to clone upperpath [ 1144.729168][ T6377] hfsplus: b-tree write err: -5, ino 2 [ 1145.484964][T15057] SET target dimension over the limit! [ 1146.609710][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2150'. [ 1148.418049][T15070] loop0: detected capacity change from 0 to 131072 [ 1148.429582][T15070] F2FS-fs (loop0): Test dummy encryption mode enabled [ 1148.513283][T15070] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1148.524841][T15070] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 1149.240540][T15083] fscrypt (loop0, inode 3): Unsupported encryption flags (0x10) [ 1149.431070][T15086] overlayfs: failed to clone upperpath [ 1149.445534][T15086] 9pnet_virtio: no channels available for device syz [ 1151.161764][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.180262][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.196326][T14917] bridge_slave_0: entered allmulticast mode [ 1151.208015][T14917] bridge_slave_0: entered promiscuous mode [ 1151.222831][T14917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.233585][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.241435][T14917] bridge_slave_1: entered allmulticast mode [ 1151.250695][T14917] bridge_slave_1: entered promiscuous mode [ 1151.720738][T14917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.899331][T14917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.017316][ T69] bridge_slave_1: left allmulticast mode [ 1152.033639][ T69] bridge_slave_1: left promiscuous mode [ 1152.049544][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.071368][ T69] bridge_slave_0: left allmulticast mode [ 1152.087523][ T69] bridge_slave_0: left promiscuous mode [ 1152.094339][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.070841][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.092610][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.112331][ T69] bond0 (unregistering): Released all slaves [ 1153.159142][T14917] team0: Port device team_slave_0 added [ 1153.173136][ T7021] lec:lec_start_xmit: lec0:No lecd attached [ 1153.213262][T14917] team0: Port device team_slave_1 added [ 1153.394165][T14917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.401505][T14917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.431728][T14917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.449462][T14917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.456652][T14917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.487504][T14917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.519024][ T69] hsr_slave_0: left promiscuous mode [ 1153.527873][ T69] hsr_slave_1: left promiscuous mode [ 1153.535081][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.543749][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.698297][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1153.724640][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1153.957005][T14917] hsr_slave_0: entered promiscuous mode [ 1153.965337][T14917] hsr_slave_1: entered promiscuous mode [ 1153.973507][T14917] debugfs: 'hsr0' already exists in 'hsr' [ 1153.979478][T14917] Cannot create hsr debugfs directory [ 1154.475134][T14796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1154.502547][T14796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1154.527523][T14796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1154.657079][T14796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1154.922822][T14796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.002478][T14796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.075149][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.082451][ T9823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.094046][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.101293][ T9823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.342471][T14917] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1155.360259][T14917] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1155.377704][T14917] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1155.402913][T14917] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1155.677424][T14917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.747231][T14917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.779751][T14796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.790547][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.797775][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.820185][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.827546][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.256991][T14917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.455453][T14796] veth0_vlan: entered promiscuous mode [ 1156.500761][T14796] veth1_vlan: entered promiscuous mode [ 1156.656597][T14796] veth0_macvtap: entered promiscuous mode [ 1156.687891][T14796] veth1_macvtap: entered promiscuous mode [ 1156.781624][T14796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.820933][T14796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.845345][T14917] veth0_vlan: entered promiscuous mode [ 1156.861270][ T6908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.888428][ T6908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.933431][ T9823] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.946709][ T9823] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.962415][T14917] veth1_vlan: entered promiscuous mode [ 1157.236794][ T6908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.266153][ T6908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.320294][T14917] veth0_macvtap: entered promiscuous mode [ 1157.342377][T14917] veth1_macvtap: entered promiscuous mode [ 1157.355460][ T9823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.374341][ T9823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.416327][T14917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.445670][T14917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.477292][ T6908] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.511971][ T6908] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.550116][ T6908] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.188820][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1158.196887][ C1] lec:lec_tx_timeout: lec0 [ 1158.691543][ T6908] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.686556][T15224] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1161.935913][ T6906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.695301][ T6906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.081576][T15248] loop0: detected capacity change from 0 to 164 [ 1164.300307][T15248] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1164.365806][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.543891][T15251] loop2: detected capacity change from 0 to 8 [ 1164.691325][T15251] SQUASHFS error: xz decompression failed, data probably corrupt [ 1164.699662][T15251] SQUASHFS error: Failed to read block 0x108: -5 [ 1164.708612][T15251] SQUASHFS error: Unable to read metadata cache entry [106] [ 1164.716127][T15251] SQUASHFS error: Unable to read inode 0x11f [ 1165.227252][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.414576][T15274] loop0: detected capacity change from 0 to 64 [ 1169.602652][T15274] hfs: get root inode failed [ 1171.913567][T15294] loop6: detected capacity change from 0 to 64 [ 1172.014753][T15294] hfs: get root inode failed [ 1175.655774][T15329] geneve2: entered promiscuous mode [ 1175.661276][T15329] geneve2: entered allmulticast mode [ 1176.686652][T15331] loop5: detected capacity change from 0 to 256 [ 1177.617898][T15344] loop6: detected capacity change from 0 to 16 [ 1177.642325][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.731605][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 1177.951855][T15344] erofs (device loop6): mounted with root inode @ nid 36. [ 1178.584648][T15349] loop0: detected capacity change from 0 to 64 [ 1178.595712][T15349] hfs: get root inode failed [ 1182.455773][T15370] loop6: detected capacity change from 0 to 131072 [ 1182.631507][T15370] F2FS-fs (loop6): Test dummy encryption mode enabled [ 1183.039312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 1183.047889][ C1] lec:lec_tx_timeout: lec0 [ 1183.459612][T15370] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1183.533629][T15370] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 1183.915983][T15385] fscrypt (loop6, inode 3): Unsupported encryption flags (0x10) [ 1191.206624][T15426] loop5: detected capacity change from 0 to 256 [ 1191.219832][T15426] exfat: Bad value for 'gid' [ 1191.224529][T15426] exfat: Bad value for 'gid' [ 1194.579953][T15450] loop2: detected capacity change from 0 to 128 [ 1194.629528][T15450] omfs: sysblock number (f784317bf884317b) is out of range [ 1195.911344][T15458] loop2: detected capacity change from 0 to 64 [ 1196.932355][T15458] hfs: get root inode failed [ 1202.386685][T15494] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1202.426086][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2219'. [ 1202.438546][T15484] bridge_slave_1: left allmulticast mode [ 1202.444369][T15484] bridge_slave_1: left promiscuous mode [ 1202.450301][T15484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.471049][T15484] bridge_slave_0: left allmulticast mode [ 1202.476759][T15484] bridge_slave_0: left promiscuous mode [ 1202.482695][T15484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.646729][ T29] audit: type=1800 audit(2000000888.128:783): pid=15496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2221" name="file1" dev="tmpfs" ino=3009 res=0 errno=0 [ 1204.157106][ T6904] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1205.771511][T15512] loop6: detected capacity change from 0 to 32768 [ 1205.855932][T11453] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1205.856829][T13777] Bluetooth: hci5: command 0x1003 tx timeout [ 1206.500190][T15512] JBD2: Ignoring recovery information on journal [ 1206.533606][T15512] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1207.481672][T15523] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 1207.760142][ T5176] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1208.033464][T15540] loop0: detected capacity change from 0 to 64 [ 1208.065718][T15540] hfs: get root inode failed [ 1208.080893][ T5176] usb 7-1: Using ep0 maxpacket: 16 [ 1209.090874][ T5176] usb 7-1: device descriptor read/all, error -71 [ 1210.915888][T14917] ocfs2: Unmounting device (7,6) on (node local) [ 1213.311746][T15570] loop5: detected capacity change from 0 to 64 [ 1213.964970][ T6904] Bluetooth: Error in BCSP hdr checksum [ 1214.202742][T15570] hfs: get root inode failed [ 1215.278910][T11453] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1216.139501][T15583] nfs: Unknown parameter 'ÿÿÿÿ' [ 1217.229470][T15586] loop5: detected capacity change from 0 to 256 [ 1217.375568][T15586] exFAT-fs (loop5): error, The cluster chain has a loop [ 1217.442679][ T7021] lec:lec_start_xmit: lec0:No lecd attached [ 1217.459866][T15586] exFAT-fs (loop5): Filesystem has been set read-only [ 1217.516233][T15586] exFAT-fs (loop5): failed to count the number of clusters in root [ 1217.602560][T15586] exFAT-fs (loop5): failed to recognize exfat type [ 1218.217070][T15599] loop0: detected capacity change from 0 to 512 [ 1218.221614][T15599] EXT4-fs: Ignoring removed i_version option [ 1218.221641][T15599] EXT4-fs: Ignoring removed bh option [ 1218.885156][T15599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.888634][T15599] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.884858][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.332515][T15615] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1221.064978][T15617] loop0: detected capacity change from 0 to 64 [ 1221.098404][T15617] hfs: get root inode failed [ 1223.038860][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 1223.046965][ C1] lec:lec_tx_timeout: lec0 [ 1224.064859][T15633] loop6: detected capacity change from 0 to 4096 [ 1227.537290][ T29] audit: type=1800 audit(2000000913.018:784): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2255" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1234.070080][T15679] loop5: detected capacity change from 0 to 4096 [ 1234.292703][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1234.314939][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1234.323608][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1234.333327][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1234.341487][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1234.678261][T15685] lo speed is unknown, defaulting to 1000 [ 1234.974247][T15685] lo speed is unknown, defaulting to 1000 [ 1234.980597][ T5839] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 1235.931720][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 1236.431979][T11453] Bluetooth: hci5: command tx timeout [ 1236.553611][ T29] audit: type=1800 audit(2000000922.008:785): pid=15702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2272" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1237.533839][T15708] loop5: detected capacity change from 0 to 256 [ 1237.707736][T15708] FAT-fs (loop5): Directory bread(block 64) failed [ 1237.734984][T15708] FAT-fs (loop5): Directory bread(block 65) failed [ 1237.786971][T15708] FAT-fs (loop5): Directory bread(block 66) failed [ 1237.849051][T15708] FAT-fs (loop5): Directory bread(block 67) failed [ 1237.888225][T15708] FAT-fs (loop5): Directory bread(block 68) failed [ 1237.997412][T15708] FAT-fs (loop5): Directory bread(block 69) failed [ 1238.966010][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.976577][T11453] Bluetooth: hci5: command tx timeout [ 1238.985680][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 1239.076795][T15708] FAT-fs (loop5): Directory bread(block 70) failed [ 1239.285326][T15708] FAT-fs (loop5): Directory bread(block 71) failed [ 1239.770919][T15685] chnl_net:caif_netlink_parms(): no params data found [ 1241.038865][T11453] Bluetooth: hci5: command tx timeout [ 1241.054609][T15708] FAT-fs (loop5): Directory bread(block 72) failed [ 1241.067614][T15708] FAT-fs (loop5): Directory bread(block 73) failed [ 1241.400076][T15726] xt_l2tp: invalid flags combination: 0 [ 1243.417681][T11453] Bluetooth: hci5: command tx timeout [ 1243.797489][T15740] loop0: detected capacity change from 0 to 4096 [ 1244.080040][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1244.088112][ C1] lec:lec_tx_timeout: lec0 [ 1247.577332][ T6904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.121879][T15754] wireguard0: left promiscuous mode [ 1248.127577][T15754] ip6gre1: left promiscuous mode [ 1248.132996][T15754] ip6gre2: left promiscuous mode [ 1248.140761][T15754] bridge0: port 1(vlan2) entered disabled state [ 1250.723408][T15776] loop5: detected capacity change from 0 to 256 [ 1250.730815][T15776] exfat: Bad value for 'gid' [ 1250.735473][T15776] exfat: Bad value for 'gid' [ 1252.952643][ T6904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.997155][T11453] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1255.205311][T15799] serio: Serial port ptm0 [ 1256.090648][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.099074][T15685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.106523][T15685] bridge_slave_0: entered allmulticast mode [ 1256.858132][T15685] bridge_slave_0: entered promiscuous mode [ 1256.877864][T15805] loop6: detected capacity change from 0 to 512 [ 1258.057413][T15811] loop0: detected capacity change from 0 to 131072 [ 1258.507716][T15811] F2FS-fs (loop0): Test dummy encryption mode enabled [ 1258.613793][T15811] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1258.672370][T15811] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 1258.817982][ T6904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.961708][T15830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.969189][T15830] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.976763][T15830] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.984253][T15830] IPv6: NLM_F_CREATE should be set when creating new route [ 1262.752100][T15685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.766517][T15685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.786510][T15685] bridge_slave_1: entered allmulticast mode [ 1262.821825][T15685] bridge_slave_1: entered promiscuous mode [ 1265.680637][T15865] fuse: Bad value for 'fd' [ 1266.550791][ T6904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.862764][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 1267.154429][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.233882][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.589061][T15685] team0: Port device team_slave_0 added [ 1267.637847][T15685] team0: Port device team_slave_1 added [ 1267.823589][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.843613][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.918910][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.973818][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.002609][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.094185][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.878837][T11453] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1275.013807][T15685] hsr_slave_0: entered promiscuous mode [ 1275.093929][T15685] hsr_slave_1: entered promiscuous mode [ 1275.131583][T15685] debugfs: 'hsr0' already exists in 'hsr' [ 1275.159685][T15685] Cannot create hsr debugfs directory [ 1275.513202][T15906] loop6: detected capacity change from 0 to 40427 [ 1275.637989][T15906] F2FS-fs (loop6): invalid crc value [ 1275.718404][T15906] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1275.732136][T15906] F2FS-fs (loop6): Start checkpoint disabled! [ 1276.017915][T15906] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1276.026221][T15906] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1276.088955][ T29] audit: type=1800 audit(2000000961.568:786): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2317" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1276.193091][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.193091][T15906] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1276.207387][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.207387][T15906] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1276.221677][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.221677][T15906] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1276.235797][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.235797][T15906] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1276.250545][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.250545][T15906] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1276.265086][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.265086][T15906] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1276.279106][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.279106][T15906] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1276.293587][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.293587][T15906] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1276.307923][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.307923][T15906] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1276.322329][T15906] syz.6.2317: attempt to access beyond end of device [ 1276.322329][T15906] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1276.498798][ T29] audit: type=1800 audit(2000000961.668:787): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2317" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 1277.256040][T15926] loop0: detected capacity change from 0 to 1024 [ 1277.754321][ T6379] hfsplus: b-tree write err: -5, ino 25 [ 1277.811175][ T6379] hfsplus: b-tree write err: -5, ino 4 [ 1277.823682][ T6379] hfsplus: b-tree write err: -5, ino 2 [ 1277.910235][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.910271][ T6379] Tainted: [L]=SOFTLOCKUP [ 1277.910280][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1277.910293][ T6379] Workqueue: writeback wb_workfn (flush-7:6) [ 1277.910336][ T6379] Call Trace: [ 1277.910345][ T6379] [ 1277.910355][ T6379] dump_stack_lvl+0xe8/0x150 [ 1277.910405][ T6379] f2fs_handle_critical_error+0x37c/0x540 [ 1277.910438][ T6379] f2fs_write_end_io+0xcdb/0xff0 [ 1277.910486][ T6379] __submit_merged_bio+0x256/0x700 [ 1277.910517][ T6379] __submit_merged_write_cond+0x3c9/0x4e0 [ 1277.910551][ T6379] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1277.910602][ T6379] f2fs_write_data_pages+0x2975/0x35e0 [ 1277.910668][ T6379] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1277.910711][ T6379] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1277.910778][ T6379] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1277.910829][ T6379] ? __lock_acquire+0x6b5/0x2cf0 [ 1277.910875][ T6379] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1277.910914][ T6379] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1277.910942][ T6379] do_writepages+0x32e/0x550 [ 1277.910974][ T6379] ? reacquire_held_locks+0x104/0x190 [ 1277.910995][ T6379] ? writeback_sb_inodes+0x477/0x1a20 [ 1277.911027][ T6379] __writeback_single_inode+0x133/0x11a0 [ 1277.911055][ T6379] ? do_raw_spin_unlock+0xf5/0x210 [ 1277.911086][ T6379] writeback_sb_inodes+0x992/0x1a20 [ 1277.911133][ T6379] ? __lock_acquire+0x6b5/0x2cf0 [ 1277.911170][ T6379] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1277.911199][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.911268][ T6379] ? rcu_is_watching+0x15/0xb0 [ 1277.911299][ T6379] wb_writeback+0x456/0xb70 [ 1277.911328][ T6379] ? queue_io+0x2c1/0x4a0 [ 1277.911361][ T6379] ? __pfx_wb_writeback+0x10/0x10 [ 1277.911382][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.911426][ T6379] wb_workfn+0x414/0xf50 [ 1277.911462][ T6379] ? look_up_lock_class+0x57/0x110 [ 1277.911508][ T6379] ? __pfx_wb_workfn+0x10/0x10 [ 1277.911544][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.911572][ T6379] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1277.911622][ T6379] ? process_one_work+0x870/0x1720 [ 1277.911651][ T6379] process_one_work+0x963/0x1720 [ 1277.911706][ T6379] ? __pfx_process_one_work+0x10/0x10 [ 1277.911734][ T6379] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.911779][ T6379] worker_thread+0xb46/0x1140 [ 1277.911839][ T6379] kthread+0x388/0x470 [ 1277.911864][ T6379] ? __pfx_worker_thread+0x10/0x10 [ 1277.911893][ T6379] ? __pfx_kthread+0x10/0x10 [ 1277.911918][ T6379] ret_from_fork+0x51e/0xb90 [ 1277.911953][ T6379] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.911981][ T6379] ? __switch_to+0xc7d/0x1450 [ 1277.912011][ T6379] ? __pfx_kthread+0x10/0x10 [ 1277.912037][ T6379] ret_from_fork_asm+0x1a/0x30 [ 1277.912077][ T6379] [ 1277.913330][ T6379] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1280.651544][ T6904] vlan3: left allmulticast mode [ 1280.656705][ T6904] bond0: left allmulticast mode [ 1280.662066][ T6904] bond_slave_0: left allmulticast mode [ 1280.712494][ T6904] bond_slave_1: left allmulticast mode [ 1280.783782][ T6904] macvlan3: left allmulticast mode [ 1280.839032][ T6904] team0: left allmulticast mode [ 1280.849319][ T6904] team_slave_0: left allmulticast mode [ 1280.858753][ T6904] team_slave_1: left allmulticast mode [ 1280.887133][ T6904] vlan3: left promiscuous mode [ 1280.892127][ T6904] bond0: left promiscuous mode [ 1280.899014][ T6904] macvlan3: left promiscuous mode [ 1280.912889][ T6904] bridge0: port 3(vlan3) entered disabled state [ 1281.200341][ T6904] bridge_slave_1: left allmulticast mode [ 1281.489132][ T6904] bridge_slave_1: left promiscuous mode [ 1281.496306][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.594902][T15959] Mount JFS Failure: -22 [ 1281.599645][T15959] jfs_mount failed w/return code = -22 [ 1282.222893][ T6904] bridge_slave_0: left allmulticast mode [ 1282.540141][ T6904] bridge_slave_0: left promiscuous mode [ 1282.546031][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.577183][ T6904] veth5: left allmulticast mode [ 1282.588839][ T6904] veth5: left promiscuous mode [ 1282.604776][ T6904] bridge1: port 1(veth5) entered disabled state [ 1282.702329][ T6904] bond_slave_0: left promiscuous mode [ 1282.722968][ T6904] bond_slave_1: left promiscuous mode [ 1282.990051][T15968] 9pnet_fd: Insufficient options for proto=fd [ 1284.683898][T15977] loop0: detected capacity change from 0 to 1024 [ 1284.712686][T15977] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1284.723430][T15977] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1284.748332][T15977] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: inode #32: comm syz.0.2330: iget: special inode unallocated [ 1284.773258][T15977] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1284.774425][T15977] EXT4-fs (loop0): Remounting filesystem read-only [ 1284.783864][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1284.783889][ C1] EXT4-fs (loop0): initial error at time 2000000970: ext4_get_journal_inode:5863: inode 32 [ 1284.783925][ C1] EXT4-fs (loop0): last error at time 2000000970: ext4_get_journal_inode:5863: inode 32 [ 1284.846900][T15977] EXT4-fs (loop0): no journal found [ 1284.856239][T15977] EXT4-fs (loop0): can't get journal size [ 1284.864539][T15977] EXT4-fs (loop0): filesystem is read-only [ 1284.890574][T15977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1286.306187][ T6904] bond3 (unregistering): (slave macvlan2): Releasing active interface [ 1286.355889][ T6904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.417519][ T6904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.450385][ T6904] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 1286.462596][ T6904] team0: left promiscuous mode [ 1286.467962][ T6904] team_slave_0: left promiscuous mode [ 1286.620747][ T6904] team_slave_1: left promiscuous mode [ 1286.669163][ T6904] bond0 (unregistering): Released all slaves [ 1286.919873][ T6904] bond1 (unregistering): Released all slaves [ 1287.036370][ T6904] bond2 (unregistering): Released all slaves [ 1287.063389][ T6904] bond3 (unregistering): Released all slaves [ 1287.253917][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.348795][T12781] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1287.365878][ T7021] lec:lec_start_xmit: lec0:No lecd attached [ 1288.220743][T12781] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1288.244043][T12781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.326861][ T6904] tipc: Left network mode [ 1288.433704][T11453] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1288.622337][T12781] usb 7-1: config 0 descriptor?? [ 1289.266533][T12781] cp210x 7-1:0.0: cp210x converter detected [ 1289.608336][T12781] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1289.637467][T12781] cp210x 7-1:0.0: querying part number failed [ 1289.712553][T12781] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1289.742570][T15685] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1291.584962][ T29] audit: type=1800 audit(2000000976.088:788): pid=16022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2339" name="bus" dev="overlay" ino=2873 res=0 errno=0 [ 1292.356912][T15685] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1292.370370][T12781] usb 7-1: USB disconnect, device number 4 [ 1292.383204][T12781] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1292.394489][T12781] cp210x 7-1:0.0: device disconnected [ 1292.625350][T15685] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1293.048726][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 1293.056794][ C1] lec:lec_tx_timeout: lec0 [ 1293.735435][T16033] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1294.834936][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1295.912644][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1296.489350][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1297.029806][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1297.041707][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1298.779245][T16051] lo speed is unknown, defaulting to 1000 [ 1299.199597][T16051] lo speed is unknown, defaulting to 1000 [ 1299.202916][T11453] Bluetooth: hci4: command tx timeout [ 1300.418058][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.429691][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 1301.339937][T11453] Bluetooth: hci4: command tx timeout [ 1303.361966][T11453] Bluetooth: hci4: command tx timeout [ 1303.601285][ T6904] hsr_slave_0: left promiscuous mode [ 1303.611690][ T6904] hsr_slave_1: left promiscuous mode [ 1303.620046][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.639298][ T6904] batadv0: mtu less than device minimum [ 1303.701253][T16116] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1304.226777][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.240735][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.252095][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.263502][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.274830][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.286421][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.297796][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.309431][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.321344][ T6904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.450079][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.459507][T16117] syz.0.2341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1304.471034][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.671655][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.775709][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 1304.857906][ T6904] batman_adv: batadv0: Interface deactivated: dummy0 [ 1304.885602][ T6904] batman_adv: batadv0: Removing interface: dummy0 [ 1305.002286][ T6904] veth1_macvtap: left promiscuous mode [ 1305.481392][T11453] Bluetooth: hci4: command tx timeout [ 1305.506612][ T6904] veth0_macvtap: left promiscuous mode [ 1305.532966][ T6904] veth1_vlan: left promiscuous mode [ 1305.547153][ T6904] veth0_vlan: left promiscuous mode [ 1306.078944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 1306.086970][ C1] lec:lec_tx_timeout: lec0 [ 1306.140487][ T6904] team0 (unregistering): Port device team_slave_1 removed [ 1306.217698][ T6904] team0 (unregistering): Port device team_slave_0 removed [ 1306.427015][T16120] netlink: 'syz.3.2355': attribute type 12 has an invalid length. [ 1306.454759][ T13] smbdirect: ib_dev[syz2] removed [ 1308.544485][T16150] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 1311.097391][T16051] chnl_net:caif_netlink_parms(): no params data found [ 1311.380659][T16164] loop6: detected capacity change from 0 to 64 [ 1311.390918][T16164] hfs: get root inode failed [ 1312.780252][T16051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.813645][T16051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.824933][T16051] bridge_slave_0: entered allmulticast mode [ 1312.834066][T16051] bridge_slave_0: entered promiscuous mode [ 1312.844220][T16051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.852193][T16051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.870601][T16051] bridge_slave_1: entered allmulticast mode [ 1313.749704][T16051] bridge_slave_1: entered promiscuous mode [ 1314.762333][T16051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.845528][ T6904] IPVS: stop unused estimator thread 0... [ 1314.854048][T16051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.104575][T16051] team0: Port device team_slave_0 added [ 1315.786130][T16051] team0: Port device team_slave_1 added [ 1316.034156][T16051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.063791][T16051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.389471][T16051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.959259][T16212] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1317.214975][T16051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.154697][T11453] Bluetooth: hci3: command 0x0406 tx timeout [ 1318.301474][T16216] loop5: detected capacity change from 0 to 131072 [ 1318.398512][T16216] F2FS-fs (loop5): Test dummy encryption mode enabled [ 1318.507353][T16051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.225237][T16051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.339548][T16216] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 1319.617748][T16051] hsr_slave_0: entered promiscuous mode [ 1319.714600][T16051] hsr_slave_1: entered promiscuous mode [ 1320.155835][T16245] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1322.345171][T11453] Bluetooth: hci5: command 0x1003 tx timeout [ 1322.387737][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1326.396655][T16274] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1327.115987][T16278] loop5: detected capacity change from 0 to 40427 [ 1327.126034][T16278] F2FS-fs (loop5): invalid crc value [ 1327.220702][T16278] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1327.232334][T16278] F2FS-fs (loop5): Start checkpoint disabled! [ 1327.261315][T16278] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1327.270147][T16278] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1329.502867][ T29] audit: type=1800 audit(2000001012.808:789): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2387" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1329.623867][ T29] audit: type=1800 audit(2000001014.528:790): pid=16287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2387" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 1330.162483][ T5839] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1330.853065][ T138] bio_check_eod: 182 callbacks suppressed [ 1330.853084][ T138] kworker/u8:5: attempt to access beyond end of device [ 1330.853084][ T138] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1330.908963][ T138] CPU: 1 UID: 0 PID: 138 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.909000][ T138] Tainted: [L]=SOFTLOCKUP [ 1330.909009][ T138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1330.909025][ T138] Workqueue: writeback wb_workfn (flush-7:5) [ 1330.909071][ T138] Call Trace: [ 1330.909081][ T138] [ 1330.909090][ T138] dump_stack_lvl+0xe8/0x150 [ 1330.909127][ T138] f2fs_handle_critical_error+0x37c/0x540 [ 1330.909161][ T138] f2fs_write_end_io+0xcdb/0xff0 [ 1330.909212][ T138] __submit_merged_bio+0x256/0x700 [ 1330.909244][ T138] __submit_merged_write_cond+0x3c9/0x4e0 [ 1330.909279][ T138] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1330.909330][ T138] f2fs_write_data_pages+0x2975/0x35e0 [ 1330.909408][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1330.909452][ T138] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1330.909522][ T138] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1330.909573][ T138] ? __lock_acquire+0x6b5/0x2cf0 [ 1330.909625][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1330.909654][ T138] do_writepages+0x32e/0x550 [ 1330.909687][ T138] ? reacquire_held_locks+0x104/0x190 [ 1330.909708][ T138] ? writeback_sb_inodes+0x477/0x1a20 [ 1330.909741][ T138] __writeback_single_inode+0x133/0x11a0 [ 1330.909768][ T138] ? do_raw_spin_unlock+0xf5/0x210 [ 1330.909800][ T138] writeback_sb_inodes+0x992/0x1a20 [ 1330.909848][ T138] ? do_raw_spin_unlock+0xf5/0x210 [ 1330.909881][ T138] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1330.909904][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1330.909974][ T138] ? rcu_is_watching+0x15/0xb0 [ 1330.910005][ T138] wb_writeback+0x456/0xb70 [ 1330.910034][ T138] ? queue_io+0x2c1/0x4a0 [ 1330.910067][ T138] ? __pfx_wb_writeback+0x10/0x10 [ 1330.910089][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1330.910133][ T138] wb_workfn+0x414/0xf50 [ 1330.910169][ T138] ? look_up_lock_class+0x57/0x110 [ 1330.910220][ T138] ? __pfx_wb_workfn+0x10/0x10 [ 1330.910256][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1330.910285][ T138] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1330.910335][ T138] ? process_one_work+0x870/0x1720 [ 1330.910363][ T138] process_one_work+0x963/0x1720 [ 1330.910430][ T138] ? __pfx_process_one_work+0x10/0x10 [ 1330.910458][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1330.910503][ T138] worker_thread+0xb46/0x1140 [ 1330.910563][ T138] kthread+0x388/0x470 [ 1330.910589][ T138] ? __pfx_worker_thread+0x10/0x10 [ 1330.910618][ T138] ? __pfx_kthread+0x10/0x10 [ 1330.910643][ T138] ret_from_fork+0x51e/0xb90 [ 1330.910676][ T138] ? __pfx_ret_from_fork+0x10/0x10 [ 1330.910704][ T138] ? __switch_to+0xc7d/0x1450 [ 1330.910735][ T138] ? __pfx_kthread+0x10/0x10 [ 1330.910761][ T138] ret_from_fork_asm+0x1a/0x30 [ 1330.910801][ T138] [ 1330.918185][T16297] overlayfs: failed to clone upperpath [ 1330.996359][ T138] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1331.617371][T16300] overlayfs: failed to clone upperpath [ 1334.443790][T16324] loop6: detected capacity change from 0 to 512 [ 1334.458167][T16324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1334.532729][T16324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1334.833002][T16324] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.956420][T16334] sd 0:0:1:0: device reset [ 1335.258977][T16336] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 1335.659489][T16312] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1335.668891][T16312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1335.678470][T16312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1335.711914][ T29] audit: type=1800 audit(2000001021.148:791): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2396" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1337.175692][T11453] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 1337.175879][T11453] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 1337.185992][T11453] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1339.658826][T14917] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1340.042761][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 1340.086535][T16372] 9p: Bad value for 'wfdno' [ 1340.962579][T16380] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1344.259589][T16051] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1344.315319][T16051] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1344.630635][T16397] loop6: detected capacity change from 0 to 32768 [ 1344.690968][T16397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2413 (16397) [ 1344.761333][T16397] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1344.771648][T16397] BTRFS info (device loop6): using crc32c checksum algorithm [ 1344.858805][T16051] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1345.304786][T16397] BTRFS info (device loop6): enabling ssd optimizations [ 1345.313339][T16397] BTRFS info (device loop6): turning on async discard [ 1345.320206][T16397] BTRFS info (device loop6): enabling free space tree [ 1345.326979][T16397] BTRFS info (device loop6): enabling auto defrag [ 1345.334198][T16397] BTRFS info (device loop6): force zlib compression, level 3 [ 1345.341636][T16397] BTRFS info (device loop6): max_inline set to 0 [ 1345.378113][T16051] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1345.739798][T16395] BTRFS info (device loop6 state M): max_inline set to 0 [ 1346.126484][T14917] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1346.531300][T16427] netlink: 'syz.5.2415': attribute type 4 has an invalid length. [ 1346.626563][T16429] netlink: 'syz.5.2415': attribute type 4 has an invalid length. [ 1348.954720][T16051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.236484][T16051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.632715][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.640004][ T9825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.970932][T16457] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1351.844493][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.851782][ T9825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.041059][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1355.066036][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1355.076856][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1355.106615][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1355.122161][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1355.438405][T16505] lo speed is unknown, defaulting to 1000 [ 1355.463696][ T7021] lec:lec_start_xmit: lec0:No lecd attached [ 1357.344917][ T5839] Bluetooth: hci5: command tx timeout [ 1357.938584][T16530] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1358.667726][T16505] chnl_net:caif_netlink_parms(): no params data found [ 1358.816296][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.824145][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.832276][T16505] bridge_slave_0: entered allmulticast mode [ 1358.841752][T16505] bridge_slave_0: entered promiscuous mode [ 1358.855003][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.924720][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.977542][T16505] bridge_slave_1: entered allmulticast mode [ 1359.006440][T16505] bridge_slave_1: entered promiscuous mode [ 1359.439198][ T5839] Bluetooth: hci5: command tx timeout [ 1359.501321][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.720778][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.789517][T16540] overlayfs: failed to clone upperpath [ 1361.038693][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 1361.046900][ C1] lec:lec_tx_timeout: lec0 [ 1361.092273][T16505] team0: Port device team_slave_0 added [ 1361.142330][T16505] team0: Port device team_slave_1 added [ 1361.518856][ T5839] Bluetooth: hci5: command tx timeout [ 1361.834563][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.858066][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.874153][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 1361.906104][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.109974][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.183294][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.218853][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.310429][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.465273][T16558] loop6: detected capacity change from 0 to 2048 [ 1362.575922][T16558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.613744][T16505] hsr_slave_0: entered promiscuous mode [ 1362.630110][T16505] hsr_slave_1: entered promiscuous mode [ 1362.637366][T16505] debugfs: 'hsr0' already exists in 'hsr' [ 1362.657286][T16505] Cannot create hsr debugfs directory [ 1362.954708][T16564] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1363.600616][ T5839] Bluetooth: hci5: command tx timeout [ 1365.441604][T16575] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1365.499422][T14917] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.509048][T16581] loop6: detected capacity change from 0 to 40427 [ 1366.527186][T16581] F2FS-fs (loop6): invalid crc value [ 1366.611429][T16581] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1366.660356][T16581] F2FS-fs (loop6): Start checkpoint disabled! [ 1366.670804][T16581] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1366.678762][T16581] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1366.849306][ T29] audit: type=1800 audit(2000001052.328:792): pid=16581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2438" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1367.038675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 1367.046878][ C1] lec:lec_tx_timeout: lec0 [ 1368.468272][T16599] fuse: Bad value for 'fd' [ 1369.528584][T12781] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1370.280596][T12781] usb 6-1: config 0 has no interfaces? [ 1370.310593][T12781] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1370.344405][T12781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.386587][T12781] usb 6-1: config 0 descriptor?? [ 1370.854377][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.879303][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.900984][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2443'. [ 1372.051704][T16601] batadv0: entered promiscuous mode [ 1372.067936][T16601] macvtap1: entered promiscuous mode [ 1372.075117][T16601] macvtap1: entered allmulticast mode [ 1372.081685][T16601] batadv0: entered allmulticast mode [ 1372.090853][T16601] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1372.419011][T16624] batadv0: left allmulticast mode [ 1372.456058][T16624] batadv0: left promiscuous mode [ 1372.569348][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1372.640814][ T9591] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1372.858733][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1372.868949][T12462] usb 6-1: USB disconnect, device number 2 [ 1373.563043][ T9591] usb 1-1: device descriptor read/64, error -71 [ 1373.683966][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1373.939327][T16646] loop5: detected capacity change from 0 to 1024 [ 1373.959871][T16646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1373.968152][ T9591] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1374.731091][T16646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1374.818740][ T9591] usb 1-1: device descriptor read/64, error -71 [ 1375.122879][ T9591] usb usb1-port1: attempt power cycle [ 1375.340854][ T6904] ------------[ cut here ]------------ [ 1375.346555][ T6904] conntrack cleanup blocked for 60s [ 1375.346583][ T6904] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:13/6904 [ 1375.365278][ T6904] Modules linked in: [ 1375.369977][ T6904] CPU: 1 UID: 0 PID: 6904 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1375.381167][ T6904] Tainted: [L]=SOFTLOCKUP [ 1375.385498][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1375.395717][ T6904] Workqueue: netns cleanup_net [ 1375.402353][ T6904] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1375.409173][ T6904] Code: 08 48 89 df e8 1d a9 61 f8 4c 8b 3b 49 39 df 74 69 e8 c0 f3 f6 f7 45 31 e4 e9 8e fe ff ff e8 b3 f3 f6 f7 48 8d 3d ec ab 51 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1375.429112][ T6904] RSP: 0018:ffffc90005def910 EFLAGS: 00010293 [ 1375.435303][ T6904] RAX: ffffffff89cf7ded RBX: ffffc90005defab0 RCX: ffff888056269e80 [ 1375.443457][ T6904] RDX: 0000000000000000 RSI: ffffffffffffffe9 RDI: ffffffff902129e0 [ 1375.451718][ T6904] RBP: 0000000000000001 R08: ffff88807bdcec03 R09: 1ffff1100f7b9d80 [ 1375.459821][ T6904] R10: dffffc0000000000 R11: ffffed100f7b9d81 R12: 0000000000000001 [ 1375.468225][ T6904] R13: dffffc0000000000 R14: 000000010001a32f R15: 000000010001a346 [ 1375.476551][ T6904] FS: 0000000000000000(0000) GS:ffff888125541000(0000) knlGS:0000000000000000 [ 1375.485561][ T6904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1375.492228][ T6904] CR2: 00007fbb489e9e80 CR3: 000000009dff0000 CR4: 00000000003526f0 [ 1375.500486][ T6904] Call Trace: [ 1375.503777][ T6904] [ 1375.506740][ T6904] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1375.512893][ T6904] ops_undo_list+0x52b/0x940 [ 1375.517521][ T6904] ? __pfx_ops_undo_list+0x10/0x10 [ 1375.522728][ T6904] ? idr_destroy+0x218/0x290 [ 1375.527360][ T6904] ? do_raw_spin_unlock+0xf5/0x210 [ 1375.532567][ T6904] cleanup_net+0x56b/0x800 [ 1375.537355][ T6904] ? __pfx_cleanup_net+0x10/0x10 [ 1375.542358][ T6904] ? process_one_work+0x870/0x1720 [ 1375.547571][ T6904] process_one_work+0x963/0x1720 [ 1375.552574][ T6904] ? __pfx_process_one_work+0x10/0x10 [ 1375.557979][ T6904] ? do_raw_spin_lock+0x12b/0x2f0 [ 1375.563083][ T6904] worker_thread+0xb46/0x1140 [ 1375.567809][ T6904] kthread+0x388/0x470 [ 1375.572492][ T6904] ? __pfx_worker_thread+0x10/0x10 [ 1375.578123][ T6904] ? __pfx_kthread+0x10/0x10 [ 1375.582917][ T6904] ret_from_fork+0x51e/0xb90 [ 1375.587580][ T6904] ? __pfx_ret_from_fork+0x10/0x10 [ 1375.592768][ T6904] ? __switch_to+0xc7d/0x1450 [ 1375.597508][ T6904] ? __pfx_kthread+0x10/0x10 [ 1375.602166][ T6904] ret_from_fork_asm+0x1a/0x30 [ 1375.606956][ T6904] [ 1375.610088][ T6904] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1375.617466][ T6904] CPU: 1 UID: 0 PID: 6904 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1375.628581][ T6904] Tainted: [L]=SOFTLOCKUP [ 1375.632941][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1375.643062][ T6904] Workqueue: netns cleanup_net [ 1375.647853][ T6904] Call Trace: [ 1375.651224][ T6904] [ 1375.654159][ T6904] vpanic+0x56c/0xa60 [ 1375.658171][ T6904] ? __pfx__printk+0x10/0x10 [ 1375.662769][ T6904] ? __pfx_vpanic+0x10/0x10 [ 1375.667299][ T6904] ? is_bpf_text_address+0x292/0x2b0 [ 1375.672607][ T6904] ? is_bpf_text_address+0x26/0x2b0 [ 1375.677859][ T6904] panic+0xc5/0xd0 [ 1375.681642][ T6904] ? __pfx_panic+0x10/0x10 [ 1375.686112][ T6904] ? ret_from_fork_asm+0x1a/0x30 [ 1375.691096][ T6904] __warn+0x315/0x4f0 [ 1375.695130][ T6904] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1375.701341][ T6904] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1375.707565][ T6904] __report_bug+0x29a/0x540 [ 1375.712138][ T6904] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1375.718342][ T6904] ? __pfx___report_bug+0x10/0x10 [ 1375.723430][ T6904] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 1375.729642][ T6904] report_bug_entry+0x19a/0x290 [ 1375.734539][ T6904] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1375.740720][ T6904] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 1375.746919][ T6904] handle_bug+0xce/0x200 [ 1375.751220][ T6904] exc_invalid_op+0x1a/0x50 [ 1375.755841][ T6904] asm_exc_invalid_op+0x1a/0x20 [ 1375.760717][ T6904] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1375.767519][ T6904] Code: 08 48 89 df e8 1d a9 61 f8 4c 8b 3b 49 39 df 74 69 e8 c0 f3 f6 f7 45 31 e4 e9 8e fe ff ff e8 b3 f3 f6 f7 48 8d 3d ec ab 51 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1375.787165][ T6904] RSP: 0018:ffffc90005def910 EFLAGS: 00010293 [ 1375.793270][ T6904] RAX: ffffffff89cf7ded RBX: ffffc90005defab0 RCX: ffff888056269e80 [ 1375.801261][ T6904] RDX: 0000000000000000 RSI: ffffffffffffffe9 RDI: ffffffff902129e0 [ 1375.809607][ T6904] RBP: 0000000000000001 R08: ffff88807bdcec03 R09: 1ffff1100f7b9d80 [ 1375.817774][ T6904] R10: dffffc0000000000 R11: ffffed100f7b9d81 R12: 0000000000000001 [ 1375.825774][ T6904] R13: dffffc0000000000 R14: 000000010001a32f R15: 000000010001a346 [ 1375.833785][ T6904] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 1375.839995][ T6904] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1375.846094][ T6904] ops_undo_list+0x52b/0x940 [ 1375.850723][ T6904] ? __pfx_ops_undo_list+0x10/0x10 [ 1375.855867][ T6904] ? idr_destroy+0x218/0x290 [ 1375.860493][ T6904] ? do_raw_spin_unlock+0xf5/0x210 [ 1375.865655][ T6904] cleanup_net+0x56b/0x800 [ 1375.870130][ T6904] ? __pfx_cleanup_net+0x10/0x10 [ 1375.875114][ T6904] ? process_one_work+0x870/0x1720 [ 1375.880271][ T6904] process_one_work+0x963/0x1720 [ 1375.885283][ T6904] ? __pfx_process_one_work+0x10/0x10 [ 1375.890803][ T6904] ? do_raw_spin_lock+0x12b/0x2f0 [ 1375.895875][ T6904] worker_thread+0xb46/0x1140 [ 1375.900615][ T6904] kthread+0x388/0x470 [ 1375.904710][ T6904] ? __pfx_worker_thread+0x10/0x10 [ 1375.909845][ T6904] ? __pfx_kthread+0x10/0x10 [ 1375.914464][ T6904] ret_from_fork+0x51e/0xb90 [ 1375.919087][ T6904] ? __pfx_ret_from_fork+0x10/0x10 [ 1375.924223][ T6904] ? __switch_to+0xc7d/0x1450 [ 1375.928972][ T6904] ? __pfx_kthread+0x10/0x10 [ 1375.933689][ T6904] ret_from_fork_asm+0x1a/0x30 [ 1375.938508][ T6904] [ 1375.942402][ T6904] Kernel Offset: disabled [ 1375.946733][ T6904] Rebooting in 86400 seconds..