last executing test programs: 4m49.307975298s ago: executing program 3 (id=577): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000003c0)=0x2) 4m48.401213362s ago: executing program 3 (id=578): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) 4m47.444305608s ago: executing program 3 (id=579): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}}}}}}}, 0x0) 4m47.436720928s ago: executing program 3 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xf, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/169, 0xa9) 4m47.363920479s ago: executing program 3 (id=581): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40812) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 4m44.716131232s ago: executing program 3 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m44.473379226s ago: executing program 32 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m6.22354157s ago: executing program 4 (id=1270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) 1m3.677838491s ago: executing program 4 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getdents64(0xffffffffffffffff, 0x0, 0x3f00) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r4, {0x8}}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m3.598164543s ago: executing program 4 (id=1277): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0xfffffffffffffffe, {0x3, 0x0, 0x4}}, 0x18) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r3, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) 1m1.745947373s ago: executing program 4 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e657400"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 53.300573199s ago: executing program 4 (id=1305): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept(r3, 0x0, 0x0) 50.400317805s ago: executing program 4 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 34.69244468s ago: executing program 33 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 28.343615992s ago: executing program 1 (id=1349): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r4, r3, 0x0, 0x40001) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") 25.911974291s ago: executing program 1 (id=1356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 14.689948673s ago: executing program 6 (id=1343): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = open_tree(0xffffffffffffffff, 0x0, 0x81000) renameat2(0xffffffffffffff9c, 0x0, r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c830750071000100020204000300f8"], 0x7a) 14.686671423s ago: executing program 1 (id=1368): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f00000003c0)=[{0x25, 0x0, 0x1, 0xfffff032}, {0x45}, {0x6}]}, 0x10) 12.680056055s ago: executing program 6 (id=1357): mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f", 0x26, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 12.677514095s ago: executing program 2 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x700, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x64, 0x0, 0xe, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x2, [{@broadcast, 0x10001}]}, @noop]}}}}}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000002c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 10.756951196s ago: executing program 2 (id=1360): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) add_key$user(0x0, &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)="fdda04e458fef0e7ae24e32f4bdeec837f25852ef4d741f503d6759a4df163498574d6e755149391973e76050c9a3c516851aa7c625b1fa94f19f793131c20", 0x3f, 0xfffffffffffffffd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read(r0, 0x0, 0x5d) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) 9.381573308s ago: executing program 5 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 9.170620152s ago: executing program 5 (id=1366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01072cbd7010fcfff3eb04"], 0x34}}, 0x20) 8.346978515s ago: executing program 0 (id=1371): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r5 = fanotify_init(0x200, 0x0) r6 = dup(r4) fanotify_mark(r5, 0x201, 0x48001003, r6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 7.047424446s ago: executing program 5 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d3cbca85e30a02db8f48b9eb10526d0c7ade3391d6c844fb8b2fb70ec826465726fb78cc47db9636d337038f016d27c2eb3fa0da403214d11f3b3ea42b8b183e9226665de1fa1c808ad8ea5bf3080b0ad7d12050000001c1428f0e17612738a97fdc8ddffb031b71347213264d4f6972a888ba9fa77efede5bdbaf65fb32eddedeb421fa7f60c35d68372e2c80561588ec11456f5e53b7bdcf72d3e0272f1b22399ec78d37acac485e5375f1b654c70f0a1ae81f5940cddaac3", 0x1fc, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 6.960367727s ago: executing program 0 (id=1374): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88e, &(0x7f0000000200)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nolazytime}, {@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nojournal_checksum}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x3, 0x450, &(0x7f0000000740)="$eJzs3MtvG8UfAPDv2knf/SW/qjyaFggURMQjadJSeuDCS+IAEhIcyjEkaRXqNqgJEq0iCAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAuLYiD0dq7ie3YaRzsutSfj7TtzO5EM1/vznpmJ5sA+tZo+k8SsS8ifo2IoWq2vsBo9b+bq8szf64uzyRRLr/xR1Ipd2N1eSYvmv/c3jwzEFH4JInDTepdvHT53HSpNHcxy08snX93YvHS5afnz0+fnTs7d2Hq1KkTxyefPTn1TEfiTOO6MfLBwpFDr7x19bWZ01ff/vHrJI+/IY4OGd3s4GPlcoer6639NelkoIcNoS3FajeNwUr/H4pirJ+8oXj54542Duiqcrlcvrf14ZUycBdLotctAHoj/6JP57/5tvmAoaPDj567/nx1ApTGfTPbqkcGopCVGWyY33bSaEScXvnri3SL7jyHAACo8206/nmq2fivELXPhf6XraEMR8T/I+JARJyMiIMRcU9Epex9EXF/m/U3LpJsHP8Urm0rsC1Kx3/PZWtb9eO/fPQXw8Ust78S/2ByZr40dyz7TMZicGean9ykju9e+uWzVsdqx3/pltafjwWzdlwb2Lme2xURs9NL0/827tz1jyJGBprFn6ytBCQRcSgiRrZZx/wTXx1pdezW8TdX+Ug6sM5U/jLi8er5X4mG+HPJ5uuTE7uiNHdsIr8qNvrp5yuvt6p/u/F3Snr+9zS9/tfiH05q12sX26/jym+ftpzTtHv9R3b970jerNv3/vTS0sXJiB3Jq9VG1+6faig3tV4+jX/saPP+fyDWP4nDEZFexA9ExIMR8VDW9ocj4pGIOLpJ/D+88Og7dTvG9rURf3el8c+2df7XEzuicU/zRPHc99/UVTocbcSfnv8TldRYtmcr97+ttGt7VzMAAAD89xQiYl8khfG1dKEwPl79Hf6DsadQWlhcevLMwnsXZqvvCAzHYCF/0jVU8zx0MpvW5/mphvzx7Lnx58Xdlfz4zEJpttfBQ5/b26L/p34v9rp1QNd5Xwv6l/4P/Uv/h/6l/0P/atL/d2/c9XfDK4PA3aDZ9/+HPWgHcPs19H/LftBHzP+hf+n/0L/0f+hLi7vj1i/JS0hsSEThjmhG9xP5Xx+5U9pzmxJbun282NWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAf8EwAA///XK+zt") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$unix(0x1, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 6.890557318s ago: executing program 1 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x20, 0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 6.890263868s ago: executing program 2 (id=1376): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 4.92737778s ago: executing program 1 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, 0x0, 0x0) epoll_create1(0x0) syz_open_procfs(0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7fff) 4.92474306s ago: executing program 0 (id=1378): ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1c3641) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 4.92403904s ago: executing program 5 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x4000, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 4.880560691s ago: executing program 2 (id=1380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2.828566824s ago: executing program 0 (id=1381): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.755582895s ago: executing program 6 (id=1382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000}, 0x7}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000200)=""/71) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.680688612s ago: executing program 1 (id=1383): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c756e695f786c6174653d312c696f636861727365743d69736f383835392d31342c636f6465706167653d3935302c696f636861727365743d6d616363656e746575726f2c757466383d302c73686f72746e616d653d6c6f7765722c00eb35cd69a309a1cd59f889d47f6ece19f2f93c7c42fee6d42a74a07aedee8d38362cec0a8a369a2bd5754fa3f8c0626979e68e9ae4cf36"], 0x4, 0x367, &(0x7f0000000c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 1.678987043s ago: executing program 5 (id=1384): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.400521427s ago: executing program 0 (id=1385): syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r3, 0x1469, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47e9, 0xeb13, 0x6, 0x0, 0x0) 1.399763927s ago: executing program 2 (id=1386): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x4000400) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1", 0xc0, 0x4040004, 0x0, 0x0) 1.260294439s ago: executing program 5 (id=1387): socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.77608ms ago: executing program 2 (id=1388): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 0s ago: executing program 0 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) kernel console output (not intermixed with test programs): .597057][ T5109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'. [ 95.831568][ T5118] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 95.880263][ T5118] device veth5 entered promiscuous mode [ 95.893767][ T5118] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 96.486367][ T5116] loop3: detected capacity change from 0 to 131072 [ 96.509516][ T5116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.252202][ T5116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.517223][ T5135] loop2: detected capacity change from 0 to 128 [ 97.548541][ T5135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.500100][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 101.744677][ T5159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.760460][ T5159] device batadv_slave_0 entered promiscuous mode [ 101.884647][ T5165] tipc: Started in network mode [ 101.886115][ T5165] tipc: Node identity 4, cluster identity 4711 [ 101.887831][ T5165] tipc: Node number set to 4 [ 101.936277][ T5167] binder: 5166:5167 tried to acquire reference to desc 0, got 1 instead [ 101.950226][ T5167] binder: 5166:5167 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.953960][ T5167] binder: 5167 RLIMIT_NICE not set [ 101.955362][ T5167] binder: 5167 RLIMIT_NICE not set [ 101.992837][ T5167] binder: 5167 RLIMIT_NICE not set [ 101.994457][ T5167] binder_alloc: 5166: binder_alloc_buf, no vma [ 101.996261][ T5167] binder: cannot allocate buffer: vma cleared, target dead or dying [ 101.996292][ T5167] binder: 5166:5167 transaction reply to 5166:5167 failed 40/29189/-3, size 0-0 line 3239 [ 102.022653][ T5167] binder: send failed reply for transaction 39 to 5166:5167 [ 102.026281][ T7] binder: undelivered TRANSACTION_COMPLETE [ 102.027984][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 102.077308][ T7] binder: undelivered TRANSACTION_ERROR: 29190 [ 103.180634][ T5197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.352024][ T5194] loop1: detected capacity change from 0 to 2048 [ 103.395554][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.405284][ T5196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.464048][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.469542][ T5197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.484834][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.777184][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.280689][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.338729][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.343580][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.359962][ T5200] Process accounting resumed [ 104.372854][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.378939][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.397691][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.401222][ T5194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=385, location=385 [ 104.407889][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.411199][ T5194] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.417885][ T5194] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 104.609367][ T5221] loop1: detected capacity change from 0 to 1024 [ 104.615651][ T5221] EXT4-fs: inline encryption not supported [ 104.617557][ T5221] EXT4-fs: Ignoring removed bh option [ 104.654576][ T5224] 9pnet_fd: Insufficient options for proto=fd [ 104.735029][ T5221] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.706026][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 105.735437][ T5241] binder: 5240:5241 tried to acquire reference to desc 0, got 1 instead [ 105.753739][ T5241] binder: 5240:5241 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 105.757479][ T5241] binder: 5241 RLIMIT_NICE not set [ 105.758899][ T5241] binder: 5241 RLIMIT_NICE not set [ 105.782651][ T5241] binder: release 5240:5241 transaction 45 in, still active [ 105.784864][ T5241] binder: send failed reply for transaction 45 to 5240:5241 [ 105.798892][ T4941] binder: undelivered TRANSACTION_COMPLETE [ 105.800516][ T4941] binder: undelivered TRANSACTION_ERROR: 29189 [ 106.849071][ T5262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.881411][ T5262] device batadv_slave_0 entered promiscuous mode [ 106.946606][ T5264] loop0: detected capacity change from 0 to 256 [ 106.949038][ T5264] exfat: Deprecated parameter 'utf8' [ 106.965166][ T5264] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d) [ 107.962259][ T5287] binder: 5286:5287 tried to acquire reference to desc 0, got 1 instead [ 107.966752][ T5287] binder: 5286:5287 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 107.970310][ T5287] binder: 5287 RLIMIT_NICE not set [ 107.971736][ T5287] binder: 5287 RLIMIT_NICE not set [ 107.984785][ T5287] binder: release 5286:5287 transaction 50 in, still active [ 107.986910][ T5287] binder: send failed reply for transaction 50 to 5286:5287 [ 107.991519][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 107.993231][ T4344] binder: undelivered TRANSACTION_ERROR: 29189 [ 108.021585][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 108.185964][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 108.294211][ T5302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.256'. [ 108.637197][ T5317] loop1: detected capacity change from 0 to 1024 [ 108.644309][ T5317] EXT4-fs: inline encryption not supported [ 108.646196][ T5317] EXT4-fs: Ignoring removed bh option [ 110.066483][ T5317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.217434][ T5331] loop0: detected capacity change from 0 to 64 [ 111.378870][ T5331] syz.0.262: attempt to access beyond end of device [ 111.378870][ T5331] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 111.383188][ T5331] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 111.505659][ T5331] Trying to free block not in datazone [ 112.595210][ T5344] netlink: 'syz.0.266': attribute type 4 has an invalid length. [ 113.432935][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 115.597429][ T5361] loop1: detected capacity change from 0 to 256 [ 115.703551][ T5361] FAT-fs (loop1): Directory bread(block 64) failed [ 115.705457][ T5361] FAT-fs (loop1): Directory bread(block 65) failed [ 115.707273][ T5361] FAT-fs (loop1): Directory bread(block 66) failed [ 115.708995][ T5361] FAT-fs (loop1): Directory bread(block 67) failed [ 115.710749][ T5361] FAT-fs (loop1): Directory bread(block 68) failed [ 115.723206][ T5361] FAT-fs (loop1): Directory bread(block 69) failed [ 115.725370][ T5361] FAT-fs (loop1): Directory bread(block 70) failed [ 115.735583][ T5361] FAT-fs (loop1): Directory bread(block 71) failed [ 115.744666][ T5361] FAT-fs (loop1): Directory bread(block 72) failed [ 115.748454][ T5361] FAT-fs (loop1): Directory bread(block 73) failed [ 115.936876][ T5369] loop3: detected capacity change from 0 to 4096 [ 115.957200][ T5369] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 116.124091][ T5369] ntfs3: loop3: Failed to load $Secure. [ 116.257738][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 116.417643][ T27] audit: type=1326 audit(116.380:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75a8a8 code=0x7fc00000 [ 117.242655][ T27] audit: type=1326 audit(117.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8a75238c code=0x7fc00000 [ 117.318545][ T27] audit: type=1326 audit(117.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b4c181c code=0x7fc00000 [ 119.405110][ T5402] loop3: detected capacity change from 0 to 2048 [ 119.419990][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.428329][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.437718][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.448747][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.457105][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.468876][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.476801][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.489381][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.496723][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.509623][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.514288][ T5402] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=385, location=385 [ 119.520294][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.527294][ T5402] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.533688][ T5402] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 119.924629][ T5421] loop2: detected capacity change from 0 to 128 [ 119.968457][ T5421] syz.2.292: attempt to access beyond end of device [ 119.968457][ T5421] loop2: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 119.973786][ T5424] syz.3.289 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.000827][ T5424] loop3: detected capacity change from 0 to 1024 [ 120.048345][ T5426] syz.2.292: attempt to access beyond end of device [ 120.048345][ T5426] loop2: rw=2049, sector=241, nr_sectors = 600 limit=128 [ 120.108611][ T5421] syz.2.292: attempt to access beyond end of device [ 120.108611][ T5421] loop2: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 120.120629][ T5421] syz.2.292: attempt to access beyond end of device [ 120.120629][ T5421] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.138258][ T5421] syz.2.292: attempt to access beyond end of device [ 120.138258][ T5421] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.141894][ T5421] syz.2.292: attempt to access beyond end of device [ 120.141894][ T5421] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.145980][ T5421] syz.2.292: attempt to access beyond end of device [ 120.145980][ T5421] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.149496][ T5421] syz.2.292: attempt to access beyond end of device [ 120.149496][ T5421] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.166066][ T5426] syz.2.292: attempt to access beyond end of device [ 120.166066][ T5426] loop2: rw=0, sector=241, nr_sectors = 1 limit=128 [ 120.170080][ T5420] syz.2.292: attempt to access beyond end of device [ 120.170080][ T5420] loop2: rw=0, sector=241, nr_sectors = 1 limit=128 [ 120.186389][ T5420] Buffer I/O error on dev loop2, logical block 241, async page read [ 120.188677][ T5420] Buffer I/O error on dev loop2, logical block 242, async page read [ 120.201093][ T5420] Buffer I/O error on dev loop2, logical block 243, async page read [ 120.215902][ T5420] Buffer I/O error on dev loop2, logical block 244, async page read [ 120.218540][ T5420] Buffer I/O error on dev loop2, logical block 245, async page read [ 120.221069][ T5420] Buffer I/O error on dev loop2, logical block 246, async page read [ 120.233045][ T5420] Buffer I/O error on dev loop2, logical block 247, async page read [ 120.242070][ T5420] Buffer I/O error on dev loop2, logical block 248, async page read [ 120.261142][ T5420] Buffer I/O error on dev loop2, logical block 241, async page read [ 120.283955][ T5420] Buffer I/O error on dev loop2, logical block 242, async page read [ 121.216342][ T5440] loop1: detected capacity change from 0 to 1024 [ 121.229209][ T5440] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 121.231229][ T5440] hfsplus: failed to load root directory [ 122.618947][ T5451] netlink: 165 bytes leftover after parsing attributes in process `syz.2.297'. [ 123.408368][ T5461] loop0: detected capacity change from 0 to 32768 [ 123.670589][ T5461] Dev loop0 SGI disklabel: csum bad, label corrupted [ 124.299436][ T5484] binder: 5483:5484 tried to acquire reference to desc 0, got 1 instead [ 124.307580][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 124.334821][ T4347] binder: undelivered transaction 55, process died. [ 124.721284][ T5492] binder: 5491:5492 tried to acquire reference to desc 0, got 1 instead [ 124.843273][ T4344] binder: release 5491:5492 transaction 60 out, still active [ 124.903974][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 124.907925][ T4344] binder: send failed reply for transaction 60, target dead [ 125.419172][ T5498] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 125.952985][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.954844][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.153858][ T4419] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.382651][ T4419] usb 1-1: Using ep0 maxpacket: 32 [ 126.412996][ T4419] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 126.492665][ T4419] usb 1-1: config 0 has no interface number 0 [ 126.733042][ T4419] usb 1-1: config 0 interface 12 has no altsetting 0 [ 126.772901][ T4419] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 126.775348][ T4419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.777466][ T4419] usb 1-1: Product: syz [ 126.778543][ T4419] usb 1-1: Manufacturer: syz [ 126.779755][ T4419] usb 1-1: SerialNumber: syz [ 126.917411][ T4419] usb 1-1: config 0 descriptor?? [ 126.933392][ T4419] f81534 1-1:0.12: required endpoints missing [ 127.441577][ T4344] usb 1-1: USB disconnect, device number 2 [ 128.067652][ T5548] binder: 5547:5548 tried to acquire reference to desc 0, got 1 instead [ 128.088192][ T5554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.090715][ T5554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.094945][ T4419] binder: release 5547:5548 transaction 65 out, still active [ 128.127386][ T4419] binder: undelivered TRANSACTION_COMPLETE [ 128.129223][ T4419] binder: send failed reply for transaction 65, target dead [ 129.839609][ T5574] loop3: detected capacity change from 0 to 512 [ 130.041179][ T5580] loop0: detected capacity change from 0 to 128 [ 130.213733][ T5580] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.446629][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 131.500424][ T5576] loop1: detected capacity change from 0 to 32768 [ 131.578836][ T5576] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.345 (5576) [ 131.663308][ T5576] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 131.666227][ T5576] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 131.668721][ T5576] BTRFS info (device loop1): using free space tree [ 132.685786][ T5578] loop2: detected capacity change from 0 to 2048 [ 132.713055][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.847750][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.851324][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.905569][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.920027][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.947847][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.704061][ T5576] BTRFS error (device loop1): open_ctree failed: -12 [ 133.746259][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.750646][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.763658][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.805617][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.987652][ T5578] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=385, location=385 [ 133.991705][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 134.008384][ T5578] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 134.014744][ T5578] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 134.889882][ T4288] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by udevd (4288) [ 134.969915][ T5646] overlayfs: failed to clone upperpath [ 139.336002][ T5684] binder: 5683:5684 tried to acquire reference to desc 0, got 1 instead [ 139.349836][ T7] binder: undelivered TRANSACTION_COMPLETE [ 139.507233][ T4344] binder: undelivered transaction 70, process died. [ 142.958023][ T5723] loop3: detected capacity change from 0 to 256 [ 143.456986][ T5723] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.459954][ T5723] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 143.779558][ T5723] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 147.728896][ T5779] bridge0: port 3(vxlan0) entered blocking state [ 147.756669][ T5779] bridge0: port 3(vxlan0) entered disabled state [ 148.293855][ T5779] device vxlan0 entered promiscuous mode [ 149.487223][ T5788] No such timeout policy "syz1" [ 149.675641][ T5790] vhci_hcd: invalid port number 96 [ 149.683574][ T5790] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 152.831949][ T5819] binder: 5818:5819 tried to acquire reference to desc 0, got 1 instead [ 152.849878][ T5819] binder: release 5818:5819 transaction 77 out, still active [ 152.867630][ T5819] binder: undelivered TRANSACTION_COMPLETE [ 152.880203][ T5819] binder: 5818:5819 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 152.924550][ T5819] binder: 5819 RLIMIT_NICE not set [ 152.925991][ T5819] binder: 5819 RLIMIT_NICE not set [ 152.927350][ T5819] binder: send failed reply for transaction 77, target dead [ 152.929242][ T5819] binder: 5818:5819 ioctl c0306201 20000240 returned -14 [ 153.752864][ T5834] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 153.760075][ T5834] CIFS mount error: No usable UNC path provided in device string! [ 153.760075][ T5834] [ 153.763092][ T5834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 154.492125][ T5838] loop3: detected capacity change from 0 to 64 [ 154.620389][ T5838] bio_check_eod: 3983 callbacks suppressed [ 154.620426][ T5838] syz.3.417: attempt to access beyond end of device [ 154.620426][ T5838] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 154.625997][ T5838] buffer_io_error: 3974 callbacks suppressed [ 154.626031][ T5838] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 154.743603][ T5838] Trying to free block not in datazone [ 155.883047][ T5853] No such timeout policy "syz1" [ 156.295715][ T5854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.089807][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 159.303580][ T5890] loop2: detected capacity change from 0 to 64 [ 159.423297][ T5890] syz.2.433: attempt to access beyond end of device [ 159.423297][ T5890] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 159.427138][ T5890] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 159.542523][ T5890] Trying to free block not in datazone [ 160.296835][ T5899] No such timeout policy "syz1" [ 161.243225][ T4306] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 162.176183][ T5917] No such timeout policy "syz1" [ 162.371474][ T5924] loop3: detected capacity change from 0 to 512 [ 162.503111][ T5924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.636678][ T5924] EXT4-fs: Mount option(s) incompatible with ext3 [ 164.577630][ T5949] CIFS mount error: No usable UNC path provided in device string! [ 164.577630][ T5949] [ 164.580392][ T5949] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.002306][ T5997] device bridge0 entered promiscuous mode [ 168.005591][ T5997] batman_adv: batadv0: Adding interface: macsec1 [ 168.007289][ T5997] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.015691][ T5997] batman_adv: batadv0: Interface activated: macsec1 [ 168.983497][ T6005] loop3: detected capacity change from 0 to 2048 [ 169.088883][ T6005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.155551][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 170.948317][ T6024] loop1: detected capacity change from 0 to 2048 [ 171.021111][ T6024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 171.087999][ T6002] Zero length message leads to an empty skb [ 173.235504][ T6050] capability: warning: `syz.2.485' uses deprecated v2 capabilities in a way that may be insecure [ 173.308320][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 174.409013][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'. [ 175.834560][ T6076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.619360][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.624915][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.517808][ T6097] loop3: detected capacity change from 0 to 1024 [ 177.778030][ T6097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.657851][ T6122] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.526694][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 180.552049][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 180.570582][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 180.595111][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.605917][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.683805][ T6131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.674693][ T6148] overlayfs: failed to clone upperpath [ 183.648217][ T4306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.652064][ T4306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.658014][ T4306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.662339][ T4306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.666103][ T4306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.668488][ T4306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.691284][ T4304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.694523][ T4304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.696926][ T4304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.703569][ T4304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.706922][ T4304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.709325][ T4304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.124175][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 184.454902][ T27] audit: type=1326 audit(184.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55a8a8 code=0x7fc00000 [ 184.546027][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 184.572971][ T6189] device ip6tnl1 entered promiscuous mode [ 184.646639][ T1803] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.885580][ T6180] chnl_net:caif_netlink_parms(): no params data found [ 185.942513][ T4304] Bluetooth: hci0: command 0x0409 tx timeout [ 186.605750][ T1803] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.373361][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.375212][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.597445][ T1803] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.775107][ T1803] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.781394][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.784380][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.787168][ T6180] device bridge_slave_0 entered promiscuous mode [ 187.801260][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.810098][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.823389][ T6180] device bridge_slave_1 entered promiscuous mode [ 187.881412][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.934684][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.133181][ T4306] Bluetooth: hci0: command 0x041b tx timeout [ 188.138907][ T6180] team0: Port device team_slave_0 added [ 188.142175][ T6180] team0: Port device team_slave_1 added [ 188.215721][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.218116][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.988785][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.309144][ T4304] Bluetooth: hci0: command 0x040f tx timeout [ 190.732732][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.734574][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.741659][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.976504][ T6180] device hsr_slave_0 entered promiscuous mode [ 191.013932][ T6180] device hsr_slave_1 entered promiscuous mode [ 191.052620][ T6180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.055701][ T6180] Cannot create hsr debugfs directory [ 192.037939][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.543'. [ 192.420179][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 193.968678][ T6299] device ip6tnl1 entered promiscuous mode [ 194.893567][ T6306] overlayfs: failed to clone upperpath [ 194.948445][ T6310] overlayfs: failed to clone upperpath [ 195.025212][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.027773][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.090057][ T6180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.154424][ T6180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.278183][ T6321] loop2: detected capacity change from 0 to 1024 [ 195.289027][ T6180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.324449][ T6321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.340831][ T6180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.856773][ T6330] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.555: Attempting to read directory block (623) that is past i_size (638464) [ 196.244559][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 198.233060][ T6331] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 198.302893][ T6333] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 199.268748][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.288615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.291248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.308466][ T6369] overlayfs: failed to clone upperpath [ 200.115722][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.118544][ T6373] overlayfs: failed to clone upperpath [ 200.409585][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 200.529274][ T6383] bridge1: port 1(ip6gretap1) entered blocking state [ 200.531512][ T6383] bridge1: port 1(ip6gretap1) entered disabled state [ 200.534261][ T6383] device ip6gretap1 entered promiscuous mode [ 201.128649][ T6381] lo speed is unknown, defaulting to 1000 [ 201.255347][ T6381] lo speed is unknown, defaulting to 1000 [ 201.258678][ T6381] lo speed is unknown, defaulting to 1000 [ 201.297582][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.300314][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.303601][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.305568][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.308844][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.311600][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.314969][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.316921][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.323829][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.340497][ T1803] device hsr_slave_0 left promiscuous mode [ 201.425109][ T6381] infiniband sz1: set down [ 201.426688][ T6381] infiniband sz1: added lo [ 201.433368][ T1803] device hsr_slave_1 left promiscuous mode [ 201.474243][ T6381] infiniband sz1: Couldn't open port 1 [ 201.565796][ T6381] RDS/IB: sz1: added [ 201.567421][ T6381] smc: adding ib device sz1 with port count 1 [ 201.582869][ T6381] smc: ib device sz1 port 1 has pnetid [ 201.623263][ T1803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.625422][ T1803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.629146][ T1803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.631213][ T1803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.644658][ T1803] device bridge_slave_1 left promiscuous mode [ 201.646609][ T1803] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.140273][ T1803] device bridge_slave_0 left promiscuous mode [ 202.187012][ T1803] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.521004][ T6400] loop3: detected capacity change from 0 to 32768 [ 202.536249][ T6400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.572 (6400) [ 202.543775][ T1803] device veth1_macvtap left promiscuous mode [ 202.545926][ T1803] device veth0_macvtap left promiscuous mode [ 202.547712][ T1803] device veth1_vlan left promiscuous mode [ 202.549586][ T1803] device veth0_vlan left promiscuous mode [ 202.560802][ T6400] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.565588][ T6400] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 202.568028][ T6400] BTRFS info (device loop3): enabling ssd optimizations [ 202.569857][ T6400] BTRFS info (device loop3): using spread ssd allocation scheme [ 202.571804][ T6400] BTRFS info (device loop3): using free space tree [ 202.777522][ T4307] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.466195][ T1803] team0 (unregistering): Port device team_slave_1 removed [ 206.164812][ T1803] team0 (unregistering): Port device team_slave_0 removed [ 206.406728][ T1803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.613318][ T1803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.048295][ T6456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.279998][ T1803] bond0 (unregistering): Released all slaves [ 209.571947][ T24] lo speed is unknown, defaulting to 1000 [ 209.574952][ T4556] lo speed is unknown, defaulting to 1000 [ 209.579029][ T6381] lo speed is unknown, defaulting to 1000 [ 209.619972][ T6180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.629749][ T6180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.644173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.647165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.650020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.661350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.664644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.667430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.670165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.673353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.676147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.678788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.681280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.684473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.771201][ T6381] lo speed is unknown, defaulting to 1000 [ 209.879220][ T27] audit: type=1326 audit(209.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75a8a8 code=0x7fc00000 [ 209.902382][ T6381] lo speed is unknown, defaulting to 1000 [ 210.109425][ T6381] lo speed is unknown, defaulting to 1000 [ 210.652669][ T27] audit: type=1326 audit(210.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8a75a8a8 code=0x7fc00000 [ 210.754041][ T6479] netlink: 'syz.4.586': attribute type 5 has an invalid length. [ 210.784390][ T6381] lo speed is unknown, defaulting to 1000 [ 210.929300][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.931538][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.952253][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.972655][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.976564][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.980650][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.983677][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.010075][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.013398][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.035477][ T6180] device veth0_vlan entered promiscuous mode [ 211.092292][ T6180] device veth1_vlan entered promiscuous mode [ 211.121530][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.126513][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.129127][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.137747][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.201169][ T6180] device veth0_macvtap entered promiscuous mode [ 211.207158][ T6180] device veth1_macvtap entered promiscuous mode [ 211.447306][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.450289][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.460880][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.465464][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.478915][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.714353][ T4306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.720126][ T4306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.723160][ T4306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.726229][ T4306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.729201][ T4306] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.731359][ T4306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.429746][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.432629][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.435161][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.437906][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.448918][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.451740][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.461966][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.465054][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.467662][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.470435][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.473489][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.476186][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.479897][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.490327][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.493401][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.772851][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 213.778340][ T6180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.780794][ T6180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.784956][ T6180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.787533][ T6180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.794738][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.862132][ T1803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.989366][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.991933][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.023716][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.313074][ T1803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.920765][ T1803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.949800][ T6515] lo speed is unknown, defaulting to 1000 [ 214.992591][ T5357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.994873][ T5357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.000119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.102227][ T1803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.141156][ T4306] Bluetooth: hci4: command 0x0409 tx timeout [ 215.390965][ T4556] Process accounting resumed [ 215.815765][ T6549] Process accounting resumed [ 216.861219][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 217.213851][ T4306] Bluetooth: hci4: command 0x041b tx timeout [ 217.222914][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 218.022585][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.024642][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.055624][ T6515] device bridge_slave_0 entered promiscuous mode [ 218.319331][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.321218][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.333988][ T6515] device bridge_slave_1 entered promiscuous mode [ 218.448792][ T6612] loop2: detected capacity change from 0 to 4096 [ 218.454537][ T6612] ntfs3: Unknown parameter '01777777777777777777777' [ 218.476688][ T4343] Process accounting resumed [ 218.521771][ T6610] Process accounting resumed [ 218.557409][ T6238] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.610363][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.793092][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.705467][ T4304] Bluetooth: hci4: command 0x040f tx timeout [ 220.011238][ T6632] binder: 6626:6632 tried to acquire reference to desc 0, got 1 instead [ 221.788538][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 221.791741][ T6632] binder: 6626:6632 got reply transaction with no transaction stack [ 221.959107][ T6632] binder: 6626:6632 transaction reply to 0:0 failed 83/29201/-71, size 0-0 line 2955 [ 221.966480][ T6632] binder: 6626:6632 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 221.970019][ T6632] binder: 6632 RLIMIT_NICE not set [ 221.987254][ T6632] binder: 6632 RLIMIT_NICE not set [ 221.989354][ T6632] binder: 6632 RLIMIT_NICE not set [ 221.990824][ T6632] binder_alloc: 6626: binder_alloc_buf, no vma [ 222.014058][ T6632] binder: cannot allocate buffer: vma cleared, target dead or dying [ 222.997800][ T6515] team0: Port device team_slave_0 added [ 223.023971][ T6632] binder: 6626:6632 transaction reply to 6626:6642 failed 84/29189/-3, size 0-0 line 3239 [ 223.062602][ T6632] binder: send failed reply for transaction 82 to 6626:6642 [ 223.170183][ T4343] binder: undelivered TRANSACTION_ERROR: 29190 [ 223.172292][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.174415][ T4343] binder: undelivered TRANSACTION_COMPLETE [ 223.176006][ T4343] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.216516][ T6515] team0: Port device team_slave_1 added [ 223.249659][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.251690][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.265928][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.267531][ T6667] loop1: detected capacity change from 0 to 8 [ 223.369170][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.371418][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.386689][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.440695][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.453053][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.488739][ T6667] SQUASHFS error: Unable to read directory block [629:2b] [ 223.534443][ T6515] device hsr_slave_0 entered promiscuous mode [ 223.583697][ T6515] device hsr_slave_1 entered promiscuous mode [ 223.622624][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.624969][ T6515] Cannot create hsr debugfs directory [ 224.030107][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 224.133835][ T6707] netlink: 'syz.4.639': attribute type 3 has an invalid length. [ 224.136890][ T6707] netlink: 'syz.4.639': attribute type 3 has an invalid length. [ 224.200893][ T6709] loop1: detected capacity change from 0 to 2048 [ 224.335493][ T6713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.394516][ T6709] syz.1.638 sent an empty control message without MSG_MORE. [ 225.276439][ T6720] loop2: detected capacity change from 0 to 256 [ 225.288829][ T6720] exfat: Deprecated parameter 'namecase' [ 225.294917][ T6515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.364902][ T6515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.430728][ T6724] loop1: detected capacity change from 0 to 128 [ 225.443789][ T6720] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 225.481867][ T1803] device hsr_slave_0 left promiscuous mode [ 226.251740][ T6724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 226.416134][ T1803] device hsr_slave_1 left promiscuous mode [ 226.502803][ T1803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.527396][ T1803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.530424][ T1803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.608181][ T1803] device bridge_slave_1 left promiscuous mode [ 226.951900][ T1803] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.038090][ T1803] device bridge_slave_0 left promiscuous mode [ 227.039979][ T1803] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.172176][ T6180] EXT4-fs (loop1): unmounting filesystem. [ 227.343369][ T1803] device veth1_macvtap left promiscuous mode [ 227.345069][ T1803] device veth0_macvtap left promiscuous mode [ 227.347283][ T1803] device veth1_vlan left promiscuous mode [ 227.349315][ T1803] device veth0_vlan left promiscuous mode [ 232.737234][ T1803] team0 (unregistering): Port device team_slave_1 removed [ 232.935223][ T1803] team0 (unregistering): Port device team_slave_0 removed [ 233.133802][ T1803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.333433][ T1803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.755490][ T1803] bond0 (unregistering): Released all slaves [ 236.007751][ T6515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.052970][ T6515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.110452][ T6779] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 236.123858][ T6780] netlink: 136 bytes leftover after parsing attributes in process `syz.0.663'. [ 239.577802][ T6823] binder: 6822:6823 tried to acquire reference to desc 0, got 1 instead [ 239.583557][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.593726][ T6823] binder: 6822:6823 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 239.608431][ T6823] binder: 6823 RLIMIT_NICE not set [ 239.609872][ T6823] binder: 6823 RLIMIT_NICE not set [ 239.629273][ T4556] binder: release 6822:6823 transaction 89 out, still active [ 239.631327][ T4556] binder: undelivered TRANSACTION_COMPLETE [ 239.642062][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.670420][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.679135][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.686646][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.687482][ T4556] binder: release 6822:6823 transaction 89 in, still active [ 239.689447][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.690856][ T4556] binder: send failed reply for transaction 89, target dead [ 239.712293][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.714332][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.734505][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.739632][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.761635][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.767441][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.769526][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.782894][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.792221][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.819804][ T6830] tipc: Started in network mode [ 239.821185][ T6830] tipc: Node identity ac1414aa, cluster identity 4711 [ 239.825494][ T6830] tipc: Enabled bearer , priority 10 [ 239.922098][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.932915][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.938376][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.951072][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.955296][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.958718][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.961640][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.971786][ T6830] tipc: Enabled bearer , priority 0 [ 239.977475][ T6515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.980872][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.023112][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.025939][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.032106][ T6850] netlink: 'syz.4.673': attribute type 39 has an invalid length. [ 240.262420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.265305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.275142][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.259302][ T14] tipc: Node number set to 2886997162 [ 244.448686][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.452063][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.471900][ T6914] binder: 6908:6914 tried to acquire reference to desc 0, got 1 instead [ 244.474784][ T6914] binder: 6908:6914 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 246.084514][ T6914] binder: 6908:6914 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 246.088062][ T6914] binder: 6914 RLIMIT_NICE not set [ 246.089697][ T6919] binder: cannot allocate buffer: no space left [ 246.089727][ T6919] binder: 6908:6919 transaction async to 6908:0 failed 94/29201/-28, size 5234-0 line 3239 [ 246.110011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.182950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.196584][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.203382][ T6515] device veth0_vlan entered promiscuous mode [ 246.225574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.231033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.257515][ T6515] device veth1_vlan entered promiscuous mode [ 247.892419][ T6515] device veth0_macvtap entered promiscuous mode [ 247.929926][ T6515] device veth1_macvtap entered promiscuous mode [ 248.814846][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.816669][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.017361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.024498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.027128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.029700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.038477][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.041332][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.044186][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.046928][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.072783][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.075845][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.247649][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.482020][ T6936] device gtp0 entered promiscuous mode [ 251.168717][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.172889][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.175580][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.178405][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.181011][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.198452][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.201193][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.208564][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.213072][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.215306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.218254][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.221239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.225426][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.246858][ T6515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.249321][ T6515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.251654][ T6515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.266403][ T6515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.412133][ T5357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.414968][ T5357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.421214][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 251.428060][ T6963] 9pnet_fd: Insufficient options for proto=fd [ 251.440527][ T6963] loop2: detected capacity change from 0 to 512 [ 251.468273][ T6963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.480888][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.485458][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.492973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.498793][ T6963] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 251.869297][ T6997] loop5: detected capacity change from 0 to 1024 [ 251.885902][ T6997] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 251.888969][ T6997] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.892205][ T6997] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.707: Freeing blocks not in datazone - block = 0, count = 4096 [ 251.905841][ T6997] EXT4-fs (loop5): 1 orphan inode deleted [ 251.907713][ T6997] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 252.934742][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 252.948472][ T7007] device gtp0 entered promiscuous mode [ 253.043856][ T7016] device syz_tun entered promiscuous mode [ 253.045574][ T7016] device vlan2 entered promiscuous mode [ 254.046953][ T7033] loop5: detected capacity change from 0 to 4096 [ 255.346205][ T7033] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.412860][ T7055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.415286][ T7055] IPv6: NLM_F_CREATE should be set when creating new route [ 255.461747][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.482013][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.522276][ T7058] loop2: detected capacity change from 0 to 512 [ 255.563659][ T7058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.704143][ T7058] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 255.727094][ T7058] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 255.769720][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 255.790996][ T7067] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 255.832963][ T7067] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 255.836522][ T7067] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.108452][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.110689][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.406632][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 258.802277][ T7055] device batadv_slave_0 left promiscuous mode [ 258.818165][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.026529][ T7112] loop2: detected capacity change from 0 to 512 [ 259.038054][ T7112] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 259.040961][ T7112] EXT2-fs (loop2): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 259.297778][ T7055] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.300586][ T7055] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.303064][ T7055] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.305473][ T7055] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.384941][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 260.503467][ T7123] loop1: detected capacity change from 0 to 8 [ 260.765080][ T7123] SQUASHFS error: Failed to read block 0x4e8: -5 [ 260.768339][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.770402][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.772550][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.774557][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.776740][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.778785][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.780944][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.783059][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.785204][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.787193][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.789345][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.791351][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.793538][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.795542][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.804572][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.806644][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.808644][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.810708][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.812787][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.814785][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.816721][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.818754][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.820743][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.822653][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.824640][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.826613][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.828671][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.830735][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.832816][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.834974][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 260.837053][ T7123] SQUASHFS error: Failed to read block 0x4de: -5 [ 261.674626][ T7137] ptrace attach of "./syz-executor exec"[4308] was attempted by ""[7137] [ 262.782818][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 262.802182][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 262.806661][ T7142] netlink: 'syz.0.746': attribute type 2 has an invalid length. [ 264.617415][ T7168] netlink: 'syz.2.752': attribute type 39 has an invalid length. [ 265.494380][ T7176] loop1: detected capacity change from 0 to 1024 [ 265.520640][ T7176] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.609744][ T7140] loop5: detected capacity change from 0 to 40427 [ 265.619521][ T7176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 265.687810][ T7140] F2FS-fs (loop5): invalid crc value [ 265.689770][ T7140] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12) [ 265.755660][ T7188] loop2: detected capacity change from 0 to 512 [ 265.820192][ T7188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 266.277527][ T7188] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 266.280570][ T7188] System zones: 0-2, 18-18, 34-34 [ 266.602006][ T7188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 266.691859][ T6180] EXT4-fs (loop1): unmounting filesystem. [ 266.713300][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 266.715771][ T7200] netlink: 'syz.4.758': attribute type 5 has an invalid length. [ 266.717990][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.758'. [ 266.863293][ T7200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 266.898774][ T7200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 266.901211][ T7200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 267.085499][ T7200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 267.108456][ T7200] device geneve2 entered promiscuous mode [ 268.162909][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 270.936770][ T7238] netlink: 'syz.5.767': attribute type 39 has an invalid length. [ 272.004731][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 272.113528][ T7262] loop1: detected capacity change from 0 to 256 [ 272.308476][ T7262] FAT-fs (loop1): Directory bread(block 64) failed [ 272.310606][ T7262] FAT-fs (loop1): Directory bread(block 65) failed [ 272.313028][ T7262] FAT-fs (loop1): Directory bread(block 66) failed [ 272.315012][ T7262] FAT-fs (loop1): Directory bread(block 67) failed [ 272.317325][ T7262] FAT-fs (loop1): Directory bread(block 68) failed [ 272.319283][ T7262] FAT-fs (loop1): Directory bread(block 69) failed [ 272.321580][ T7262] FAT-fs (loop1): Directory bread(block 70) failed [ 272.323562][ T7262] FAT-fs (loop1): Directory bread(block 71) failed [ 272.325965][ T7262] FAT-fs (loop1): Directory bread(block 72) failed [ 272.327934][ T7262] FAT-fs (loop1): Directory bread(block 73) failed [ 272.772751][ T7261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.770'. [ 273.004955][ T7272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.771'. [ 273.025605][ T7272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.771'. [ 274.864239][ T7286] loop2: detected capacity change from 0 to 1024 [ 274.881832][ T7286] EXT4-fs: Ignoring removed nobh option [ 274.905723][ T7286] EXT4-fs: Ignoring removed bh option [ 274.915650][ T7286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.955649][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 274.991161][ T7286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.035797][ T7296] loop5: detected capacity change from 0 to 2048 [ 275.139678][ T7306] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.230754][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 275.333781][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 275.342390][ T7311] netlink: 'syz.2.783': attribute type 5 has an invalid length. [ 275.349108][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.783'. [ 275.371201][ T7311] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 275.379598][ T7311] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 275.382103][ T7311] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 275.399915][ T7311] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 275.402916][ T7311] device geneve2 entered promiscuous mode [ 276.432709][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 277.588563][ T7338] batman_adv: batadv0: Adding interface: ip6gretap1 [ 277.595797][ T7338] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.617820][ T7338] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 277.621544][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'. [ 277.627092][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.629422][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.632978][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.635439][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.638115][ T7338] batman_adv: batadv0: Removing interface: ip6gretap1 [ 278.754325][ T7363] loop1: detected capacity change from 0 to 1024 [ 278.766300][ T7363] EXT4-fs: Ignoring removed nobh option [ 278.767992][ T7363] EXT4-fs: Ignoring removed bh option [ 278.784093][ T7363] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.857462][ T7363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 279.669819][ T7387] loop5: detected capacity change from 0 to 1024 [ 279.673511][ T7387] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.697111][ T6180] EXT4-fs (loop1): unmounting filesystem. [ 279.753870][ T7387] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 280.932081][ T7417] loop2: detected capacity change from 0 to 1024 [ 280.941207][ T7417] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.000574][ T7417] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 281.097614][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 282.292953][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.822'. [ 282.321416][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.822'. [ 282.333187][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 282.486694][ T7437] loop2: detected capacity change from 0 to 128 [ 282.517808][ T7437] EXT4-fs (loop2): Test dummy encryption mode enabled [ 282.709376][ T7437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.894155][ T7452] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 285.389068][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 286.013519][ T7476] loop2: detected capacity change from 0 to 1024 [ 286.031545][ T7476] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 286.036767][ T7476] EXT4-fs (loop2): orphan cleanup on readonly fs [ 286.046597][ T7476] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.821: Freeing blocks not in datazone - block = 0, count = 4096 [ 286.054603][ T7476] EXT4-fs (loop2): 1 orphan inode deleted [ 286.059501][ T7476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 287.452649][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 287.567123][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.830'. [ 287.570066][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.830'. [ 288.510720][ T7514] loop2: detected capacity change from 0 to 256 [ 288.812517][ T7514] FAT-fs (loop2): Directory bread(block 64) failed [ 288.814569][ T7514] FAT-fs (loop2): Directory bread(block 65) failed [ 288.816797][ T7514] FAT-fs (loop2): Directory bread(block 66) failed [ 288.818848][ T7514] FAT-fs (loop2): Directory bread(block 67) failed [ 288.821096][ T7514] FAT-fs (loop2): Directory bread(block 68) failed [ 288.823210][ T7514] FAT-fs (loop2): Directory bread(block 69) failed [ 288.825589][ T7514] FAT-fs (loop2): Directory bread(block 70) failed [ 288.827580][ T7514] FAT-fs (loop2): Directory bread(block 71) failed [ 288.829797][ T7514] FAT-fs (loop2): Directory bread(block 72) failed [ 288.831763][ T7514] FAT-fs (loop2): Directory bread(block 73) failed [ 289.281907][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.841'. [ 289.405025][ T7522] loop5: detected capacity change from 0 to 128 [ 289.438100][ T7522] EXT4-fs (loop5): Test dummy encryption mode enabled [ 289.646949][ T7522] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 291.885197][ T7541] loop1: detected capacity change from 0 to 128 [ 291.888166][ T7541] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.953192][ T7539] trusted_key: encrypted_key: insufficient parameters specified [ 291.958669][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 294.729305][ T7652] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 295.311641][ T7666] loop1: detected capacity change from 0 to 256 [ 296.251975][ T7666] FAT-fs (loop1): Directory bread(block 64) failed [ 296.259852][ T7666] FAT-fs (loop1): Directory bread(block 65) failed [ 296.261831][ T7666] FAT-fs (loop1): Directory bread(block 66) failed [ 296.298921][ T7666] FAT-fs (loop1): Directory bread(block 67) failed [ 296.504354][ T7666] FAT-fs (loop1): Directory bread(block 68) failed [ 296.506155][ T7666] FAT-fs (loop1): Directory bread(block 69) failed [ 296.507957][ T7666] FAT-fs (loop1): Directory bread(block 70) failed [ 297.327576][ T7666] FAT-fs (loop1): Directory bread(block 71) failed [ 297.398122][ T7666] FAT-fs (loop1): Directory bread(block 72) failed [ 297.399938][ T7666] FAT-fs (loop1): Directory bread(block 73) failed [ 298.648588][ T7699] bridge0: port 3(vlan2) entered blocking state [ 298.650328][ T7699] bridge0: port 3(vlan2) entered disabled state [ 298.657420][ T7699] device vlan2 entered promiscuous mode [ 298.659148][ T7699] device bond0 entered promiscuous mode [ 298.660621][ T7699] device bond_slave_0 entered promiscuous mode [ 298.662360][ T7699] device bond_slave_1 entered promiscuous mode [ 298.767501][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 298.813704][ T7710] bridge1: port 1(ip6gretap1) entered blocking state [ 298.815722][ T7710] bridge1: port 1(ip6gretap1) entered disabled state [ 298.818247][ T7710] device ip6gretap1 entered promiscuous mode [ 298.871575][ T7710] device veth3 entered promiscuous mode [ 298.877715][ T7710] bridge1: port 2(veth3) entered blocking state [ 298.879605][ T7710] bridge1: port 2(veth3) entered disabled state [ 298.995101][ T7728] loop1: detected capacity change from 0 to 512 [ 299.007586][ T7728] EXT4-fs (loop1): Test dummy encryption mode enabled [ 299.009587][ T7728] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 299.013087][ T7728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 299.060293][ T7728] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.865: bad orphan inode 131083 [ 299.091803][ T7728] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 299.118889][ T7728] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 299.384434][ T6180] EXT4-fs (loop1): unmounting filesystem. [ 301.378681][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 302.072655][ T7777] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 302.192167][ T7782] loop5: detected capacity change from 0 to 512 [ 302.256852][ T7782] EXT2-fs (loop5): error: revision level too high, forcing read-only mode [ 302.259187][ T7782] EXT2-fs (loop5): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 302.448046][ T7789] loop2: detected capacity change from 0 to 2048 [ 303.167879][ T7789] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 303.204499][ T7789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.051376][ T7789] netlink: 136 bytes leftover after parsing attributes in process `syz.2.877'. [ 304.359039][ T7805] tipc: Failed to remove unknown binding: 66,1,1/0:898866362/898866364 [ 304.384447][ T7805] tipc: Failed to remove unknown binding: 66,1,1/0:898866362/898866364 [ 304.387221][ T7805] tipc: Failed to remove unknown binding: 66,1,1/0:898866362/898866364 [ 304.453988][ T7808] device batadv0 entered promiscuous mode [ 304.456204][ T7808] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 304.459501][ T7808] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 304.678723][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.885'. [ 305.498107][ T7829] fuse: Unknown parameter 'fd18446744073709551615' [ 305.652958][ T7832] netlink: 96 bytes leftover after parsing attributes in process `syz.4.892'. [ 307.292707][ T4306] Bluetooth: hci0: command 0x0406 tx timeout [ 307.567502][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 307.645807][ T7856] MPTCP: kernel_bind error, err=-98 [ 308.995647][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 309.741321][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 309.954314][ T7880] loop1: detected capacity change from 0 to 16 [ 309.987032][ T7880] erofs: Unknown parameter '' [ 310.253750][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.255636][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.353044][ T7886] lo speed is unknown, defaulting to 1000 [ 311.676627][ T7902] tipc: Enabling of bearer rejected, failed to enable media [ 312.815975][ T7916] loop5: detected capacity change from 0 to 128 [ 312.834202][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 314.573423][ T11] kworker/u4:1: attempt to access beyond end of device [ 314.573423][ T11] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 314.959411][ T7941] Invalid option length (1047307) for dns_resolver key [ 321.979842][ T8006] loop2: detected capacity change from 0 to 512 [ 326.130865][ T8043] loop5: detected capacity change from 0 to 2048 [ 326.170094][ T8043] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 326.591014][ T8043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.311761][ T8052] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 327.503627][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.730770][ T8065] binder: 8064:8065 tried to acquire reference to desc 0, got 1 instead [ 327.740121][ T8065] binder: release 8064:8065 transaction 99 out, still active [ 328.677735][ T8065] binder: undelivered TRANSACTION_COMPLETE [ 328.845833][ T14] binder: send failed reply for transaction 99, target dead [ 329.067559][ T27] audit: type=1326 audit(329.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 329.261576][ T27] audit: type=1326 audit(329.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 329.835300][ T27] audit: type=1326 audit(329.800:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 329.882582][ T27] audit: type=1326 audit(329.800:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 329.888489][ T27] audit: type=1326 audit(329.800:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 329.992752][ T27] audit: type=1326 audit(329.820:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 329.998700][ T27] audit: type=1326 audit(329.820:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 330.024792][ T27] audit: type=1326 audit(329.820:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 330.030677][ T27] audit: type=1326 audit(329.820:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 330.090473][ T27] audit: type=1326 audit(329.820:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 330.113301][ T8092] tipc: Enabling of bearer rejected, failed to enable media [ 330.131294][ T8087] input: syz1 as /devices/virtual/input/input2 [ 331.032807][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.972'. [ 332.647853][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 332.651607][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 333.808169][ T8129] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 333.817073][ T8129] XFS (loop1): SB validate failed with error -5. [ 334.586398][ T4306] Bluetooth: hci4: unexpected cc 0x042d length: 63 > 7 [ 334.828505][ T8150] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 335.899939][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.904311][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.221138][ T7636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.225787][ T4474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.236506][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.240313][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.244648][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.052544][ T4304] Bluetooth: hci4: command 0x0406 tx timeout [ 338.054552][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.655375][ T4306] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 338.658235][ T4306] Bluetooth: hci4: Injecting HCI hardware error event [ 338.664882][ T4304] Bluetooth: hci4: hardware error 0x00 [ 339.057620][ T7646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.133265][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.240560][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 339.255826][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 340.151066][ T8220] loop5: detected capacity change from 0 to 8 [ 340.190317][ T8220] SQUASHFS error: zlib decompression failed, data probably corrupt [ 340.194063][ T8220] SQUASHFS error: Failed to read block 0x9b: -5 [ 340.199301][ T8220] SQUASHFS error: Unable to read metadata cache entry [99] [ 340.201500][ T8220] SQUASHFS error: Unable to read inode 0x127 [ 340.973169][ C1] net_ratelimit: 3 callbacks suppressed [ 340.973184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.711693][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1006'. [ 341.745900][ T4304] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 341.791142][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 341.914996][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.011515][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 342.055355][ T8240] loop5: detected capacity change from 0 to 2048 [ 342.074477][ T8240] loop5: p2 p3 < > p4 < p5 > [ 342.075894][ T8240] loop5: partition table partially beyond EOD, truncated [ 342.083868][ T8240] loop5: p3 start 4284289 is beyond EOD, truncated [ 342.100721][ T8246] xt_bpf: check failed: parse error [ 342.273874][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.924937][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.929616][ T273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.982793][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.987557][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.042604][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.153894][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.103140][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.536671][ T8277] loop5: detected capacity change from 0 to 512 [ 344.971052][ T8277] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 345.010947][ T8277] EXT4-fs (loop5): 1 truncate cleaned up [ 345.012703][ T8277] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 345.376746][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 345.394890][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 345.457969][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 345.550501][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.832770][ T8303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.834883][ T8303] IPv6: NLM_F_CREATE should be set when creating new route [ 346.119734][ T4347] net_ratelimit: 1 callbacks suppressed [ 346.119748][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.732863][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.015599][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.020995][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.026597][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.031053][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.036088][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.038749][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.041184][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.092340][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.187657][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.062373][ T8338] could not allocate digest TFM handle sha1-ssse3 [ 348.293378][ T8346] binder: 8342:8346 tried to acquire reference to desc 0, got 1 instead [ 348.330814][ T8346] binder: 8342:8346 ioctl c0306201 200003c0 returned -14 [ 348.933205][ T4556] binder: release 8342:8348 transaction 104 out, still active [ 348.935476][ T4556] binder: undelivered TRANSACTION_COMPLETE [ 350.364537][ T4556] binder: send failed reply for transaction 104, target dead [ 353.092813][ T8380] loop1: detected capacity change from 0 to 16 [ 353.130890][ T4556] net_ratelimit: 81 callbacks suppressed [ 353.130905][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.156352][ T8380] erofs: (device loop1): mounted with root inode @ nid 36. [ 354.289547][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.735989][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.135794][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 356.135808][ T27] audit: type=1326 audit(356.090:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.1057" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a8a8 code=0x0 [ 356.423265][ T8413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.426185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.043732][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.046942][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.070645][ T8413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.073389][ T7646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.262646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.750517][ T4557] net_ratelimit: 2 callbacks suppressed [ 358.750531][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.754361][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.047382][ T8434] loop5: detected capacity change from 0 to 4096 [ 360.068973][ T8434] ntfs3: Unknown parameter 'sys_kmmutable' [ 360.092801][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.095107][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.143145][ T6792] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.158889][ T8446] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 360.185788][ T8446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.246586][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.319858][ T8448] bond1: (slave veth5): Enslaving as an active interface with a down link [ 360.334904][ T8446] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 360.349622][ T8450] bond1: (slave vlan2): Opening slave failed [ 360.422734][ T8453] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1070'. [ 360.425181][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 360.432808][ T8455] netlink: 'syz.5.1070': attribute type 10 has an invalid length. [ 360.445494][ T8455] bridge0: port 3(team0) entered blocking state [ 360.447210][ T8455] bridge0: port 3(team0) entered disabled state [ 360.450037][ T8455] device team0 entered promiscuous mode [ 360.451575][ T8455] device team_slave_0 entered promiscuous mode [ 360.453556][ T8455] device team_slave_1 entered promiscuous mode [ 360.455738][ T8455] bridge0: port 3(team0) entered blocking state [ 360.457445][ T8455] bridge0: port 3(team0) entered forwarding state [ 361.144030][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.428491][ T8465] loop5: detected capacity change from 0 to 2048 [ 361.576944][ T8465] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 361.599428][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 362.405926][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.437142][ T8465] netlink: 'syz.5.1077': attribute type 13 has an invalid length. [ 362.555557][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 362.629241][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'. [ 362.631808][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 362.643940][ T8486] netlink: 'syz.4.1084': attribute type 10 has an invalid length. [ 362.648898][ T8486] bridge0: port 3(team0) entered blocking state [ 362.653686][ T8486] bridge0: port 3(team0) entered disabled state [ 362.656458][ T8486] device team0 entered promiscuous mode [ 362.657972][ T8486] device team_slave_0 entered promiscuous mode [ 362.667756][ T8486] device team_slave_1 entered promiscuous mode [ 364.049484][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.336749][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.563968][ T8494] Cannot find set identified by id 0 to match [ 366.336830][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.475515][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.601493][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.623081][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'. [ 367.625546][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 367.629449][ T8539] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 367.631688][ T8539] bridge0: port 4(team0) entered blocking state [ 367.633576][ T8539] bridge0: port 4(team0) entered disabled state [ 367.636198][ T8539] device team0 entered promiscuous mode [ 367.637690][ T8539] device team_slave_0 entered promiscuous mode [ 367.639472][ T8539] device team_slave_1 entered promiscuous mode [ 367.641451][ T8539] bridge0: port 4(team0) entered blocking state [ 367.643213][ T8539] bridge0: port 4(team0) entered forwarding state [ 367.852825][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.667221][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.959449][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.570151][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.572093][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.583058][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.585745][ T27] audit: type=1326 audit(371.180:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.1103" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x0 [ 372.652991][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.800239][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 372.803131][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 372.805958][ T8584] netlink: 'syz.5.1112': attribute type 10 has an invalid length. [ 372.982288][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 372.992372][ T8584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.995476][ T8580] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 372.997820][ T8580] bridge0: port 3(team0) entered blocking state [ 372.999564][ T8580] bridge0: port 3(team0) entered disabled state [ 373.002261][ T8580] device team0 entered promiscuous mode [ 373.004167][ T8580] device team_slave_0 entered promiscuous mode [ 373.006420][ T8580] device team_slave_1 entered promiscuous mode [ 373.008601][ T8580] bridge0: port 3(team0) entered blocking state [ 373.010370][ T8580] bridge0: port 3(team0) entered forwarding state [ 373.800723][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.928693][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.931268][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.814641][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.863565][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.089252][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.689415][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.691722][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.280119][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.321756][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.327182][ T4474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.338690][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.351926][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.374413][ T27] audit: type=1326 audit(379.340:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.1128" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5a8a8 code=0x0 [ 379.426565][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.481922][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 381.095250][ T4343] net_ratelimit: 5 callbacks suppressed [ 381.095264][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.160768][ T8676] loop5: detected capacity change from 0 to 1024 [ 381.355865][ T8676] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 382.219099][ T8669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.222556][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.312716][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.333186][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.510450][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 383.580108][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.617842][ T8710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1159'. [ 384.653032][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.679837][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 384.690147][ T8722] lo speed is unknown, defaulting to 1000 [ 385.507455][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.706879][ T8728] tipc: Started in network mode [ 385.708334][ T8728] tipc: Node identity ac1414aa, cluster identity 4711 [ 385.719398][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.721599][ T8728] tipc: Enabled bearer , priority 10 [ 386.831341][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.087250][ T8740] loop1: detected capacity change from 0 to 4096 [ 387.106702][ T8740] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 387.388049][ T4377] tipc: Node number set to 2886997162 [ 387.486166][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.316469][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.441382][ T8758] loop5: detected capacity change from 0 to 256 [ 388.723844][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.920184][ T8758] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d) [ 389.382722][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.416623][ T8765] loop1: detected capacity change from 0 to 1024 [ 391.032928][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.053226][ T8765] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.1163: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 391.058726][ T8765] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.1163: Bad quota inode: 3, type: 0 [ 391.069622][ T8765] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 391.715454][ T8765] EXT4-fs (loop1): mount failed [ 391.870077][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.843676][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.853519][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.745534][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.748379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.979190][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.035672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.327129][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.516185][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.522642][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.783987][ T27] audit: type=1326 audit(396.760:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.802796][ T27] audit: type=1326 audit(396.770:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.823048][ T27] audit: type=1326 audit(396.770:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.829004][ T27] audit: type=1326 audit(396.770:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff91b58dd4 code=0x7ffc0000 [ 396.852351][ T8815] netlink: 'syz.0.1187': attribute type 4 has an invalid length. [ 396.860399][ T27] audit: type=1326 audit(396.770:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.879900][ T27] audit: type=1326 audit(396.770:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.964975][ T27] audit: type=1326 audit(396.770:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.971004][ T27] audit: type=1326 audit(396.780:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.977990][ T27] audit: type=1326 audit(396.820:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 396.987528][ T27] audit: type=1326 audit(396.870:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a8a8 code=0x7ffc0000 [ 398.015300][ T8831] tipc: Started in network mode [ 398.016703][ T8831] tipc: Node identity ac14140f, cluster identity 4711 [ 398.019250][ T8831] tipc: Enabled bearer , priority 10 [ 398.070904][ T1515] net_ratelimit: 9 callbacks suppressed [ 398.070917][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.078106][ T8834] loop5: detected capacity change from 0 to 1024 [ 398.080354][ T8834] EXT4-fs: Ignoring removed orlov option [ 398.081912][ T8834] EXT4-fs: Invalid want_extra_isize 0 [ 398.133811][ T6795] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.986879][ T4346] tipc: Node number set to 2886997007 [ 399.994186][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.998298][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.051405][ T8840] Injecting memory failure for pfn 0x122b6c at process virtual address 0x20000000 [ 400.181586][ T8840] Memory failure: 0x122b6c: recovery action for dirty LRU page: Recovered [ 400.184334][ T8840] Injecting memory failure for pfn 0x122b6d at process virtual address 0x20001000 [ 400.203244][ T8840] Memory failure: 0x122b6d: recovery action for dirty LRU page: Recovered [ 400.209078][ T8840] Injecting memory failure for pfn 0x122b6e at process virtual address 0x20002000 [ 400.212936][ T8840] Memory failure: 0x122b6e: recovery action for dirty LRU page: Recovered [ 400.215243][ T8840] Injecting memory failure for pfn 0x122b6f at process virtual address 0x20003000 [ 400.218186][ T8840] Memory failure: 0x122b6f: recovery action for dirty LRU page: Recovered [ 400.221219][ T8840] Injecting memory failure for pfn 0x136cd2 at process virtual address 0x20004000 [ 400.225861][ T8840] Memory failure: 0x136cd2: recovery action for dirty LRU page: Recovered [ 400.235983][ T8840] Injecting memory failure for pfn 0x136cd3 at process virtual address 0x20005000 [ 400.239016][ T8840] Memory failure: 0x136cd3: recovery action for dirty LRU page: Recovered [ 400.241420][ T8840] Injecting memory failure for pfn 0x136cd4 at process virtual address 0x20006000 [ 400.246793][ T8840] Memory failure: 0x136cd4: recovery action for dirty LRU page: Recovered [ 400.249340][ T8840] Injecting memory failure for pfn 0x136cd5 at process virtual address 0x20007000 [ 400.285786][ T8840] Memory failure: 0x136cd5: recovery action for dirty LRU page: Recovered [ 400.288482][ T8840] Injecting memory failure for pfn 0x136cd6 at process virtual address 0x20008000 [ 400.457824][ T8840] Memory failure: 0x136cd6: recovery action for dirty LRU page: Recovered [ 400.462195][ T8840] Injecting memory failure for pfn 0x136cd7 at process virtual address 0x20009000 [ 401.092759][ T8840] Memory failure: 0x136cd7: recovery action for dirty LRU page: Recovered [ 401.095142][ T8840] Injecting memory failure for pfn 0x144078 at process virtual address 0x2000a000 [ 401.107370][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.113013][ T8840] Memory failure: 0x144078: recovery action for dirty LRU page: Recovered [ 401.115380][ T8840] Injecting memory failure for pfn 0x144079 at process virtual address 0x2000b000 [ 401.148166][ T8840] Memory failure: 0x144079: recovery action for dirty LRU page: Recovered [ 401.150604][ T8840] Injecting memory failure for pfn 0x14407a at process virtual address 0x2000c000 [ 401.165049][ T8863] netlink: 'syz.1.1192': attribute type 4 has an invalid length. [ 401.385919][ T8840] Memory failure: 0x14407a: recovery action for dirty LRU page: Recovered [ 401.388305][ T8840] Injecting memory failure for pfn 0x14407b at process virtual address 0x2000d000 [ 401.552872][ T8840] Memory failure: 0x14407b: recovery action for dirty LRU page: Recovered [ 401.555876][ T8840] Injecting memory failure for pfn 0x14407c at process virtual address 0x2000e000 [ 401.558995][ T8840] Memory failure: 0x14407c: recovery action for dirty LRU page: Recovered [ 401.561285][ T8840] Injecting memory failure for pfn 0x14407d at process virtual address 0x2000f000 [ 401.596663][ T8840] Memory failure: 0x14407d: recovery action for dirty LRU page: Recovered [ 404.180504][ T8896] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.208727][ T8896] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.220715][ T8896] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.223771][ T8896] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.316552][ T8904] loop5: detected capacity change from 0 to 16 [ 404.338918][ T8904] erofs: (device loop5): mounted with root inode @ nid 36. [ 405.396928][ T8915] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.400007][ T8915] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.402679][ T8915] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.405078][ T8915] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.409450][ T8915] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 407.864949][ T8935] netlink: 'syz.1.1216': attribute type 10 has an invalid length. [ 408.036113][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 409.328743][ T8935] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 410.329477][ T8964] lo speed is unknown, defaulting to 1000 [ 412.763518][ T8984] loop5: detected capacity change from 0 to 512 [ 414.780570][ T8984] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1231: casefold flag without casefold feature [ 414.784635][ T8984] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1231: couldn't read orphan inode 15 (err -117) [ 414.801587][ T8984] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 414.830906][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 414.835930][ T9005] tmpfs: Unknown parameter 'nolazytime˙˙' [ 416.104846][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 425.866764][ T9178] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1262'. [ 432.639126][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 432.641706][ T9226] tipc: Started in network mode [ 432.643380][ T9226] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 432.645502][ T9226] tipc: Enabled bearer , priority 10 [ 432.649213][ T9226] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1276'. [ 432.651785][ T9226] tipc: Resetting bearer [ 432.844897][ T9226] tipc: Disabling bearer [ 432.850408][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 433.137337][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.140740][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.863501][ T9251] loop5: detected capacity change from 0 to 8192 [ 434.747179][ T9251] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 434.751043][ T9251] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 434.794689][ T9251] REISERFS (device loop5): using ordered data mode [ 434.796614][ T9251] reiserfs: using flush barriers [ 434.824587][ T9251] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 434.843657][ T9251] REISERFS (device loop5): checking transaction log (loop5) [ 434.891755][ T9251] REISERFS (device loop5): Using r5 hash to sort names [ 434.911604][ T9251] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 436.682923][ T9285] loop1: detected capacity change from 0 to 4096 [ 437.039360][ T9285] ntfs: volume version 3.1. [ 440.780947][ T9313] binder: 9305:9313 ioctl 4018620d 0 returned -22 [ 441.795458][ T9321] netlink: 'syz.5.1300': attribute type 1 has an invalid length. [ 441.798339][ T9320] loop1: detected capacity change from 0 to 128 [ 441.800735][ T9320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.832602][ T9320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.835244][ T9320] EXT4-fs (loop1): Test dummy encryption mode enabled [ 441.859818][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.862278][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.882226][ T9320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 444.052762][ T9321] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 444.061882][ T6180] EXT4-fs (loop1): unmounting filesystem. [ 444.235591][ T9321] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 445.027965][ T9321] bond1 (unregistering): Released all slaves [ 451.422494][ C1] hrtimer: interrupt took 42200 ns [ 455.679190][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 455.679203][ T27] audit: type=1326 audit(711.641:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9438 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 455.702607][ T27] audit: type=1326 audit(711.641:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9438 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 455.708931][ T27] audit: type=1326 audit(711.661:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9438 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 456.865630][ T27] audit: type=1326 audit(711.661:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9438 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 456.871558][ T27] audit: type=1326 audit(711.661:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9438 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a8a8 code=0x7ffc0000 [ 462.391404][ T9484] loop1: detected capacity change from 0 to 40427 [ 465.487802][ T9484] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 465.522248][ T9484] F2FS-fs (loop1): invalid crc value [ 465.777622][ T9484] F2FS-fs (loop1): Found nat_bits in checkpoint [ 465.862660][ T9484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 467.141130][ T4306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.147598][ T4306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.150465][ T4306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.153605][ T4306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.158036][ T4306] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 467.161156][ T4306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.407399][ T9147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 467.419584][ T9147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.296638][ T9517] loop1: detected capacity change from 0 to 40427 [ 468.299387][ T9517] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 468.301178][ T9517] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 468.376144][ T9517] F2FS-fs (loop1): Found nat_bits in checkpoint [ 468.396705][ T9517] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 468.398649][ T9517] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 468.457590][ T9147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.463395][ T9147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.452593][ T4306] Bluetooth: hci5: command 0x0409 tx timeout [ 470.101302][ T9147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 470.107388][ T9147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 470.126834][ T9500] lo speed is unknown, defaulting to 1000 [ 470.265124][ T9147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 470.268234][ T9147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 470.431692][ T9500] chnl_net:caif_netlink_parms(): no params data found [ 470.531896][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.534238][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.537043][ T9500] device bridge_slave_0 entered promiscuous mode [ 470.541142][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.543387][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.546018][ T9500] device bridge_slave_1 entered promiscuous mode [ 470.563522][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.579591][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.619042][ T9500] team0: Port device team_slave_0 added [ 470.621324][ T9147] tipc: Disabling bearer [ 470.627644][ T9147] tipc: Left network mode [ 470.631541][ T9500] team0: Port device team_slave_1 added [ 470.699375][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.701361][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.723349][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.727665][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.733034][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.740505][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.834331][ T9500] device hsr_slave_0 entered promiscuous mode [ 470.883059][ T9500] device hsr_slave_1 entered promiscuous mode [ 470.902813][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.904948][ T9500] Cannot create hsr debugfs directory [ 471.267189][ T9500] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 471.304582][ T9500] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 471.334211][ T9500] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 471.405888][ T9500] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 471.537028][ T4306] Bluetooth: hci5: command 0x041b tx timeout [ 471.605612][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.613580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.616051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.621044][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.688238][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 471.691099][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.694081][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.696051][ T7124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.698438][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 471.708808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 471.711734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.719472][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.721467][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.725465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.799273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.807473][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.816234][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.828691][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 471.831382][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 471.835401][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.970091][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 471.973369][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 471.977323][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 471.979999][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 471.988147][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.146415][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.148553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.157532][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.462374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.466772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.709074][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.711918][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.718193][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.720746][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.727615][ T9500] device veth0_vlan entered promiscuous mode [ 472.735829][ T9500] device veth1_vlan entered promiscuous mode [ 472.749550][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 472.752316][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 472.756144][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.759156][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.796930][ T9500] device veth0_macvtap entered promiscuous mode [ 472.815098][ T9500] device veth1_macvtap entered promiscuous mode [ 472.834451][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.837433][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.840142][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.848240][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.850987][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.855478][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.861128][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.868880][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.871636][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.874713][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.877976][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.883864][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.886734][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.889435][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.892292][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.916301][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.919163][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.927234][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.940484][ T9147] device hsr_slave_0 left promiscuous mode [ 472.993178][ T9147] device hsr_slave_1 left promiscuous mode [ 473.072782][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.076176][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.078591][ T9147] device team0 left promiscuous mode [ 473.080079][ T9147] device team_slave_0 left promiscuous mode [ 473.082173][ T9147] device team_slave_1 left promiscuous mode [ 473.084758][ T9147] bridge0: port 3(team0) entered disabled state [ 473.134558][ T9147] device bridge_slave_1 left promiscuous mode [ 473.136331][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.206357][ T9147] device bridge_slave_0 left promiscuous mode [ 473.208244][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.283436][ T9147] device batadv0 left promiscuous mode [ 473.504236][ T9147] bond1 (unregistering): (slave veth5): Releasing active interface [ 473.506559][ T9147] bond1 (unregistering): (slave veth5): the permanent HWaddr of slave - b2:2d:6a:21:c7:38 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 473.612757][ T4304] Bluetooth: hci5: command 0x040f tx timeout [ 474.258744][ T9147] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 474.293574][ T9147] bond1 (unregistering): Released all slaves [ 474.478853][ T9147] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 475.692822][ T4306] Bluetooth: hci5: command 0x0419 tx timeout [ 476.897401][ T9147] team0 (unregistering): Port device team_slave_1 removed [ 477.113625][ T9147] team0 (unregistering): Port device team_slave_0 removed [ 477.313273][ T9147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.583308][ T9147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.329410][ T9147] bond0 (unregistering): Released all slaves [ 480.517584][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.520584][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.529812][ T9500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.532231][ T9500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.535103][ T9500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.537464][ T9500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.645437][ T9123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.647980][ T9123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.664504][ T7655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 480.688429][ T7124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.692034][ T7124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.699170][ T7655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.925881][ T9638] loop6: detected capacity change from 0 to 4096 [ 481.764699][ T9638] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 482.728951][ T9500] EXT4-fs (loop6): unmounting filesystem. [ 482.808647][ T9664] loop5: detected capacity change from 0 to 128 [ 482.999787][ T9664] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 484.840140][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 485.054264][ T9688] loop5: detected capacity change from 0 to 128 [ 485.056507][ T9688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 485.078679][ T9688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 485.082712][ T9688] EXT4-fs (loop5): Test dummy encryption mode enabled [ 485.152439][ T9688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 486.085469][ T6515] EXT4-fs (loop5): unmounting filesystem. [ 494.118297][ T9765] loop1: detected capacity change from 0 to 512 [ 494.166202][ T9765] EXT4-fs: Ignoring removed nobh option [ 494.880747][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.889024][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.371528][ T9765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 495.462361][ T9784] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 495.465185][ T9784] Mem abort info: [ 495.466249][ T9784] ESR = 0x0000000086000006 [ 495.467514][ T9784] EC = 0x21: IABT (current EL), IL = 32 bits [ 495.469133][ T9784] SET = 0, FnV = 0 [ 495.470149][ T9784] EA = 0, S1PTW = 0 [ 495.471189][ T9784] FSC = 0x06: level 2 translation fault [ 495.472949][ T9784] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000113f89000 [ 495.474874][ T9784] [0000000000000000] pgd=080000011a0fa003, p4d=080000011a0fa003, pud=080000011a259003, pmd=0000000000000000 [ 495.478116][ T9784] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 495.480055][ T9784] Modules linked in: [ 495.481053][ T9784] CPU: 0 PID: 9784 Comm: syz.2.1388 Not tainted 6.1.141-syzkaller #0 [ 495.483295][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.486056][ T9784] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 495.488276][ T9784] pc : 0x0 [ 495.489057][ T9784] lr : bond_xdp_xmit+0x27c/0x45c [ 495.490415][ T9784] sp : ffff800020ae7020 [ 495.491473][ T9784] x29: ffff800020ae70e0 x28: 000000000000000f x27: ffff800020ae7048 [ 495.493554][ T9784] x26: dfff800000000000 x25: ffff800013a6cf58 x24: ffff0000d15b4000 [ 495.495668][ T9784] x23: fffffbffeff98788 x22: ffff0000dec78000 x21: fffffbffeff98788 [ 495.497814][ T9784] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 495.499984][ T9784] x17: 0000000000000000 x16: ffff8000082d0750 x15: 0000000000000002 [ 495.502061][ T9784] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 495.504240][ T9784] x11: 00000000000021e0 x10: ffff80002373a000 x9 : ffff800020ae7080 [ 495.506379][ T9784] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 495.508497][ T9784] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000000 [ 495.510679][ T9784] x2 : ffff800020ae70a0 x1 : 0000000000000001 x0 : ffff0000d15b4000 [ 495.512787][ T9784] Call trace: [ 495.513616][ T9784] 0x0 [ 495.514311][ T9784] bq_xmit_all+0xab0/0xf10 [ 495.515446][ T9784] bq_enqueue+0x288/0x30c [ 495.516603][ T9784] dev_map_enqueue_multi+0xc30/0xd8c [ 495.518024][ T9784] xdp_do_redirect_frame+0x3e4/0x578 [ 495.519429][ T9784] bpf_test_run_xdp_live+0x840/0x1544 [ 495.520853][ T9784] bpf_prog_test_run_xdp+0x560/0xb88 [ 495.522271][ T9784] bpf_prog_test_run+0x2dc/0x364 [ 495.523583][ T9784] __sys_bpf+0x4ec/0x634 [ 495.524744][ T9784] __arm64_sys_bpf+0x80/0x98 [ 495.525980][ T9784] invoke_syscall+0x98/0x2bc [ 495.527214][ T9784] el0_svc_common+0x138/0x258 [ 495.528539][ T9784] do_el0_svc+0x58/0x13c [ 495.529693][ T9784] el0_svc+0x58/0x138 [ 495.530743][ T9784] el0t_64_sync_handler+0x84/0xf0 [ 495.532095][ T9784] el0t_64_sync+0x18c/0x190 [ 495.533275][ T9784] Code: bad PC value [ 495.534342][ T9784] ---[ end trace 0000000000000000 ]--- [ 496.168194][ T9784] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 496.170365][ T9784] SMP: stopping secondary CPUs [ 496.171683][ T9784] Kernel Offset: disabled [ 496.172847][ T9784] CPU features: 0x080000,02070084,26017203 [ 496.174364][ T9784] Memory Limit: none [ 496.787663][ T9784] Rebooting in 86400 seconds..