last executing test programs: 19m30.85763469s ago: executing program 32 (id=96): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 17m29.326735797s ago: executing program 33 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121140, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000300)="d6cf2a01a7a3a7ff3dd2bc882095a0ed", 0x10) 13m17.716479044s ago: executing program 34 (id=1198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x3830021, 0x0, 0xfd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 13m2.761475184s ago: executing program 35 (id=1271): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000300)="d6cf2a01a7a3a7ff3dd2bc882095a0ed", 0x10) 12m56.49387907s ago: executing program 36 (id=1288): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000001580)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) mknodat$loop(r0, 0x0, 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') 5m46.673998467s ago: executing program 37 (id=3121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f00000003c0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)) chroot(&(0x7f0000000a40)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000280)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 3m41.292979017s ago: executing program 4 (id=3901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000324, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 3m41.065423676s ago: executing program 4 (id=3906): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x42) 3m40.942345416s ago: executing program 4 (id=3909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x40000, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) 3m40.749082057s ago: executing program 4 (id=3911): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 3m39.86351022s ago: executing program 4 (id=3916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001000000dd00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) 3m39.333045006s ago: executing program 4 (id=3922): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m39.070257675s ago: executing program 38 (id=3922): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m35.259503208s ago: executing program 8 (id=3961): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b"], 0xe0}], 0x1}, 0x0) 3m34.896971663s ago: executing program 8 (id=3964): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x729f, @empty, 0x80ad}, 0x1c) 3m34.722352627s ago: executing program 8 (id=3965): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5e54e574e293883e8c62df679090dd7d6d4fe73c683419ffffff544e057f000052decdb200008514", 0x28}], 0x1}}], 0x1, 0x40) 3m34.508940951s ago: executing program 8 (id=3967): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 3m33.844576153s ago: executing program 1 (id=3970): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m33.803198627s ago: executing program 8 (id=3971): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r3, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0xd, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 3m33.695932422s ago: executing program 1 (id=3974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="64000000150001002bbd7000fbdbdf25fe880000000000000000000000000001fc0000000000000000000000000000004e2100004e210000020080a03c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ffff0000000a00"], 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3m33.592703404s ago: executing program 1 (id=3976): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1}}], 0x1, 0x6bf68237da62a01, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 3m33.244988108s ago: executing program 8 (id=3978): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x25c5, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x40004) recvfrom(r0, 0x0, 0x0, 0x40016300, 0x0, 0x0) 3m32.745017458s ago: executing program 39 (id=3978): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x25c5, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x40004) recvfrom(r0, 0x0, 0x0, 0x40016300, 0x0, 0x0) 3m32.694923083s ago: executing program 1 (id=3982): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 3m32.395882298s ago: executing program 1 (id=3986): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) 3m31.2599899s ago: executing program 1 (id=3996): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRES64=r4, @ANYRES32=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x40, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000080)=0x2e9aa845) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000001000000050008000100000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 3m30.904936798s ago: executing program 40 (id=3996): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRES64=r4, @ANYRES32=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x40, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000080)=0x2e9aa845) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000001000000050008000100000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 2m43.450459975s ago: executing program 3 (id=4311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000f80), 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m43.269148559s ago: executing program 3 (id=4314): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000440)={[{@nolazytime}, {@orlov}, {@usrjquota}, {@usrjquota}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ff032bbd7000fddbdf250500800008000100700011000000000000000030303a31302e300000000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='svc_xprt_dequeue\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r9, 0x80) 2m41.521049708s ago: executing program 3 (id=4324): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 2m40.983775527s ago: executing program 3 (id=4328): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000940)=""/100, 0x46, 0x64, 0x1, 0x3a}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="73686f776175bcfa3a41eeb9af6b116f632c634c65636b3d72656c617865642c0000001460b9800bac9385a8d74702c5840b4baf579fd168fab4a2064b055400a81ecbf871f58d7b6124"], 0x3, 0x54c, &(0x7f0000000ac0)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) 2m40.188373665s ago: executing program 3 (id=4343): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) epoll_create1(0x80000) setns(r7, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) 2m39.085879554s ago: executing program 3 (id=4355): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790008000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000bc6c00001865000009000000000000000300000018190000", @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x1c, r3, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x8afe, r1, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x181242, 0x1e) 2m24.001780273s ago: executing program 41 (id=4355): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790008000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000bc6c00001865000009000000000000000300000018190000", @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x1c, r3, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x8afe, r1, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x181242, 0x1e) 2.531918528s ago: executing program 2 (id=5567): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}]}}]}, 0x38}}, 0x4048000) 2.501001629s ago: executing program 9 (id=5568): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.326204963s ago: executing program 2 (id=5570): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) close(r0) 2.304712292s ago: executing program 9 (id=5571): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000003c0), 0x10, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.303643449s ago: executing program 0 (id=5572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 2.246140627s ago: executing program 2 (id=5573): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x7}, {0x0}, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/79, 0x4f}], 0x1, 0x42, 0x9}}], 0x48, 0x4000c010}, 0x0) 2.231742729s ago: executing program 5 (id=5574): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2.140553656s ago: executing program 2 (id=5576): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYBLOB="00000000e97600001c0012800b00010067656e65766500000c0002"], 0x3c}, 0x1, 0x2}, 0x0) 2.084564735s ago: executing program 0 (id=5577): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 2.012999773s ago: executing program 5 (id=5578): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200"], 0xa8}}, 0x0) 2.011908773s ago: executing program 2 (id=5579): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="738f752f79", 0x5}, {&(0x7f0000001880)="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", 0x77d}], 0x2) 1.924903089s ago: executing program 2 (id=5580): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.825264508s ago: executing program 7 (id=5581): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.784834187s ago: executing program 6 (id=5582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.220557521s ago: executing program 7 (id=5583): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}]}}]}, 0x38}}, 0x4048000) 1.219676457s ago: executing program 9 (id=5584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1.031167821s ago: executing program 5 (id=5585): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 1.030518471s ago: executing program 6 (id=5586): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.030218128s ago: executing program 0 (id=5587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='ext4_forget\x00', r1, 0x0, 0x800000}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") 1.005459844s ago: executing program 9 (id=5588): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x100000000, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe1085905000100000000000000b420a9c81f40f05f819e01177d3d458dac00000000000000800000003b00f1ffffffffffff01000000000000000002", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.004048686s ago: executing program 7 (id=5589): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) timerfd_gettime(0xffffffffffffffff, 0x0) 802.436595ms ago: executing program 7 (id=5590): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x80}, 0x1, 0x7}, 0x0) pipe2$9p(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) write$P9_RMKDIR(r0, &(0x7f0000000400)={0x14, 0x49, 0x1, {0x10, 0x3, 0x7}}, 0x14) 802.039371ms ago: executing program 6 (id=5591): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_open_pts(r0, 0x42) r4 = dup3(r3, r0, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40010) r5 = syz_pidfd_open(0x0, 0x0) process_madvise(r5, 0x0, 0x0, 0x17, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x25, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 800.301995ms ago: executing program 0 (id=5592): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7d, 0x43, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d9740501000000000800024000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 783.224132ms ago: executing program 9 (id=5593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 696.976636ms ago: executing program 9 (id=5594): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 598.394354ms ago: executing program 6 (id=5595): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 598.072451ms ago: executing program 7 (id=5596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0) 521.368464ms ago: executing program 5 (id=5597): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r5 = dup2(r4, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="4bd203afa8a0a820573831475cc1ca6053bd0284b52b6bcd4c502be0ff09b7129c217f3c9d67ba184004f2bf0b7f03b31257bf6d6812b36e1f51908ef687e8251bfbb0b9f69e302edc28ecffd45e833222c77c05fc230977e0d617288a2e66caaaa8778bfa68feadf212a2d744713b1384039886323d0ed34984459e40c4f186588a738c54cbf74af7a6216faa39c19fcfe445a434f39b46800f46b454b868dbbe072b5629a22e12f874b9f2991994434354be6ffd4d80e1f1230011874785146729a948328f155cedb5122aab4347840eb1f13e0b2d6ec445209f07110df6391737694972f66c41281c68a0744e51bcb90e6249946b6c213bb85d6a791235805ec9ddeb03afbbd3a57e2e122a8ec318c8926489e71cc276776d5d0ffc0f16ed590c076c8fd7640738268450aeec1011de0d913ccf3f68395ce63256677302dff0b176686ed4868618d677a5e52ab1996f64e499fb942cf04d0024ec633560d4eec2b71fb6bd774c501b87715f3e1df55ae1f7aa065dece77394069492ad8365e8ea39ead9538d48fb50a08e2af84312b3b30384ff8441c2f51fcabbfe76aee565f413237b77cf3f95ee0884077db0724c195a4d40cf903402da79cf8161bdae5e39f557e67be556424deda2982344edcad4f36f03e197c50c88929e887f57e3b0836e9cd58e1132df47f52e15177e3ed5d9908bdfe42b6fe282f670d2a44165775d19958d5e689c47e444b16911dbc5f0ade56c679aecedfbb9eef16572fdd117f921f9f89c504b4fc1dd6ab8939f2ac7b8057498ad5a9ab09c99f540aa9784767fde91c92fd7209dfa6ba78e9953d5b8cfebfeacde6763af29193601d9a7fc6b73148c3aa3b483297f4881ad2d95b492f1476d4b218ac49c7cfb867b1650ba16d91e9412c1762ceb66531113956096bca757a2fd8cc1ad9a8cdf9615121d5f0d636cfa222fb21deae21f9f1982a8d0ace1f9104785eeb015ad1792b26d475b1bc4a454b63e7c8346a5b2bd40bc7541b2f6c02895f54e2fdb88ec2d678aaa9c783d61473afa2c8f6c2df83cd7491f26c7f527a38f71d4924225fc4ae77ef33d46012fba2d0ef723e39c75908a66e884b936cd17e20d3f59bf48f5cbf9ef2542ef9af618fc7df6daa30de39934acf70c8309382c266761966beec9ee78aecdb6623102776a04ee83b6193c0e4492665092d8c872fd355012d9fa65e4bac319b19e95baefae67b20de2dd3c43c4c5f1708ed0fcfba9fc192bf0868f4490c41befc09a5dd744b028c3ea20cdaa738c272ec7a816eed47bfad2121ebdbb8415755148330fc6778313d9831131c5c0c6ac8dc3f2fd678e4f20ff1e0fcf82d4795797936401b0cdbfd23fcc9c1e76d1d063a23d126faab2a225f0174d39446bc4215d2cece1997b233e4a807b161626aa9c5d507cc260cb7bbc22ae36e8f7b3862e841bdb19a31a5eb169804aaa04c898f14056a04e7089be42fafd5d6bf6f2471546beaf8db492c76482a7acea8eee3dddf017e209f9f99343036236ac6b198b90a78ff1a50eba379940de611ddf06f6eda290f2bde25c9573d105ac8a0fb286f7deaeac6e56d065d198f61daccef695890a5f840222899a55adc6d0cea1b5c296096aafc9f598fa4869edcdf047d72feee3a7c60ef5859f4ad96084160d550a109eaea639e01dab9b98cd7dc54b55d7eb2d213331bba4dee7c2029d47339e68c31800d77f370b42d2497f66907db06a2de988dbd14cd157836ebbc7239a8d218a797c5ba6816b28cf11576b5e4ddacc5ade05848ede263cd0d8d65f112c294309aac0bc76e58f7d99a704ced501795c57db6615ec6128090fc61698dd5d7210f30c05faf505ae0641899faf1babb36789c83d7ed723a9e1f7400a94da511899da552d782a43f42623af305a7284b538b2579db694347f8fc9db65dbac055dfa3333a3c0aceaf054b8576d7b3d14769b0ab0147bc3506310bf91e0ece8a6bd1bd878a4559cff9f8074f9bbaa6a034eaccf1a13a2dcef5cf991b457b7bc68f5a4e65114aa3e79fa732200f29d925a9fbc5ba377771837166ebe749332627f0e6e898ac3dc22df2356eccaa03ee00cf890d951e8fdd32834256ec3cf0eaa2141", 0x5dd}], 0x1}}], 0x6, 0x20004095) 520.397499ms ago: executing program 0 (id=5598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01800000000000000000010000000800010003000000140004800500032001000000050003008000000008000200020000"], 0x38}, 0x1, 0x0, 0x0, 0x24040845}, 0x0) 412.95878ms ago: executing program 6 (id=5599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 412.510786ms ago: executing program 6 (id=5600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000324, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 250.32818ms ago: executing program 0 (id=5601): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 249.934558ms ago: executing program 5 (id=5602): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 226.879426ms ago: executing program 7 (id=5603): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) timerfd_gettime(0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=5604): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) kernel console output (not intermixed with test programs): 5574877.572:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1137.785926][T23874] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.824799][T24070] program syz.0.4565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1137.898565][T23874] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.065616][T24079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4568'. [ 1138.828020][ T5865] Bluetooth: hci6: command tx timeout [ 1139.275045][T23874] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.327044][T24101] loop0: detected capacity change from 0 to 128 [ 1139.365739][T24103] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.387847][T24106] loop2: detected capacity change from 0 to 128 [ 1139.442093][T23874] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.483585][T24103] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.496810][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.496810][T24113] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1139.548989][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.548989][T24113] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1139.588872][T24103] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.593856][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.593856][T24113] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1139.693555][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.693555][T24113] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1139.709377][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.709377][T24113] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1139.724134][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.724134][T24113] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1139.738047][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.738047][T24113] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1139.780371][T24103] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.804803][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.804803][T24113] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1139.866698][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.866698][T24113] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1139.920490][T24113] syz.2.4572: attempt to access beyond end of device [ 1139.920490][T24113] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1139.924694][T23874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1140.012499][T23874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1140.053925][T23874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1140.106629][T11098] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1140.237359][T23874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1140.782011][T11098] usb 1-1: Using ep0 maxpacket: 16 [ 1140.908674][ T5865] Bluetooth: hci6: command tx timeout [ 1141.103576][T11098] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1141.131830][T11098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.181280][T11098] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1141.241446][T11098] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1141.281277][T11098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.322760][T11098] usb 1-1: Product: syz [ 1141.327918][ T49] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.344770][T11098] usb 1-1: Manufacturer: syz [ 1141.352958][ T49] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.370924][T11098] usb 1-1: SerialNumber: syz [ 1141.407281][ T49] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.441996][T19201] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.680829][T23874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.696020][T24170] loop7: detected capacity change from 0 to 512 [ 1141.705537][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1141.745613][T24170] EXT4-fs: Ignoring removed nobh option [ 1141.770355][T23874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.796086][T11098] usb 1-1: 0:2 : does not exist [ 1141.815030][T20748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.822182][T20748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.831807][T24170] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.4591: corrupted inode contents [ 1141.852034][T24170] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.4591: mark_inode_dirty error [ 1141.865535][T20748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.872694][T20748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.881343][T24170] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.4591: corrupted inode contents [ 1141.896527][T24170] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.4591: mark_inode_dirty error [ 1141.913434][T24170] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4591: Failed to acquire dquot type 0 [ 1141.991321][T24170] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4591: corrupted inode contents [ 1142.131571][T24170] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.4591: mark_inode_dirty error [ 1142.307567][T24170] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4591: corrupted inode contents [ 1142.510215][T11098] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1142.526276][T24170] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.4591: mark_inode_dirty error [ 1142.549449][T11098] usb 1-1: USB disconnect, device number 11 [ 1142.550989][T24170] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4591: corrupted inode contents [ 1143.888593][T24170] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1143.932384][T24188] 9pnet_fd: Insufficient options for proto=fd [ 1143.952881][T24170] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4591: corrupted inode contents [ 1143.988275][T24191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1144.007538][T24170] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.4591: mark_inode_dirty error [ 1144.034682][T24170] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1144.054970][T24170] EXT4-fs (loop7): 1 truncate cleaned up [ 1144.068980][T24170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.102930][T24170] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.121390][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1144.121410][ T30] audit: type=1326 audit(1755574884.612:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.190176][ T30] audit: type=1326 audit(1755574884.642:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.236000][ T30] audit: type=1326 audit(1755574884.652:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.244611][T23874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.293098][ T30] audit: type=1326 audit(1755574884.652:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.325372][T24212] loop6: detected capacity change from 0 to 1024 [ 1144.334851][ T30] audit: type=1326 audit(1755574884.652:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.364715][ T30] audit: type=1326 audit(1755574884.652:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.394573][ T30] audit: type=1326 audit(1755574884.652:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.425334][ T30] audit: type=1326 audit(1755574884.652:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.453525][T24212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.501077][ T30] audit: type=1326 audit(1755574884.662:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24198 comm="syz.0.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1144.537854][T21774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.605810][ T49] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1144.640169][ T49] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 1144.977855][T23874] veth0_vlan: entered promiscuous mode [ 1145.003745][T23874] veth1_vlan: entered promiscuous mode [ 1145.085805][T24237] 9pnet_fd: Insufficient options for proto=fd [ 1145.099709][T24212] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.4604: Allocating blocks 385-513 which overlap fs metadata [ 1145.118675][T23874] veth0_macvtap: entered promiscuous mode [ 1145.146265][T23874] veth1_macvtap: entered promiscuous mode [ 1145.155296][T24224] EXT4-fs (loop6): pa ffff888030d99570: logic 16, phys. 129, len 24 [ 1145.163426][T24224] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1145.215022][T23874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.228454][T24224] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1 [ 1145.256814][T23874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.271251][T24224] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1145.271251][T24224] [ 1145.304274][T20727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.317033][T24240] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4611'. [ 1145.326181][T20727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.393341][T20727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.440128][T20727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.758524][T20839] Trying to write to read-only block-device loop6 [ 1145.770977][T20839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.792136][T24249] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4614'. [ 1145.853060][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.892514][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.984569][T20727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.058753][T20727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.334032][T24275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1146.467966][T24180] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1146.497100][T24291] loop0: detected capacity change from 0 to 1024 [ 1146.536638][T24291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.597314][T24291] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4630: Allocating blocks 497-513 which overlap fs metadata [ 1146.623550][T24291] Trying to write to read-only block-device loop0 [ 1146.638181][T24180] usb 7-1: Using ep0 maxpacket: 16 [ 1146.645267][T24180] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1146.660176][T24180] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.663635][T24290] EXT4-fs (loop0): pa ffff888030d7ae80: logic 80, phys. 209, len 19 [ 1146.679258][T24290] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 1146.689320][T24180] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1146.706020][T24180] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1146.735168][T24180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.823903][T24180] usb 7-1: Product: syz [ 1146.849424][T24180] usb 7-1: Manufacturer: syz [ 1146.862319][T21962] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.911379][T24180] usb 7-1: SerialNumber: syz [ 1147.181960][T19383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1147.191379][T19383] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1147.198693][T19383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1147.206725][T19383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1147.215412][T19383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1147.332379][T22661] bridge0: port 3(syz_tun) entered disabled state [ 1147.344232][T24180] usb 7-1: 0:2 : does not exist [ 1147.383878][T22661] syz_tun (unregistering): left allmulticast mode [ 1147.418879][T22661] syz_tun (unregistering): left promiscuous mode [ 1147.441081][T22661] bridge0: port 3(syz_tun) entered disabled state [ 1147.486735][T24311] lo speed is unknown, defaulting to 1000 [ 1147.595718][T24324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1148.330735][T24180] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1148.346386][T24311] chnl_net:caif_netlink_parms(): no params data found [ 1148.394042][T24180] usb 7-1: USB disconnect, device number 18 [ 1148.521959][T24311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.551372][T24311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.582764][T24311] bridge_slave_0: entered allmulticast mode [ 1148.613678][T24311] bridge_slave_0: entered promiscuous mode [ 1148.621811][T24311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.629016][T24311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.636264][T24311] bridge_slave_1: entered allmulticast mode [ 1148.644481][T24311] bridge_slave_1: entered promiscuous mode [ 1148.817802][T24311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.854923][T24311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.950878][T24359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4654'. [ 1148.969983][T24311] team0: Port device team_slave_0 added [ 1148.984130][T24311] team0: Port device team_slave_1 added [ 1149.054284][T24311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.073785][T24311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.156970][T24311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.185255][T24311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.196626][T24311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.227363][T24311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.244128][T19383] Bluetooth: hci7: command tx timeout [ 1149.282785][ T30] kauditd_printk_skb: 205 callbacks suppressed [ 1149.282807][ T30] audit: type=1326 audit(1755574889.772:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24370 comm="syz.5.4660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd07b78ebe9 code=0x0 [ 1149.800298][T24311] hsr_slave_0: entered promiscuous mode [ 1149.827627][T24311] hsr_slave_1: entered promiscuous mode [ 1149.871545][T24311] debugfs: 'hsr0' already exists in 'hsr' [ 1149.877316][T24311] Cannot create hsr debugfs directory [ 1149.910823][T24384] netlink: 'syz.7.4663': attribute type 4 has an invalid length. [ 1149.935142][T24385] wireguard0: entered promiscuous mode [ 1149.946253][T24385] wireguard0: entered allmulticast mode [ 1149.972198][T24388] openvswitch: netlink: Message has 8 unknown bytes. [ 1150.018639][ T5962] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1150.194684][T24311] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.199982][ T5962] usb 7-1: Using ep0 maxpacket: 16 [ 1150.222512][ T5962] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1150.235550][ T5962] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.246637][ T5962] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.271402][T24403] loop5: detected capacity change from 0 to 736 [ 1150.272721][ T5962] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1150.304843][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.313447][ T5962] usb 7-1: Product: syz [ 1150.316196][T24311] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.317801][ T5962] usb 7-1: Manufacturer: syz [ 1150.334207][ T5962] usb 7-1: SerialNumber: syz [ 1150.454945][T24311] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.601677][T24311] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.637385][T24417] loop2: detected capacity change from 0 to 512 [ 1150.666768][T24417] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1150.681458][T24417] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1150.692357][T24417] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1150.733289][T24311] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1150.740432][T24417] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1150.756782][T24417] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1150.773251][ T5962] usb 7-1: 0:2 : does not exist [ 1150.782071][T24417] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4671: bg 0: block 40: padding at end of block bitmap is not set [ 1150.837342][T24417] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1150.874203][T24417] EXT4-fs (loop2): 1 truncate cleaned up [ 1150.892589][T24417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1150.936633][ T30] audit: type=1326 audit(1755574891.422:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24430 comm="syz.7.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1150.971234][T24311] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1150.996433][ T30] audit: type=1326 audit(1755574891.422:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24430 comm="syz.7.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1151.031913][T24311] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1151.040165][T21925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.063884][T24311] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1151.080323][ T30] audit: type=1326 audit(1755574891.452:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24430 comm="syz.7.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1151.117740][ T30] audit: type=1326 audit(1755574891.452:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24430 comm="syz.7.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1151.185103][ T30] audit: type=1326 audit(1755574891.452:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24430 comm="syz.7.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1151.277044][ T30] audit: type=1326 audit(1755574891.662:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24432 comm="syz.7.4679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dab58ebe9 code=0x0 [ 1151.308799][T19383] Bluetooth: hci7: command tx timeout [ 1151.334591][T24311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.360498][T24311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.379636][T20723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.386755][T20723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.434860][ T5962] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1151.450359][T20723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.457558][T20723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.599400][T24453] netlink: 'syz.2.4684': attribute type 1 has an invalid length. [ 1151.613304][ T5962] usb 7-1: USB disconnect, device number 19 [ 1151.639221][T24453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1151.661076][T24453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1151.684432][T24453] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1151.709425][T24453] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1151.912748][T24464] macvtap0: refused to change device tx_queue_len [ 1152.104313][T24474] loop7: detected capacity change from 0 to 128 [ 1152.146038][T24474] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1152.196501][T24474] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.240527][ T30] audit: type=1326 audit(1755574892.722:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.7.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1152.281210][ T30] audit: type=1326 audit(1755574892.722:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.7.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1152.406469][T24311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.970267][T21774] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1153.028582][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4695'. [ 1153.431396][T24512] loop7: detected capacity change from 0 to 40427 [ 1153.438972][T19383] Bluetooth: hci7: command tx timeout [ 1153.461706][T24512] F2FS-fs (loop7): invalid crc value [ 1153.815968][T24512] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1153.825582][T24512] F2FS-fs (loop7): Start checkpoint disabled! [ 1153.859192][T24512] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1154.274275][T24523] bio_check_eod: 101 callbacks suppressed [ 1154.274377][T24523] syz.7.4697: attempt to access beyond end of device [ 1154.274377][T24523] loop7: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1154.418560][T19195] kworker/u8:2: attempt to access beyond end of device [ 1154.418560][T19195] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1154.463941][T19195] CPU: 0 UID: 0 PID: 19195 Comm: kworker/u8:2 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 1154.463986][T19195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1154.464002][T19195] Workqueue: writeback wb_workfn (flush-7:7) [ 1154.464038][T19195] Call Trace: [ 1154.464047][T19195] [ 1154.464058][T19195] dump_stack_lvl+0x189/0x250 [ 1154.464088][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.464119][T19195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1154.464148][T19195] ? __pfx_queue_work_on+0x10/0x10 [ 1154.464173][T19195] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1154.464204][T19195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1154.464241][T19195] f2fs_handle_critical_error+0x37c/0x540 [ 1154.464278][T19195] f2fs_write_end_io+0x886/0xb60 [ 1154.464311][T19195] __submit_merged_bio+0x27a/0x6a0 [ 1154.464348][T19195] __submit_merged_write_cond+0x255/0x530 [ 1154.464383][T19195] f2fs_write_data_pages+0x261d/0x3000 [ 1154.464440][T19195] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1154.464485][T19195] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1154.464535][T19195] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1154.464578][T19195] ? trace_f2fs_writepages+0x7f/0x200 [ 1154.464614][T19195] ? f2fs_write_node_pages+0x478/0x6e0 [ 1154.464644][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.464677][T19195] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1154.464714][T19195] ? f2fs_update_inode+0x13d9/0x2620 [ 1154.464747][T19195] ? f2fs_write_inode+0x3fb/0x5f0 [ 1154.464780][T19195] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 1154.464815][T19195] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1154.464854][T19195] do_writepages+0x32e/0x550 [ 1154.464887][T19195] ? unwind_next_frame+0xa5/0x2390 [ 1154.464919][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.464954][T19195] __writeback_single_inode+0x145/0xff0 [ 1154.464994][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465022][T19195] ? do_raw_spin_unlock+0x122/0x240 [ 1154.465056][T19195] writeback_sb_inodes+0x6c7/0x1010 [ 1154.465097][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465127][T19195] ? fprop_reflect_period_percpu+0x6b/0x330 [ 1154.465166][T19195] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1154.465226][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465253][T19195] ? rcu_is_watching+0x15/0xb0 [ 1154.465278][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465311][T19195] wb_writeback+0x43b/0xaf0 [ 1154.465348][T19195] ? queue_io+0x3d1/0x590 [ 1154.465380][T19195] ? __pfx_wb_writeback+0x10/0x10 [ 1154.465417][T19195] ? rcu_is_watching+0x15/0xb0 [ 1154.465444][T19195] wb_workfn+0x409/0xef0 [ 1154.465480][T19195] ? __pfx_wb_workfn+0x10/0x10 [ 1154.465504][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465531][T19195] ? rcu_is_watching+0x15/0xb0 [ 1154.465555][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465582][T19195] ? rcu_is_watching+0x15/0xb0 [ 1154.465606][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465639][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465665][T19195] ? rcu_is_watching+0x15/0xb0 [ 1154.465688][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465715][T19195] ? lock_acquire+0x5f/0x360 [ 1154.465750][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465781][T19195] ? rcu_is_watching+0x15/0xb0 [ 1154.465803][T19195] ? process_scheduled_works+0x9ef/0x17b0 [ 1154.465827][T19195] ? process_scheduled_works+0x9ef/0x17b0 [ 1154.465852][T19195] process_scheduled_works+0xae1/0x17b0 [ 1154.465896][T19195] ? __pfx_process_scheduled_works+0x10/0x10 [ 1154.465925][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.465959][T19195] worker_thread+0x8a0/0xda0 [ 1154.466009][T19195] kthread+0x711/0x8a0 [ 1154.466043][T19195] ? __pfx_worker_thread+0x10/0x10 [ 1154.466067][T19195] ? __pfx_kthread+0x10/0x10 [ 1154.466094][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.466124][T19195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.466152][T19195] ? rcu_is_watching+0x15/0xb0 [ 1154.466176][T19195] ? __pfx_kthread+0x10/0x10 [ 1154.466206][T19195] ret_from_fork+0x3fc/0x770 [ 1154.466234][T19195] ? __pfx_ret_from_fork+0x10/0x10 [ 1154.466263][T19195] ? __switch_to_asm+0x39/0x70 [ 1154.466294][T19195] ? __switch_to_asm+0x33/0x70 [ 1154.466326][T19195] ? __pfx_kthread+0x10/0x10 [ 1154.466357][T19195] ret_from_fork_asm+0x1a/0x30 [ 1154.466401][T19195] [ 1154.466411][T19195] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1154.528015][T24180] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1154.545067][T24311] veth0_vlan: entered promiscuous mode [ 1154.848863][T24180] usb 6-1: Using ep0 maxpacket: 16 [ 1154.928237][T24311] veth1_vlan: entered promiscuous mode [ 1155.015878][T24180] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1155.025789][T24311] veth0_macvtap: entered promiscuous mode [ 1155.028005][T24180] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.063681][T24180] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1155.075439][T24311] veth1_macvtap: entered promiscuous mode [ 1155.094354][T24180] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1155.103649][T24180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.119832][T24311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.141393][T24311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.152610][T24180] usb 6-1: Product: syz [ 1155.156783][T24180] usb 6-1: Manufacturer: syz [ 1155.178132][T24180] usb 6-1: SerialNumber: syz [ 1155.202099][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.251663][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.264474][T24527] loop6: detected capacity change from 0 to 32768 [ 1155.276728][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.304062][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.306287][T24527] XFS: ikeep mount option is deprecated. [ 1155.523236][T19383] Bluetooth: hci7: command tx timeout [ 1155.890262][T20748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.928078][T20748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.978280][T24180] usb 6-1: 0:2 : does not exist [ 1156.008639][T20723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.030371][T20723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.243777][T24546] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4631'. [ 1156.267935][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4631'. [ 1156.297040][T24546] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4631'. [ 1156.621330][T24180] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1156.723082][T24180] usb 6-1: USB disconnect, device number 25 [ 1156.890021][T24564] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4714'. [ 1156.966178][T24566] loop9: detected capacity change from 0 to 736 [ 1156.979922][T24566] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1157.341804][T24562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4713'. [ 1157.855727][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1157.855747][ T30] audit: type=1326 audit(1755574898.342:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1157.944920][ T30] audit: type=1326 audit(1755574898.342:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1158.120946][T24608] binder: 24604:24608 ioctl 4018620d 0 returned -22 [ 1158.800957][ T30] audit: type=1326 audit(1755574898.392:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1158.823738][ T30] audit: type=1326 audit(1755574898.392:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1158.847166][ T30] audit: type=1326 audit(1755574898.392:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1158.870137][ T30] audit: type=1326 audit(1755574898.392:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1158.892999][T20975] block nbd0: Possible stuck request ffff8880252ae000: control (read@0,1024B). Runtime 990 seconds [ 1158.900887][T24620] netlink: 'syz.0.4734': attribute type 4 has an invalid length. [ 1158.904961][T20975] block nbd0: Possible stuck request ffff8880252ae1c0: control (read@1024,1024B). Runtime 990 seconds [ 1158.923901][T20975] block nbd0: Possible stuck request ffff8880252ae380: control (read@2048,1024B). Runtime 990 seconds [ 1158.935313][T20975] block nbd0: Possible stuck request ffff8880252ae540: control (read@3072,1024B). Runtime 990 seconds [ 1158.947998][ T30] audit: type=1326 audit(1755574898.392:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1158.971367][T24622] netlink: 'syz.0.4734': attribute type 4 has an invalid length. [ 1158.980141][ T30] audit: type=1326 audit(1755574898.392:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1159.003176][ T30] audit: type=1326 audit(1755574898.392:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1159.027538][ T30] audit: type=1326 audit(1755574898.402:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.0.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1159.392441][T24641] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4743'. [ 1159.448354][T24646] netlink: 'syz.5.4745': attribute type 4 has an invalid length. [ 1159.498373][T24649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4747'. [ 1159.555349][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4747'. [ 1159.945976][T24649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4747'. [ 1160.210126][T24662] smc: net device bond0 applied user defined pnetid SYZ0 [ 1160.220511][T24662] smc: net device bond0 erased user defined pnetid SYZ0 [ 1160.605255][T24663] loop5: detected capacity change from 0 to 512 [ 1160.641870][T24663] EXT4-fs: Ignoring removed orlov option [ 1161.214738][T24663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1161.224577][T24663] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 1163.070097][T24664] binder: 24656:24664 ioctl 4018620d 0 returned -22 [ 1163.565294][T24678] loop2: detected capacity change from 0 to 736 [ 1164.121232][T24689] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4762'. [ 1164.162266][T24691] netlink: 'syz.5.4763': attribute type 4 has an invalid length. [ 1164.194315][T24691] netlink: 'syz.5.4763': attribute type 4 has an invalid length. [ 1164.467068][T24703] netlink: 'syz.2.4768': attribute type 4 has an invalid length. [ 1164.473582][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1164.473604][ T30] audit: type=1326 audit(1755574904.952:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1164.583697][ T30] audit: type=1326 audit(1755574904.952:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1164.648420][ T30] audit: type=1326 audit(1755574904.952:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1164.671127][ T30] audit: type=1326 audit(1755574904.992:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1164.801095][ T30] audit: type=1326 audit(1755574904.992:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1164.882630][ T30] audit: type=1326 audit(1755574904.992:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1164.918954][T24725] loop0: detected capacity change from 0 to 736 [ 1164.968144][ T30] audit: type=1326 audit(1755574904.992:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1164.971204][T24729] netlink: 'syz.2.4779': attribute type 4 has an invalid length. [ 1165.061535][T24734] netlink: 'syz.2.4779': attribute type 4 has an invalid length. [ 1165.076055][ T30] audit: type=1326 audit(1755574904.992:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1165.177446][ T30] audit: type=1326 audit(1755574904.992:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1165.257106][ T30] audit: type=1326 audit(1755574904.992:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.7.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1165.287983][T24737] $Hÿ: renamed from bond0 (while UP) [ 1165.302654][T24745] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4783'. [ 1165.351649][T24737] $Hÿ: entered promiscuous mode [ 1165.373523][T24748] loop9: detected capacity change from 0 to 736 [ 1165.388683][T24737] bond_slave_0: entered promiscuous mode [ 1165.400255][T24748] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1165.415803][T24737] bond_slave_1: entered promiscuous mode [ 1165.441196][T24747] netlink: 'syz.7.4785': attribute type 4 has an invalid length. [ 1165.650221][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4791'. [ 1165.664681][T24760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4791'. [ 1166.449354][T24783] loop5: detected capacity change from 0 to 512 [ 1166.476004][T24783] EXT4-fs: Ignoring removed orlov option [ 1167.338054][T24783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1167.346514][T24783] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 1167.759433][T24787] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.979682][T24798] loop2: detected capacity change from 0 to 512 [ 1168.007781][T24787] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.078535][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4805'. [ 1168.105417][T24798] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1168.120233][T24798] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1168.147322][T24798] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1168.175772][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4807'. [ 1168.193781][T24798] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1168.216269][T24787] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.246908][T24798] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4804: bg 0: block 40: padding at end of block bitmap is not set [ 1168.267304][T24811] loop0: detected capacity change from 0 to 736 [ 1168.293654][T24811] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1168.301008][T24798] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1168.320154][T24798] EXT4-fs (loop2): 1 truncate cleaned up [ 1168.333849][T24798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1168.464179][T21925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.510320][T24787] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.590734][T24818] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.690129][T24818] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.734158][T24828] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4814'. [ 1168.763044][T20723] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.786440][T24825] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4814'. [ 1168.818728][T24818] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.841982][T24830] macvtap0: refused to change device tx_queue_len [ 1168.855616][T20723] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.900942][T20723] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.977199][T24818] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.064580][T20732] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.123010][T24847] netlink: 'syz.6.4823': attribute type 4 has an invalid length. [ 1169.214781][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.250397][T20723] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.297470][T20723] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.359943][T20732] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.508913][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1169.508933][ T30] audit: type=1326 audit(1755574910.002:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1169.531692][T24860] loop5: detected capacity change from 0 to 512 [ 1169.537332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.641517][T24860] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1169.667179][T24860] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4828: invalid indirect mapped block 2683928664 (level 1) [ 1169.675491][ T30] audit: type=1326 audit(1755574910.022:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1169.703686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.741291][T24860] EXT4-fs (loop5): 1 truncate cleaned up [ 1169.790840][T24860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.895164][T24860] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.4828: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1169.943836][ T30] audit: type=1326 audit(1755574910.042:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1170.032457][T24875] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.4828: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1170.050429][ T30] audit: type=1326 audit(1755574910.042:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1170.215968][T23874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.217935][ T30] audit: type=1326 audit(1755574910.042:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1170.331862][T24882] netlink: 'syz.0.4836': attribute type 4 has an invalid length. [ 1170.398023][ T30] audit: type=1326 audit(1755574910.042:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1170.420400][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.527107][ T30] audit: type=1326 audit(1755574910.052:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1170.639985][ T30] audit: type=1326 audit(1755574910.052:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1170.766576][ T30] audit: type=1326 audit(1755574910.052:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1170.789026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.868034][ T30] audit: type=1326 audit(1755574910.052:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24856 comm="syz.6.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1171.802087][T24918] loop5: detected capacity change from 0 to 512 [ 1171.846503][T24918] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1171.859944][T24918] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4848: invalid indirect mapped block 2683928664 (level 1) [ 1171.898431][T24918] EXT4-fs (loop5): 1 truncate cleaned up [ 1171.929029][T24918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.007784][T24918] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.4848: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1172.101341][T24924] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.4848: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1172.143434][T24926] netlink: 'syz.0.4851': attribute type 4 has an invalid length. [ 1172.227434][T24923] loop7: detected capacity change from 0 to 8192 [ 1172.402809][T24931] binder: 24927:24931 ioctl 4018620d 0 returned -22 [ 1172.428168][T24865] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1172.558982][T24865] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1173.112723][T23874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.606077][T24941] loop9: detected capacity change from 0 to 32768 [ 1173.613182][T24941] XFS: ikeep mount option is deprecated. [ 1173.650015][T24941] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1173.696929][T24941] XFS (loop9): Ending clean mount [ 1173.703135][T24941] XFS (loop9): Quotacheck needed: Please wait. [ 1173.713949][T24941] XFS (loop9): Quotacheck: Done. [ 1174.564360][T24972] netlink: 'syz.7.4865': attribute type 4 has an invalid length. [ 1176.009380][T24311] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1176.342331][T25009] netlink: 'syz.5.4879': attribute type 4 has an invalid length. [ 1176.644773][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1176.644792][ T30] audit: type=1326 audit(1755574917.132:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.9.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1176.768354][ T30] audit: type=1326 audit(1755574917.132:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.9.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1176.861326][ T30] audit: type=1326 audit(1755574917.132:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.9.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1176.944169][ T30] audit: type=1326 audit(1755574917.132:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.9.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1177.027565][ T30] audit: type=1326 audit(1755574917.172:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.9.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1177.082258][ T30] audit: type=1326 audit(1755574917.182:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.9.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1177.135096][ T30] audit: type=1326 audit(1755574917.182:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.9.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1177.474938][T25030] loop2: detected capacity change from 0 to 164 [ 1177.658669][T25030] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1177.687517][T25032] loop9: detected capacity change from 0 to 32768 [ 1177.694688][T25032] XFS: ikeep mount option is deprecated. [ 1177.738808][T25032] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1177.767282][T25036] loop0: detected capacity change from 0 to 512 [ 1177.895123][T25032] XFS (loop9): Ending clean mount [ 1177.901376][T25032] XFS (loop9): Quotacheck needed: Please wait. [ 1177.924289][T25032] XFS (loop9): Quotacheck: Done. [ 1178.237656][T25057] netlink: 'syz.2.4895': attribute type 4 has an invalid length. [ 1178.322256][T24869] Set syz1 is full, maxelem 65536 reached [ 1178.415338][T25061] loop0: detected capacity change from 0 to 512 [ 1178.428651][T25061] EXT4-fs: Ignoring removed orlov option [ 1179.918646][ T30] audit: type=1326 audit(1755574920.412:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25069 comm="syz.5.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1180.083294][T25074] loop6: detected capacity change from 0 to 512 [ 1180.095668][T25074] EXT4-fs: Ignoring removed orlov option [ 1180.708388][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1180.927972][ T30] audit: type=1326 audit(1755574920.412:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25069 comm="syz.5.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1180.958141][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880799f2800: rx timeout, send abort [ 1181.091209][ T30] audit: type=1326 audit(1755574920.422:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25069 comm="syz.5.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1181.804408][T24311] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1181.908104][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1181.908125][ T30] audit: type=1326 audit(1755574922.392:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm="syz.2.4905" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaedd8ebe9 code=0x0 [ 1182.231014][T25095] 9pnet_fd: Insufficient options for proto=fd [ 1182.298254][T25098] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4908'. [ 1182.400170][T25101] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4908'. [ 1182.886521][ T30] audit: type=1326 audit(1755574923.372:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1182.951755][ T30] audit: type=1326 audit(1755574923.372:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1183.012323][ T30] audit: type=1326 audit(1755574923.412:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1183.153549][T25123] loop0: detected capacity change from 0 to 512 [ 1183.165936][T25123] EXT4-fs: Ignoring removed orlov option [ 1183.321603][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 1183.997982][ T30] audit: type=1326 audit(1755574923.412:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1184.024457][ T30] audit: type=1326 audit(1755574923.412:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1184.528040][ T30] audit: type=1326 audit(1755574923.412:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1184.565697][ T30] audit: type=1326 audit(1755574923.412:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1184.574794][T25133] loop7: detected capacity change from 0 to 32768 [ 1184.596022][T25133] XFS: ikeep mount option is deprecated. [ 1184.648203][ T30] audit: type=1326 audit(1755574923.412:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1184.674230][T25133] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1184.695659][ T30] audit: type=1326 audit(1755574923.412:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1184.982957][T25133] XFS (loop7): Ending clean mount [ 1184.989845][T25133] XFS (loop7): Quotacheck needed: Please wait. [ 1185.018871][T25133] XFS (loop7): Quotacheck: Done. [ 1185.313704][T21774] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1185.448321][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4917'. [ 1185.989300][T25167] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4929'. [ 1186.109419][T25169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1186.122564][T25171] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4929'. [ 1186.403740][T25143] loop0: detected capacity change from 0 to 40427 [ 1187.157720][T25185] loop6: detected capacity change from 0 to 512 [ 1187.171579][T25185] EXT4-fs: Ignoring removed orlov option [ 1188.428106][T21684] Bluetooth: hci1: command 0x0406 tx timeout [ 1188.434218][T21684] Bluetooth: hci5: command 0x0406 tx timeout [ 1188.655139][T25198] loop2: detected capacity change from 0 to 32768 [ 1188.662804][T25198] XFS: ikeep mount option is deprecated. [ 1188.715036][T25198] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1188.850920][T25198] XFS (loop2): Ending clean mount [ 1188.857029][T25198] XFS (loop2): Quotacheck needed: Please wait. [ 1188.876611][T25198] XFS (loop2): Quotacheck: Done. [ 1188.981895][T25220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4942'. [ 1189.047276][T20975] block nbd0: Possible stuck request ffff8880252ae000: control (read@0,1024B). Runtime 1020 seconds [ 1189.058956][T20975] block nbd0: Possible stuck request ffff8880252ae1c0: control (read@1024,1024B). Runtime 1020 seconds [ 1189.070691][T20975] block nbd0: Possible stuck request ffff8880252ae380: control (read@2048,1024B). Runtime 1020 seconds [ 1189.081797][T20975] block nbd0: Possible stuck request ffff8880252ae540: control (read@3072,1024B). Runtime 1020 seconds [ 1189.228279][T25220] loop9: detected capacity change from 0 to 736 [ 1189.235241][T25220] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1189.307838][T21925] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1189.340684][T25232] netlink: 'syz.0.4949': attribute type 21 has an invalid length. [ 1189.368167][T25232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4949'. [ 1189.418562][T25232] netlink: 'syz.0.4949': attribute type 1 has an invalid length. [ 1189.852579][T25245] loop6: detected capacity change from 0 to 512 [ 1189.865067][T25245] EXT4-fs: Ignoring removed orlov option [ 1190.562780][T25250] loop5: detected capacity change from 0 to 512 [ 1190.606843][T25250] EXT4-fs: Ignoring removed orlov option [ 1190.642590][T25250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.700529][T25248] loop9: detected capacity change from 0 to 128 [ 1190.743797][T25250] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.785754][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1190.785777][ T30] audit: type=1800 audit(1755574931.262:1325): pid=25248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4954" name="file2" dev="loop9" ino=1048877 res=0 errno=0 [ 1190.828804][T25248] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 1190.880947][T25248] FAT-fs (loop9): Filesystem has been set read-only [ 1190.887590][T25248] syz.9.4954: attempt to access beyond end of device [ 1190.887590][T25248] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1191.006082][T25248] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 1191.187271][T25248] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 1191.201207][T25262] syz.9.4954: attempt to access beyond end of device [ 1191.201207][T25262] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 1191.291125][T25262] Buffer I/O error on dev loop9, logical block 2065, async page read [ 1191.316490][T25262] syz.9.4954: attempt to access beyond end of device [ 1191.316490][T25262] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 1191.483016][T25271] loop6: detected capacity change from 0 to 32768 [ 1191.490057][T25271] XFS: ikeep mount option is deprecated. [ 1191.551727][T25262] Buffer I/O error on dev loop9, logical block 2066, async page read [ 1191.559945][T25262] syz.9.4954: attempt to access beyond end of device [ 1191.559945][T25262] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 1191.573860][T25262] Buffer I/O error on dev loop9, logical block 2067, async page read [ 1191.762594][T25262] syz.9.4954: attempt to access beyond end of device [ 1191.762594][T25262] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 1191.804951][T23874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.833612][T25262] Buffer I/O error on dev loop9, logical block 2068, async page read [ 1191.845981][T25276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1191.863237][T25262] syz.9.4954: attempt to access beyond end of device [ 1191.863237][T25262] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 1191.912227][T25279] loop2: detected capacity change from 0 to 736 [ 1191.973157][T25279] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1192.013612][T25262] Buffer I/O error on dev loop9, logical block 2069, async page read [ 1192.078264][T25262] syz.9.4954: attempt to access beyond end of device [ 1192.078264][T25262] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 1192.121395][T25284] 9pnet_fd: Insufficient options for proto=fd [ 1192.131190][T25262] Buffer I/O error on dev loop9, logical block 2070, async page read [ 1192.145914][T25262] syz.9.4954: attempt to access beyond end of device [ 1192.145914][T25262] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 1192.161770][T25262] Buffer I/O error on dev loop9, logical block 2071, async page read [ 1192.178899][T25262] syz.9.4954: attempt to access beyond end of device [ 1192.178899][T25262] loop9: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 1192.224121][T25293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4966'. [ 1192.244679][T25262] Buffer I/O error on dev loop9, logical block 2072, async page read [ 1192.537070][ T30] audit: type=1326 audit(1755574933.022:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1192.655579][ T30] audit: type=1326 audit(1755574933.052:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1192.831813][ T30] audit: type=1326 audit(1755574933.062:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1192.965202][ T30] audit: type=1326 audit(1755574933.062:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1193.066680][ T30] audit: type=1326 audit(1755574933.062:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1193.147400][ T30] audit: type=1326 audit(1755574933.062:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1193.348500][ T30] audit: type=1326 audit(1755574933.062:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1193.371445][ T30] audit: type=1326 audit(1755574933.062:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1194.384201][T25335] lo speed is unknown, defaulting to 1000 [ 1194.617446][T25333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.683228][ T30] audit: type=1326 audit(1755574933.072:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.9.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3091d8ebe9 code=0x7ffc0000 [ 1194.987051][T25350] loop2: detected capacity change from 0 to 512 [ 1195.023701][T25350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 1195.054448][T25350] System zones: 1-12 [ 1195.093766][T25350] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4987: invalid indirect mapped block 8 (level 2) [ 1195.173127][T25350] EXT4-fs (loop2): Remounting filesystem read-only [ 1195.242271][T25350] EXT4-fs (loop2): 1 truncate cleaned up [ 1195.262229][T25350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.873072][T21925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.101185][T25375] loop5: detected capacity change from 0 to 40427 [ 1196.135832][T25375] F2FS-fs (loop5): invalid crc value [ 1196.199668][T25375] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1196.209310][T25375] F2FS-fs (loop5): Start checkpoint disabled! [ 1196.217340][T25375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1196.329806][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1196.329892][ T30] audit: type=1800 audit(1755574936.802:1364): pid=25384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4993" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1196.427047][T25384] syz.5.4993: attempt to access beyond end of device [ 1196.427047][T25384] loop5: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1196.740462][T25388] loop6: detected capacity change from 0 to 128 [ 1196.764294][T20748] kworker/u8:65: attempt to access beyond end of device [ 1196.764294][T20748] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1196.801553][T20748] CPU: 1 UID: 0 PID: 20748 Comm: kworker/u8:65 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 1196.801589][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1196.801606][T20748] Workqueue: writeback wb_workfn (flush-7:5) [ 1196.801642][T20748] Call Trace: [ 1196.801651][T20748] [ 1196.801661][T20748] dump_stack_lvl+0x189/0x250 [ 1196.801693][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.801724][T20748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1196.801753][T20748] ? __pfx_queue_work_on+0x10/0x10 [ 1196.801778][T20748] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1196.801810][T20748] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1196.801850][T20748] f2fs_handle_critical_error+0x37c/0x540 [ 1196.801890][T20748] f2fs_write_end_io+0x886/0xb60 [ 1196.801925][T20748] __submit_merged_bio+0x27a/0x6a0 [ 1196.801964][T20748] __submit_merged_write_cond+0x255/0x530 [ 1196.802002][T20748] f2fs_write_data_pages+0x261d/0x3000 [ 1196.802072][T20748] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1196.802119][T20748] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1196.802170][T20748] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1196.802212][T20748] ? trace_f2fs_writepages+0x7f/0x200 [ 1196.802248][T20748] ? f2fs_write_node_pages+0x478/0x6e0 [ 1196.802277][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802309][T20748] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1196.802344][T20748] ? f2fs_update_inode+0x13d9/0x2620 [ 1196.802378][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802406][T20748] ? rcu_qs+0xc4/0x170 [ 1196.802428][T20748] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1196.802472][T20748] do_writepages+0x32e/0x550 [ 1196.802510][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802544][T20748] __writeback_single_inode+0x145/0xff0 [ 1196.802575][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802603][T20748] ? do_raw_spin_unlock+0x122/0x240 [ 1196.802641][T20748] writeback_sb_inodes+0x6c7/0x1010 [ 1196.802678][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802708][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802746][T20748] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1196.802807][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802834][T20748] ? rcu_is_watching+0x15/0xb0 [ 1196.802858][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.802891][T20748] wb_writeback+0x43b/0xaf0 [ 1196.802928][T20748] ? queue_io+0x3d1/0x590 [ 1196.802961][T20748] ? __pfx_wb_writeback+0x10/0x10 [ 1196.802997][T20748] ? rcu_is_watching+0x15/0xb0 [ 1196.803025][T20748] wb_workfn+0x409/0xef0 [ 1196.803068][T20748] ? __pfx_wb_workfn+0x10/0x10 [ 1196.803098][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803126][T20748] ? rcu_is_watching+0x15/0xb0 [ 1196.803149][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803182][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803209][T20748] ? rcu_is_watching+0x15/0xb0 [ 1196.803233][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803260][T20748] ? lock_acquire+0x5f/0x360 [ 1196.803295][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803326][T20748] ? rcu_is_watching+0x15/0xb0 [ 1196.803349][T20748] ? process_scheduled_works+0x9ef/0x17b0 [ 1196.803373][T20748] ? process_scheduled_works+0x9ef/0x17b0 [ 1196.803398][T20748] process_scheduled_works+0xae1/0x17b0 [ 1196.803444][T20748] ? __pfx_process_scheduled_works+0x10/0x10 [ 1196.803474][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803509][T20748] worker_thread+0x8a0/0xda0 [ 1196.803554][T20748] kthread+0x711/0x8a0 [ 1196.803587][T20748] ? __pfx_worker_thread+0x10/0x10 [ 1196.803611][T20748] ? __pfx_kthread+0x10/0x10 [ 1196.803638][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803668][T20748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1196.803695][T20748] ? rcu_is_watching+0x15/0xb0 [ 1196.803719][T20748] ? __pfx_kthread+0x10/0x10 [ 1196.803749][T20748] ret_from_fork+0x3fc/0x770 [ 1196.803776][T20748] ? __pfx_ret_from_fork+0x10/0x10 [ 1196.803804][T20748] ? __switch_to_asm+0x39/0x70 [ 1196.803836][T20748] ? __switch_to_asm+0x33/0x70 [ 1196.803866][T20748] ? __pfx_kthread+0x10/0x10 [ 1196.803896][T20748] ret_from_fork_asm+0x1a/0x30 [ 1196.803940][T20748] [ 1196.804608][T20748] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1197.090554][T25396] loop2: detected capacity change from 0 to 32768 [ 1197.221575][T25396] XFS: ikeep mount option is deprecated. [ 1197.232784][T25396] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1197.330951][T25396] XFS (loop2): Ending clean mount [ 1197.337702][T25396] XFS (loop2): Quotacheck needed: Please wait. [ 1197.350246][T25396] XFS (loop2): Quotacheck: Done. [ 1198.492255][ T30] audit: type=1326 audit(1755574938.982:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1198.705570][ T30] audit: type=1326 audit(1755574939.012:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1198.929386][ T30] audit: type=1326 audit(1755574939.072:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1199.074884][ T30] audit: type=1326 audit(1755574939.072:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1199.097566][ T30] audit: type=1326 audit(1755574939.072:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1199.120018][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.126613][ T30] audit: type=1326 audit(1755574939.082:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1199.149319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.158654][ T30] audit: type=1326 audit(1755574939.102:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1199.181914][ T30] audit: type=1326 audit(1755574939.102:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1199.204567][ T30] audit: type=1326 audit(1755574939.552:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25413 comm="syz.0.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f2d8ebe9 code=0x7ffc0000 [ 1199.229274][T21925] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1199.436929][T25428] loop0: detected capacity change from 0 to 128 [ 1199.459097][T25428] EXT4-fs: Ignoring removed nobh option [ 1199.487001][T25432] netlink: 'syz.2.5006': attribute type 21 has an invalid length. [ 1199.863888][T25447] loop6: detected capacity change from 0 to 512 [ 1199.874351][T25447] EXT4-fs: Ignoring removed orlov option [ 1201.781665][T25453] binder: 25450:25453 ioctl c0306201 0 returned -14 [ 1201.915471][T25469] veth0_to_team: entered promiscuous mode [ 1201.923417][T25469] veth0_to_team: entered allmulticast mode [ 1201.924448][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1201.924466][ T30] audit: type=1326 audit(1755574942.412:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.095198][ T30] audit: type=1326 audit(1755574942.522:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.134931][ T30] audit: type=1326 audit(1755574942.532:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.161729][ T30] audit: type=1326 audit(1755574942.532:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.186266][ T30] audit: type=1326 audit(1755574942.532:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.233235][T25492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5035'. [ 1202.272377][ T30] audit: type=1326 audit(1755574942.532:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.340854][T25494] macvtap0: refused to change device tx_queue_len [ 1202.372595][ T30] audit: type=1326 audit(1755574942.532:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.418996][ T30] audit: type=1326 audit(1755574942.532:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1202.464486][T25500] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5039'. [ 1202.516669][T25503] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5039'. [ 1202.761214][T25506] binder: 25501:25506 ioctl c0306201 0 returned -14 [ 1203.169625][ T30] audit: type=1326 audit(1755574942.532:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1203.269790][ T30] audit: type=1326 audit(1755574942.532:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.5.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1203.318370][T25508] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5041'. [ 1203.463390][T25514] loop2: detected capacity change from 0 to 512 [ 1203.491935][T25514] EXT4-fs: Ignoring removed mblk_io_submit option [ 1203.602874][T25514] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1203.611274][T25514] EXT4-fs (loop2): mount failed [ 1203.657679][T25513] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 1204.631608][T25513] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1 [ 1206.246326][T25528] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5043'. [ 1206.311298][T25514] netlink: 'syz.2.5046': attribute type 1 has an invalid length. [ 1206.732588][T25540] loop2: detected capacity change from 0 to 32768 [ 1206.741019][T25540] XFS: ikeep mount option is deprecated. [ 1206.762517][T25540] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1206.907807][T25540] XFS (loop2): Ending clean mount [ 1206.916460][T25540] XFS (loop2): Quotacheck needed: Please wait. [ 1206.932941][T25540] XFS (loop2): Quotacheck: Done. [ 1207.110796][T20736] bridge_slave_1: left allmulticast mode [ 1207.135337][T20736] bridge_slave_1: left promiscuous mode [ 1207.160960][T20736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.221950][T20736] bridge_slave_0: left allmulticast mode [ 1207.236615][T25569] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1207.254754][T20736] bridge_slave_0: left promiscuous mode [ 1207.267069][T20736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.450958][T25575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1207.555648][T21925] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1207.888277][T20736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.921828][T20736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.943966][T20736] bond0 (unregistering): Released all slaves [ 1208.040866][T25583] loop2: detected capacity change from 0 to 1024 [ 1208.078835][T25583] ext4: Unknown parameter 'nouser_xattr' [ 1208.113759][T25592] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5065'. [ 1209.233021][T25613] loop6: detected capacity change from 0 to 512 [ 1209.504928][T25623] loop9: detected capacity change from 0 to 512 [ 1209.517243][T25623] EXT4-fs: Ignoring removed orlov option [ 1209.891839][T25627] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5077'. [ 1210.153549][T25623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1210.162198][T25623] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 1211.084367][T25639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5082'. [ 1211.108817][T25639] loop0: detected capacity change from 0 to 736 [ 1211.115715][T25639] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1211.206295][T20736] hsr_slave_0: left promiscuous mode [ 1211.242787][T20736] hsr_slave_1: left promiscuous mode [ 1211.288600][T20736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.319041][T20736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.352508][T25651] loop5: detected capacity change from 0 to 1024 [ 1211.424811][T25651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.605929][T20736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1211.627940][T20736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.690507][T20736] veth1_macvtap: left promiscuous mode [ 1211.696050][T20736] veth0_macvtap: left promiscuous mode [ 1211.725683][T23874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.736442][T20736] veth1_vlan: left promiscuous mode [ 1211.753701][T20736] veth0_vlan: left promiscuous mode [ 1212.391229][T25678] loop2: detected capacity change from 0 to 512 [ 1212.398317][T25678] EXT4-fs: Ignoring removed orlov option [ 1212.464524][T25678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1212.473229][T25678] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1213.294580][T20736] team0 (unregistering): Port device team_slave_1 removed [ 1213.355467][T20736] team0 (unregistering): Port device team_slave_0 removed [ 1213.944394][T25688] netlink: 'syz.2.5097': attribute type 4 has an invalid length. [ 1214.144819][T25701] loop2: detected capacity change from 0 to 1024 [ 1214.153467][T25701] EXT4-fs: Ignoring removed bh option [ 1214.163193][T25701] EXT4-fs: inline encryption not supported [ 1214.170192][T25701] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1214.196476][T25703] syzkaller0: entered promiscuous mode [ 1214.303650][T25703] syzkaller0: entered allmulticast mode [ 1214.329892][T25701] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.5103: lblock 2 mapped to illegal pblock 2 (length 1) [ 1214.371278][T25701] __quota_error: 4 callbacks suppressed [ 1214.371299][T25701] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1214.390326][T25701] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.5103: lblock 0 mapped to illegal pblock 48 (length 1) [ 1214.409634][T25701] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1214.419222][T25701] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5103: Failed to acquire dquot type 0 [ 1214.432435][T25701] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1214.443280][T25701] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5103: mark_inode_dirty error [ 1214.454996][T25701] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1214.465295][T25701] EXT4-fs (loop2): 1 orphan inode deleted [ 1214.471975][T25701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.485121][T20748] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 1214.499840][T20748] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1214.508886][T20748] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:65: Failed to release dquot type 0 [ 1214.520726][T25714] smc: net device bond0 applied user defined pnetid SYZ0 [ 1214.531756][T25701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.543511][T25717] netdevsim netdevsim9: Direct firmware load for ./file0/file1 failed with error -2 [ 1214.565903][T25701] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.5103: Invalid inode table block 1 in block_group 0 [ 1214.580869][T25717] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0/file1 [ 1214.595508][T25701] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1214.613792][T25701] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.5103: mark_inode_dirty error [ 1214.660197][T25723] veth0_to_team: entered promiscuous mode [ 1214.672271][T25723] veth0_to_team: entered allmulticast mode [ 1215.349238][T25735] netlink: 'syz.7.5115': attribute type 4 has an invalid length. [ 1215.440272][T25740] 9pnet_fd: Insufficient options for proto=fd [ 1218.212149][T25772] netlink: 29 bytes leftover after parsing attributes in process `syz.9.5129'. [ 1218.356896][T25777] netlink: 'syz.5.5131': attribute type 4 has an invalid length. [ 1218.655235][T25792] 9pnet_fd: Insufficient options for proto=fd [ 1219.543832][T25806] syz_tun: entered allmulticast mode [ 1219.711709][T20975] block nbd0: Possible stuck request ffff8880252ae000: control (read@0,1024B). Runtime 1050 seconds [ 1219.722900][T20975] block nbd0: Possible stuck request ffff8880252ae1c0: control (read@1024,1024B). Runtime 1050 seconds [ 1219.730434][T25810] loop0: detected capacity change from 0 to 128 [ 1219.736073][T20975] block nbd0: Possible stuck request ffff8880252ae380: control (read@2048,1024B). Runtime 1050 seconds [ 1219.751807][T20975] block nbd0: Possible stuck request ffff8880252ae540: control (read@3072,1024B). Runtime 1050 seconds [ 1220.060650][T25804] syz_tun: left allmulticast mode [ 1220.629026][T25828] netlink: 'syz.9.5148': attribute type 4 has an invalid length. [ 1223.734084][T25853] loop9: detected capacity change from 0 to 32768 [ 1223.741161][T25853] XFS: ikeep mount option is deprecated. [ 1223.860549][T25853] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1223.901937][T25859] loop7: detected capacity change from 0 to 512 [ 1223.949690][T25853] XFS (loop9): Ending clean mount [ 1223.955805][T25853] XFS (loop9): Quotacheck needed: Please wait. [ 1223.992567][T25859] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1224.021112][T25859] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1224.028926][T25853] XFS (loop9): Quotacheck: Done. [ 1224.041807][T25859] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1224.222619][T25859] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1224.281162][T25872] syz_tun: entered allmulticast mode [ 1224.286715][T25859] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1224.297017][T25870] syz_tun: left allmulticast mode [ 1224.301171][T25859] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5156: bg 0: block 40: padding at end of block bitmap is not set [ 1224.463442][T25859] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1224.499367][T25859] EXT4-fs (loop7): 1 truncate cleaned up [ 1224.550198][T24311] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1224.919693][T25859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1224.960272][T21774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.218411][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5166'. [ 1225.570088][T25889] infiniband syz!: set active [ 1225.587704][T25889] infiniband syz!: added team_slave_0 [ 1225.674697][T25889] RDS/IB: syz!: added [ 1225.701308][T25889] smc: adding ib device syz! with port count 1 [ 1225.731387][T25889] smc: ib device syz! port 1 has pnetid [ 1226.070141][T25916] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5176'. [ 1227.405018][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5181'. [ 1227.536195][T25937] loop6: detected capacity change from 0 to 512 [ 1227.882257][T25948] loop0: detected capacity change from 0 to 164 [ 1227.905058][T25948] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1228.384568][T25959] syz_tun: entered allmulticast mode [ 1228.397326][T25958] syz_tun: left allmulticast mode [ 1228.828697][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5196'. [ 1229.181309][T25979] veth0_to_team: entered promiscuous mode [ 1229.187079][T25979] veth0_to_team: entered allmulticast mode [ 1229.294260][T25788] Set syz1 is full, maxelem 65536 reached [ 1229.435180][T25992] loop2: detected capacity change from 0 to 164 [ 1229.492559][T25992] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1229.716094][T26003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5212'. [ 1233.507139][T26039] 9pnet_fd: Insufficient options for proto=fd [ 1233.733846][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5225'. [ 1234.464154][ T30] audit: type=1326 audit(1755574974.942:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1234.548833][ T30] audit: type=1326 audit(1755574974.952:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1234.618165][ T30] audit: type=1326 audit(1755574974.992:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1234.700657][ T30] audit: type=1326 audit(1755574974.992:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1234.719233][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5242'. [ 1234.732736][T24180] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1234.751748][ T30] audit: type=1326 audit(1755574974.992:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1234.777787][ T30] audit: type=1326 audit(1755574974.992:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1234.888311][ T30] audit: type=1326 audit(1755574974.992:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1234.914177][T26106] loop7: detected capacity change from 0 to 512 [ 1234.936607][T26106] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1234.946951][T24180] usb 3-1: Using ep0 maxpacket: 16 [ 1234.966917][ T30] audit: type=1326 audit(1755574974.992:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1235.004000][T24180] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1235.013749][T24180] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.025472][T24180] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1235.045791][ T30] audit: type=1326 audit(1755574974.992:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1235.105289][T24180] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1235.141777][T26106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.160784][T24180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.188001][ T30] audit: type=1326 audit(1755574974.992:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dab58ebe9 code=0x7ffc0000 [ 1235.194734][T24180] usb 3-1: Product: syz [ 1235.233384][T26115] loop6: detected capacity change from 0 to 164 [ 1235.241926][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1235.290561][T26115] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1235.308060][T24180] usb 3-1: Manufacturer: syz [ 1235.328882][T24180] usb 3-1: SerialNumber: syz [ 1235.339530][T26120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5249'. [ 1235.342216][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 12: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1235.395923][T26120] loop0: detected capacity change from 0 to 736 [ 1235.430300][T26120] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1235.469776][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 13: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1235.523080][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 14: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1235.567037][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 15: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1235.634475][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1235.688419][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 17: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1235.734505][T26106] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 18: comm syz.7.5246: lblock 23 mapped to illegal pblock 18 (length 1) [ 1235.753692][T26106] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 19: comm syz.7.5246: path /232/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1235.824840][T24180] usb 3-1: 0:2 : does not exist [ 1235.883846][T21774] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1235.905689][T21774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.074810][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5257'. [ 1236.836947][T24180] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1237.086015][T24180] usb 3-1: USB disconnect, device number 5 [ 1239.394192][T26169] loop6: detected capacity change from 0 to 512 [ 1240.273003][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5274'. [ 1240.468920][T25955] Set syz1 is full, maxelem 65536 reached [ 1244.041740][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5292'. [ 1244.067476][T26252] loop6: detected capacity change from 0 to 512 [ 1244.190193][T26254] syz_tun: entered allmulticast mode [ 1244.207149][T26253] syz_tun: left allmulticast mode [ 1244.859457][T26265] netlink: 300 bytes leftover after parsing attributes in process `syz.9.5299'. [ 1245.044936][T26268] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5299'. [ 1247.547628][T26307] loop2: detected capacity change from 0 to 512 [ 1247.637158][T26307] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1247.680026][T26307] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1247.701130][T26319] syz_tun: entered allmulticast mode [ 1247.716863][T26318] syz_tun: left allmulticast mode [ 1247.721861][T26307] __quota_error: 16 callbacks suppressed [ 1247.721881][T26307] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1247.746107][T26307] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1247.788080][T26307] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1247.805622][T26309] loop5: detected capacity change from 0 to 512 [ 1247.838664][T26309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1247.843967][T26307] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5307: bg 0: block 40: padding at end of block bitmap is not set [ 1247.934487][T26307] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1247.963120][T26307] EXT4-fs (loop2): 1 truncate cleaned up [ 1247.984660][T26307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1248.059525][T26309] EXT4-fs (loop5): 1 truncate cleaned up [ 1248.548958][T26309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.602939][T26309] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.675133][T21925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.812906][T26333] netlink: 300 bytes leftover after parsing attributes in process `syz.6.5315'. [ 1248.922888][T26340] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5315'. [ 1250.311835][T26309] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5308'. [ 1250.349369][T20975] block nbd0: Possible stuck request ffff8880252ae000: control (read@0,1024B). Runtime 1080 seconds [ 1250.360586][T20975] block nbd0: Possible stuck request ffff8880252ae1c0: control (read@1024,1024B). Runtime 1080 seconds [ 1250.371906][T20975] block nbd0: Possible stuck request ffff8880252ae380: control (read@2048,1024B). Runtime 1080 seconds [ 1250.383491][T20975] block nbd0: Possible stuck request ffff8880252ae540: control (read@3072,1024B). Runtime 1080 seconds [ 1251.390061][T26378] loop0: detected capacity change from 0 to 512 [ 1251.402701][T26378] EXT4-fs: Ignoring removed orlov option [ 1252.267123][T26387] loop9: detected capacity change from 0 to 128 [ 1252.440411][T26387] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5334'. [ 1252.488001][T26387] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5334'. [ 1252.948106][T26400] syz_tun: entered allmulticast mode [ 1252.998348][T26399] syz_tun: left allmulticast mode [ 1253.050329][T26402] syzkaller1: entered promiscuous mode [ 1253.077949][T26402] syzkaller1: entered allmulticast mode [ 1253.809011][T26419] loop6: detected capacity change from 0 to 512 [ 1253.877075][T26422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5347'. [ 1253.931764][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5348'. [ 1254.046559][T26422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1254.107048][T26422] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1254.151196][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5347'. [ 1254.331880][T26435] loop6: detected capacity change from 0 to 512 [ 1254.345121][T26435] EXT4-fs: Ignoring removed orlov option [ 1254.988102][T19383] Bluetooth: hci6: command 0x0406 tx timeout [ 1255.215378][T26422] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1255.543544][T26422] bond1 (unregistering): Released all slaves [ 1255.758166][T26445] loop9: detected capacity change from 0 to 40427 [ 1255.792056][T26445] F2FS-fs (loop9): invalid crc value [ 1255.826144][T26445] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1255.835534][T26445] F2FS-fs (loop9): Start checkpoint disabled! [ 1255.847970][T26445] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1255.866514][T26446] syz_tun: entered allmulticast mode [ 1255.913620][ T30] audit: type=1800 audit(1755574996.402:1422): pid=26447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5356" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 1255.971276][T26447] syz.9.5356: attempt to access beyond end of device [ 1255.971276][T26447] loop9: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1255.997023][T26442] syz_tun: left allmulticast mode [ 1256.122772][T20723] kworker/u8:44: attempt to access beyond end of device [ 1256.122772][T20723] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1256.170589][T20723] CPU: 0 UID: 0 PID: 20723 Comm: kworker/u8:44 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 1256.170625][T20723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1256.170641][T20723] Workqueue: writeback wb_workfn (flush-7:9) [ 1256.170675][T20723] Call Trace: [ 1256.170685][T20723] [ 1256.170695][T20723] dump_stack_lvl+0x189/0x250 [ 1256.170725][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.170755][T20723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.170783][T20723] ? __pfx_queue_work_on+0x10/0x10 [ 1256.170807][T20723] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1256.170839][T20723] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1256.170877][T20723] f2fs_handle_critical_error+0x37c/0x540 [ 1256.170918][T20723] f2fs_write_end_io+0x886/0xb60 [ 1256.170956][T20723] __submit_merged_bio+0x27a/0x6a0 [ 1256.170996][T20723] __submit_merged_write_cond+0x255/0x530 [ 1256.171035][T20723] f2fs_write_data_pages+0x261d/0x3000 [ 1256.171098][T20723] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1256.171148][T20723] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1256.171211][T20723] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1256.171257][T20723] ? trace_f2fs_writepages+0x7f/0x200 [ 1256.171292][T20723] ? f2fs_write_node_pages+0x478/0x6e0 [ 1256.171323][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.171356][T20723] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1256.171393][T20723] ? f2fs_update_inode+0x13d9/0x2620 [ 1256.171429][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.171456][T20723] ? rcu_qs+0xc4/0x170 [ 1256.171479][T20723] ? __pfx_rcu_qs+0x10/0x10 [ 1256.171500][T20723] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1256.171540][T20723] do_writepages+0x32e/0x550 [ 1256.171574][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.171602][T20723] ? trace_rcu_utilization+0x47/0x1d0 [ 1256.171630][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.171665][T20723] __writeback_single_inode+0x145/0xff0 [ 1256.171698][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.171726][T20723] ? do_raw_spin_unlock+0x122/0x240 [ 1256.171760][T20723] writeback_sb_inodes+0x6c7/0x1010 [ 1256.171801][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.171832][T20723] ? fprop_reflect_period_percpu+0x6b/0x330 [ 1256.171872][T20723] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1256.171935][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.171963][T20723] ? rcu_is_watching+0x15/0xb0 [ 1256.171987][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172021][T20723] wb_writeback+0x43b/0xaf0 [ 1256.172059][T20723] ? queue_io+0x3d1/0x590 [ 1256.172092][T20723] ? __pfx_wb_writeback+0x10/0x10 [ 1256.172129][T20723] ? rcu_is_watching+0x15/0xb0 [ 1256.172157][T20723] wb_workfn+0x409/0xef0 [ 1256.172201][T20723] ? __pfx_wb_workfn+0x10/0x10 [ 1256.172226][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172254][T20723] ? rcu_is_watching+0x15/0xb0 [ 1256.172280][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172308][T20723] ? rcu_is_watching+0x15/0xb0 [ 1256.172331][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172364][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172392][T20723] ? rcu_is_watching+0x15/0xb0 [ 1256.172415][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172443][T20723] ? lock_acquire+0x5f/0x360 [ 1256.172479][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172510][T20723] ? rcu_is_watching+0x15/0xb0 [ 1256.172533][T20723] ? process_scheduled_works+0x9ef/0x17b0 [ 1256.172556][T20723] ? process_scheduled_works+0x9ef/0x17b0 [ 1256.172582][T20723] process_scheduled_works+0xae1/0x17b0 [ 1256.172630][T20723] ? __pfx_process_scheduled_works+0x10/0x10 [ 1256.172660][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172696][T20723] worker_thread+0x8a0/0xda0 [ 1256.172742][T20723] kthread+0x711/0x8a0 [ 1256.172774][T20723] ? __pfx_worker_thread+0x10/0x10 [ 1256.172799][T20723] ? __pfx_kthread+0x10/0x10 [ 1256.172828][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172858][T20723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.172886][T20723] ? rcu_is_watching+0x15/0xb0 [ 1256.172911][T20723] ? __pfx_kthread+0x10/0x10 [ 1256.172942][T20723] ret_from_fork+0x3fc/0x770 [ 1256.172970][T20723] ? __pfx_ret_from_fork+0x10/0x10 [ 1256.173000][T20723] ? __switch_to_asm+0x39/0x70 [ 1256.173033][T20723] ? __switch_to_asm+0x33/0x70 [ 1256.173064][T20723] ? __pfx_kthread+0x10/0x10 [ 1256.173096][T20723] ret_from_fork_asm+0x1a/0x30 [ 1256.173141][T20723] [ 1256.173152][T20723] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1256.340125][T26458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5361'. [ 1256.647057][T26464] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1257.500398][ T30] audit: type=1326 audit(1755574997.992:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26479 comm="syz.6.5368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac3578ebe9 code=0x0 [ 1257.519809][T26241] Set syz1 is full, maxelem 65536 reached [ 1257.672632][T26491] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5360'. [ 1257.879898][T26501] loop2: detected capacity change from 0 to 1024 [ 1258.023431][T26501] EXT4-fs: Ignoring removed bh option [ 1258.140566][T26505] syz_tun: entered allmulticast mode [ 1258.360348][T26496] syz_tun: left allmulticast mode [ 1258.408578][T26501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.455829][T26501] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.5373: Allocating blocks 385-513 which overlap fs metadata [ 1258.488247][T26501] EXT4-fs (loop2): pa ffff888030d7a488: logic 16, phys. 129, len 24 [ 1258.496368][T26501] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1258.930680][T26526] loop6: detected capacity change from 0 to 1024 [ 1258.938421][ T917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1258.961929][ T30] audit: type=1326 audit(1755574999.452:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1258.990896][T26526] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1259.019345][T26526] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1259.063280][T26526] JBD2: no valid journal superblock found [ 1259.100648][T26526] EXT4-fs (loop6): Could not load journal inode [ 1259.127720][ T30] audit: type=1326 audit(1755574999.452:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1259.188460][ T917] usb 3-1: Using ep0 maxpacket: 8 [ 1259.205522][ T917] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1259.241465][ T917] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.273617][ T30] audit: type=1326 audit(1755574999.472:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1259.315024][ T917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1259.348065][ T917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1259.378104][ T30] audit: type=1326 audit(1755574999.472:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1259.409363][ T917] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1259.439345][ T917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1259.457518][ T30] audit: type=1326 audit(1755574999.472:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b78ebe9 code=0x7ffc0000 [ 1259.487375][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.510040][ T917] usbtmc 3-1:16.0: bulk endpoints not found [ 1261.037444][T26565] netlink: 300 bytes leftover after parsing attributes in process `syz.7.5396'. [ 1261.178587][T26565] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 1261.181723][T11095] usb 3-1: USB disconnect, device number 6 [ 1261.202510][T21925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.256781][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5401'. [ 1261.312322][T26580] netlink: 'syz.9.5400': attribute type 4 has an invalid length. [ 1261.689241][T26599] lo speed is unknown, defaulting to 1000 [ 1262.490265][T26600] syz_tun: entered allmulticast mode [ 1262.496864][T26603] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5409'. [ 1262.506137][T26596] syz_tun: left allmulticast mode [ 1263.313243][T26617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5415'. [ 1263.374565][T26617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5415'. [ 1263.424323][ T30] audit: type=1326 audit(1755575003.912:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.467047][ T30] audit: type=1326 audit(1755575003.912:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.543151][ T30] audit: type=1326 audit(1755575003.952:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.568474][T26626] netlink: 'syz.5.5418': attribute type 4 has an invalid length. [ 1263.583733][ T30] audit: type=1326 audit(1755575003.952:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.750387][T26629] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5419'. [ 1263.752595][ T30] audit: type=1326 audit(1755575003.952:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.783342][ T30] audit: type=1326 audit(1755575003.952:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.806065][ T30] audit: type=1326 audit(1755575003.952:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.861232][T26629] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 1263.891520][ T30] audit: type=1326 audit(1755575003.952:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1263.961967][ T30] audit: type=1326 audit(1755575004.002:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1264.070552][ T30] audit: type=1326 audit(1755575004.002:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3578ebe9 code=0x7ffc0000 [ 1264.168261][T26652] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5429'. [ 1264.560046][T26680] netlink: 300 bytes leftover after parsing attributes in process `syz.7.5438'. [ 1264.768840][T26689] loop9: detected capacity change from 0 to 1024 [ 1264.785335][T26689] EXT4-fs: Ignoring removed bh option [ 1264.826027][T26689] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1264.873480][T26689] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.5444: Allocating blocks 385-513 which overlap fs metadata [ 1264.938806][T26689] EXT4-fs (loop9): pa ffff888041dde3a0: logic 16, phys. 129, len 24 [ 1264.946928][T26689] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1265.338585][T25285] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1265.419553][T26703] loop6: detected capacity change from 0 to 512 [ 1265.528493][T26710] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.540585][T25285] usb 10-1: Using ep0 maxpacket: 8 [ 1265.560559][T25285] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1265.581780][T25285] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.617596][T25285] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1265.647216][T26710] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.671017][T25285] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1265.683894][T25285] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1265.697097][T25285] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1265.711748][T25285] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.726342][T25285] usbtmc 10-1:16.0: bulk endpoints not found [ 1265.771302][T26710] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.857236][T26710] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.918985][T26740] lo speed is unknown, defaulting to 1000 [ 1265.961688][T25286] usb 10-1: USB disconnect, device number 3 [ 1265.968891][T20732] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.008013][T20732] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.032879][T20732] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.063223][T20732] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.095970][T26741] lo speed is unknown, defaulting to 1000 [ 1266.158149][T26745] __nla_validate_parse: 7 callbacks suppressed [ 1266.158171][T26745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5464'. [ 1266.460536][T26760] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5471'. [ 1266.571541][T24311] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.681423][T26763] netlink: 'syz.6.5472': attribute type 4 has an invalid length. [ 1266.696606][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5473'. [ 1266.767272][T26778] netlink: 'syz.0.5480': attribute type 10 has an invalid length. [ 1266.816427][T26782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5478'. [ 1266.952506][T26778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.980823][T26778] team0: Port device bond0 added [ 1266.996208][T26793] loop6: detected capacity change from 0 to 1024 [ 1267.029043][T26793] EXT4-fs: Ignoring removed bh option [ 1267.735827][T26810] loop7: detected capacity change from 0 to 1024 [ 1267.787243][T26810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.818079][T24180] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1268.007782][T24180] usb 7-1: Using ep0 maxpacket: 8 [ 1268.030852][T24180] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1268.047654][T21774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.047761][T24180] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.095191][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'. [ 1268.135660][T24180] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1268.165969][T24180] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1268.221508][T24180] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1268.253288][T26833] syz_tun: entered allmulticast mode [ 1268.286684][T24180] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1268.303749][T24180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.317009][T24180] usbtmc 7-1:16.0: bulk endpoints not found [ 1269.484227][T25286] usb 7-1: USB disconnect, device number 20 [ 1269.641923][T26866] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1269.676095][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1269.676116][ T30] audit: type=1326 audit(1755575010.162:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26869 comm="syz.0.5516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95f2d8ebe9 code=0x0 [ 1269.713096][T26874] loop5: detected capacity change from 0 to 164 [ 1269.723560][T26874] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1269.787864][T26876] loop9: detected capacity change from 0 to 512 [ 1269.880237][T26884] loop7: detected capacity change from 0 to 512 [ 1269.893444][T26884] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1269.986509][T26884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.121457][T26892] loop9: detected capacity change from 0 to 7 [ 1270.131578][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.140276][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.148794][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.157311][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.165934][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.174633][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.183732][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.192022][T26892] ldm_validate_partition_table(): Disk read failed. [ 1270.198986][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.207558][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.217071][T26892] Buffer I/O error on dev loop9, logical block 0, async page read [ 1270.226922][T26892] Dev loop9: unable to read RDB block 0 [ 1270.234112][T26892] loop9: unable to read partition table [ 1270.241016][T26892] loop9: partition table beyond EOD, truncated [ 1270.247269][T26892] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1270.247269][T26892] ) failed (rc=-5) [ 1270.365242][T19383] Bluetooth: hci7: command 0x0406 tx timeout [ 1270.408412][T21774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.586744][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5529'. [ 1270.596066][T26903] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5529'. [ 1270.752032][T26910] can: request_module (can-proto-0) failed. [ 1270.975789][T26926] loop7: detected capacity change from 0 to 1024 [ 1271.006606][T26926] EXT4-fs: Ignoring removed bh option [ 1271.015051][T26931] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5538'. [ 1271.051137][T26926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.149651][T26926] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.5537: Allocating blocks 385-513 which overlap fs metadata [ 1271.204815][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1271.215192][T26945] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5543'. [ 1271.240937][T26926] EXT4-fs (loop7): pa ffff888030d7a9f8: logic 16, phys. 129, len 24 [ 1271.249321][T26926] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1271.265200][T26944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1271.729433][T25285] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1271.898180][T25285] usb 8-1: Using ep0 maxpacket: 8 [ 1271.991409][T25285] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1272.013586][T25285] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.032402][T25285] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1272.494735][T25285] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1272.504554][T25285] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1272.517933][T25285] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1272.526982][T25285] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.540055][T25285] usbtmc 8-1:16.0: bulk endpoints not found [ 1272.625281][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5559'. [ 1272.722917][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5562'. [ 1272.794319][T26994] loop5: detected capacity change from 0 to 736 [ 1272.815937][T26994] iso9660: Unknown parameter 'showau¼ú:Akoc' [ 1273.065478][ T6019] usb 8-1: USB disconnect, device number 7 [ 1273.442962][T27008] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5568'. [ 1273.466963][T27010] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.553014][T27010] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.615891][T21774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.652498][T27010] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.716988][T27027] loop7: detected capacity change from 0 to 1024 [ 1273.739585][T27010] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.743454][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1273.784153][T27027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.907328][T20727] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.919909][T20727] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.988552][T20727] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.997237][T20727] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.009232][T21774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.204635][T27044] netlink: 'syz.6.5582': attribute type 4 has an invalid length. [ 1274.334467][T27048] netlink: 'syz.6.5582': attribute type 4 has an invalid length. [ 1274.857481][T27059] loop9: detected capacity change from 0 to 7 [ 1274.868933][T27059] ldm_validate_partition_table(): Disk read failed. [ 1274.881003][T27059] Dev loop9: unable to read RDB block 0 [ 1274.897411][T27059] loop9: unable to read partition table [ 1274.919734][T27059] loop9: partition table beyond EOD, truncated [ 1274.928082][T27063] loop0: detected capacity change from 0 to 512 [ 1274.948352][T27059] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1274.948352][T27059] ) failed (rc=-5) [ 1275.149234][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5592'. [ 1275.201030][T27078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5592'. [ 1275.310237][T27079] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.683913][T27096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1275.712903][T27079] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.733112][T27099] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5602'. [ 1275.859489][T27079] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.948423][ T31] INFO: task syz.3.4355:23338 blocked for more than 144 seconds. [ 1275.966489][ T31] Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 [ 1275.985401][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1276.006199][ T31] task:syz.3.4355 state:D stack:23824 pid:23338 tgid:23337 ppid:12537 task_flags:0x400140 flags:0x00004004 [ 1276.033652][ T31] Call Trace: [ 1276.042599][ T31] [ 1276.051793][ T31] __schedule+0x1798/0x4cc0 [ 1276.070712][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.085305][ T31] ? __pfx___schedule+0x10/0x10 [ 1276.090547][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.096202][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.101903][ T31] ? rcu_is_watching+0x15/0xb0 [ 1276.106677][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.112465][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.118131][ T31] ? lock_release+0x4b/0x3e0 [ 1276.122778][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1276.128773][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1276.135155][ T31] schedule+0x165/0x360 [ 1276.139365][ T31] schedule_preempt_disabled+0x13/0x30 [ 1276.144838][ T31] __mutex_lock+0x7e6/0x1350 [ 1276.151658][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.157335][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1276.162750][ T31] ? sync_bdevs+0x1ac/0x340 [ 1276.167285][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1276.173681][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.181296][ T31] ? iput+0x398/0x9d0 [ 1276.185407][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1276.191653][ T31] sync_bdevs+0x1ac/0x340 [ 1276.196148][ T31] ksys_sync+0xb9/0x150 [ 1276.202660][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1276.207571][ T31] ? rcu_is_watching+0x15/0xb0 [ 1276.212614][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.218537][ T31] ? rcu_is_watching+0x15/0xb0 [ 1276.223401][ T31] __ia32_sys_sync+0xe/0x20 [ 1276.228069][ T31] do_syscall_64+0xfa/0x3b0 [ 1276.232706][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.238528][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.244724][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.250615][ T31] ? exc_page_fault+0x9f/0xf0 [ 1276.256128][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.263125][ T31] RIP: 0033:0x7eff6fd8ebe9 [ 1276.268479][ T31] RSP: 002b:00007eff70bb0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1276.276993][ T31] RAX: ffffffffffffffda RBX: 00007eff6ffb5fa0 RCX: 00007eff6fd8ebe9 [ 1276.289874][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1276.298095][ T31] RBP: 00007eff6ffb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.306196][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.314597][ T31] R13: 00007eff6ffb6038 R14: 00007eff6ffb5fa0 R15: 00007ffe43753b68 [ 1276.323241][ T31] [ 1276.326415][ T31] INFO: lockdep is turned off. [ 1276.333097][ T31] NMI backtrace for cpu 0 [ 1276.333116][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 1276.333146][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1276.333161][ T31] Call Trace: [ 1276.333171][ T31] [ 1276.333182][ T31] dump_stack_lvl+0x189/0x250 [ 1276.333218][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1276.333248][ T31] ? __pfx__printk+0x10/0x10 [ 1276.333291][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1276.333322][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1276.333352][ T31] ? __pfx__printk+0x10/0x10 [ 1276.333385][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.333415][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.333443][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1276.333487][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1276.333518][ T31] watchdog+0xf93/0xfe0 [ 1276.333556][ T31] ? watchdog+0x1de/0xfe0 [ 1276.333593][ T31] kthread+0x711/0x8a0 [ 1276.333624][ T31] ? __pfx_watchdog+0x10/0x10 [ 1276.333657][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.333685][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.333715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.333746][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.333773][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.333805][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.333836][ T31] ret_from_fork+0x3fc/0x770 [ 1276.333861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1276.333890][ T31] ? __switch_to_asm+0x39/0x70 [ 1276.333921][ T31] ? __switch_to_asm+0x33/0x70 [ 1276.333952][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.333982][ T31] ret_from_fork_asm+0x1a/0x30 [ 1276.334025][ T31] [ 1276.334034][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1276.506127][ C1] NMI backtrace for cpu 1 [ 1276.506148][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 1276.506174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1276.506188][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1276.506228][ C1] Code: 3e cd 96 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b7 0e 00 f3 0f 1e fa fb f4 13 cd 96 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1276.506247][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1276.506267][ C1] RAX: fa6d22ea14a01b00 RBX: ffffffff81968308 RCX: fa6d22ea14a01b00 [ 1276.506284][ C1] RDX: 0000000000000001 RSI: ffffffff8be336e0 RDI: ffffffff81968308 [ 1276.506300][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 1276.506317][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38330 [ 1276.506334][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d9b40 [ 1276.506351][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1276.506369][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1276.506384][ C1] CR2: 0000555584ec05c8 CR3: 0000000055753000 CR4: 0000000000350ef0 [ 1276.506401][ C1] Call Trace: [ 1276.506411][ C1] [ 1276.506419][ C1] default_idle+0x13/0x20 [ 1276.506438][ C1] default_idle_call+0x74/0xb0 [ 1276.506460][ C1] do_idle+0x1e8/0x510 [ 1276.506485][ C1] ? __pfx_do_idle+0x10/0x10 [ 1276.506505][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.506541][ C1] cpu_startup_entry+0x44/0x60 [ 1276.506562][ C1] start_secondary+0x101/0x110 [ 1276.506602][ C1] common_startup_64+0x13e/0x147 [ 1276.506644][ C1] [ 1276.507331][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1276.681210][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 1276.693003][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1276.703048][ T31] Call Trace: [ 1276.706313][ T31] [ 1276.709230][ T31] dump_stack_lvl+0x99/0x250 [ 1276.713817][ T31] ? __asan_memcpy+0x40/0x70 [ 1276.718403][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1276.723594][ T31] ? __pfx__printk+0x10/0x10 [ 1276.728189][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.733818][ T31] vpanic+0x281/0x750 [ 1276.737825][ T31] ? __pfx_vpanic+0x10/0x10 [ 1276.742320][ T31] ? preempt_schedule+0xae/0xc0 [ 1276.747169][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.752795][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1276.758263][ T31] panic+0xb9/0xc0 [ 1276.761979][ T31] ? __pfx_panic+0x10/0x10 [ 1276.766389][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.772019][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1276.777403][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.783034][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1276.789195][ T31] watchdog+0xfd2/0xfe0 [ 1276.793362][ T31] ? watchdog+0x1de/0xfe0 [ 1276.797693][ T31] kthread+0x711/0x8a0 [ 1276.801760][ T31] ? __pfx_watchdog+0x10/0x10 [ 1276.806436][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.811027][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.816661][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.821857][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.827483][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.832680][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.837269][ T31] ret_from_fork+0x3fc/0x770 [ 1276.841853][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1276.846960][ T31] ? __switch_to_asm+0x39/0x70 [ 1276.851719][ T31] ? __switch_to_asm+0x33/0x70 [ 1276.856482][ T31] ? __pfx_kthread+0x10/0x10 [ 1276.861071][ T31] ret_from_fork_asm+0x1a/0x30 [ 1276.865842][ T31] [ 1276.869063][ T31] Kernel Offset: disabled [ 1276.873377][ T31] Rebooting in 86400 seconds..