last executing test programs: 14m3.330970852s ago: executing program 1 (id=618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x249, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808070, 0x0, 0x1, 0x0, &(0x7f00000003c0)) r3 = openat(0xffffffffffffff9c, 0x0, 0x101341, 0xaf) mknod$loop(0x0, 0x0, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x84842, 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) renameat2(r2, 0x0, r3, 0x0, 0x2) pread64(r5, 0x0, 0x0, 0x400000ffffffff8) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000}}}, 0x108) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) 14m2.648087542s ago: executing program 1 (id=624): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 13m57.684842145s ago: executing program 1 (id=628): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f0000000240)=ANY=[], 0xff, 0x252, &(0x7f0000000540)="$eJzsmb9rFEEUx7+zu7d3hAS0sLE5i4ARkr3dPZU0gloqgpCIWh5mDTGTnNxdkTvwR7Cx8Q/wb7DWIoVY2NmIhZVFDAQstLRRcGR+Zed+rTm4zvcp5t68eTPvvZndN3ALgiD+Ww6+/tx/cXV5dRHALOZRNvpvfm7jOfZfXvolI77f9rA3uB4DIETeD/7hPwTw7ooPPNXLCvFLuOPzZs1V4QMVrbsFD+fM+G0wRDZWIdFiBoa7Rv3AkW3w4Bm71+Rr9zd4FssmkU0qmzog+uL/scuwBu1eemBOfO1ub7PBgWtMCTxraQ0vCevHasYKwdE6PAtG2BTtX4CDfXlCl5wtkOd15/mzXdmPjD6Gp/ZSksBDYg6mDoYVo19GGVEUVU03S5z8Twf5+r4+Nid/J9xKUbaV4o2YtnByqdDGJjHGxj74ztBbIzw+hDPEUBzGH3GsmIUQTyZJMBx3BNMQ7Dt/zFnSdHIXXnV4Vphr5ga9N0dsQm9z8RUwUYKs3cUJnZ7WMHOUl03SH4ZnHU77Ed1zNY8GbUJM0Zetm0NDn2Y4v2E1qLS7H6+boVN965zpfwuOhLDoIcnrJwuAs8aUQYjAuRVqna2HtXa3t7Sx1VjP1rPtNK1fjM/H8YW0pmqzbgvqX0XVpxmn/pX0lTFgJ52H2Gl0Oq1kB+i0ktD209eqdSruypvmdzXPU/XPw8JvIcz1UlJpl0fHo+6/sp7HVG/BHxs8QRAEQRAEQRAEQRAEQRBEAdXP+tf8dT03i6pnPoTpD1ViNEF6U034GwAA//89J0vl") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) fadvise64(r0, 0x5, 0x0, 0x3) 13m56.796322446s ago: executing program 1 (id=631): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 13m56.723121562s ago: executing program 1 (id=632): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000340)={{&(0x7f00001fe000/0x4000)=nil, 0x4000}, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x3, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x20000010) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x10000, 0x100000000000101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m54.845217149s ago: executing program 1 (id=636): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0\x00', 0x8008, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT=0x0], 0x3, 0x2a3, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000840)=""/184, 0x26, 0xb8, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r5, 0xffffffffffffff90, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95}}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) truncate(&(0x7f0000000040)='./file0\x00', 0x7) 12m24.068198118s ago: executing program 0 (id=780): syz_usb_connect$uac2(0x3, 0x7b, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x420008c9) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd0000000009"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000480)={0x24, &(0x7f00000002c0)={0x20, 0xc, 0x1, "16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x34000, 0x0) 12m20.914057149s ago: executing program 4 (id=788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000180)={'virt_wifi0\x00', @broadcast}) 12m20.822264693s ago: executing program 0 (id=789): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000005c0)=""/275, 0x113}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/273, 0x111}, {&(0x7f0000000700)=""/4158, 0x103e}], 0x4}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="14000000350094f90100fc6022f388a500000000", 0x14}], 0x1}, 0xa0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001a00)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001dc31931a0e69ee517d34460bc06000600a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 12m19.160234642s ago: executing program 4 (id=796): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0xe0}, 0x20000800) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000000200), 0x10) 12m19.072310435s ago: executing program 0 (id=797): close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) 12m18.870702516s ago: executing program 0 (id=799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m18.572332925s ago: executing program 4 (id=801): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 12m18.572025057s ago: executing program 0 (id=802): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 12m18.279809159s ago: executing program 0 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9deb010018000000000000003400000034000000020000000000000000000003000000000300000003000000000000000000000000000801"], 0x0, 0x4e}, 0x28) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2220302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 12m17.853096415s ago: executing program 4 (id=807): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4003, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000040), 0x4) 12m17.660789749s ago: executing program 4 (id=809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1f, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12m17.655322482s ago: executing program 3 (id=810): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) 12m17.53728644s ago: executing program 4 (id=811): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 12m17.424750159s ago: executing program 3 (id=812): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) ioctl$TUNDETACHFILTER(r1, 0x541b, 0x20000000) 12m17.411895587s ago: executing program 3 (id=813): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209", 0x25}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 12m17.332629448s ago: executing program 3 (id=814): r0 = socket$kcm(0x10, 0x400000002, 0x0) close(0x3) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_subtree(r0, 0x0, 0xfe33) 12m17.168243981s ago: executing program 3 (id=815): r0 = getpid() socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0x20) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x27, @short={0x2, 0x1, 0xaaa1}}, 0x14) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0xb72}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) 12m14.992318067s ago: executing program 3 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="00592361d633fbc4d198"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) 12m2.896646768s ago: executing program 32 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9deb010018000000000000003400000034000000020000000000000000000003000000000300000003000000000000000000000000000801"], 0x0, 0x4e}, 0x28) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2220302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 12m2.441408479s ago: executing program 33 (id=808): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000061be18710000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 12m2.329806605s ago: executing program 34 (id=811): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 11m59.854877625s ago: executing program 35 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="00592361d633fbc4d198"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) 7m53.664254251s ago: executing program 8 (id=967): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 7m53.333027807s ago: executing program 8 (id=969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) userfaultfd(0x180000) r1 = getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000400), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r4, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a09040000000000000000020000237000048010000180080001006c6f6700040002805c0001800a00010071756f74610000004c0002800c000440fffffffffffffffb0c000440ffffffff7fffffff0c00044000000000ffffffff0c00014000000000000000020c00044000000000000000050c00014000000000000000070900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m50.568247662s ago: executing program 8 (id=970): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002640)={0x9, {"a2e3ad214fc752f91b2547f70e06d038e7ff7fc6e5539b325d078b089b3b083872090890e0878f0e1ac6e7049b3367959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b313b0d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45259f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96e8664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94195413cd091c0922f93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000fa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0xfa0) 7m49.21368362s ago: executing program 8 (id=971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[0x9, 0x1e5], &(0x7f0000000340)=[0x5], 0x0, 0x2, 0x0, r0}}, 0x40) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x112) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0xffffffffffffffc2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x804, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x2c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x10}, 0x94) close(r4) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/64, 0x40}], 0x1, 0x8001, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0xfffffffffffffe92, 0x0, 0x0, 0xa}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00') timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 7m47.115760213s ago: executing program 8 (id=972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x7e}}, 0x10) timer_gettime(r4, 0x0) write$vga_arbiter(r6, &(0x7f0000000280)=@unlock_all, 0xb) 7m44.077750451s ago: executing program 8 (id=978): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 7m43.803121849s ago: executing program 36 (id=978): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 3m33.812842897s ago: executing program 5 (id=1195): syz_open_dev$loop(&(0x7f0000000000), 0x20000000000101, 0x480a82) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file1', [{}, {0x20, 'fowner'}, {0x20, 'syzkaller\x00'}, {0x20, '\x96\x97\xcf\xef\x19\'}G\xce)[jre%zer.statU\x00'}, {0x20, 'lowerdir'}, {0x20, '_\xf7\x81z#\x8b\xc1\xc4\xe5(\xd0\x10I\x13\xa3\xb2;\x7f\xcc\xca!\xda\xb51E\xac\xc5d\x8e6n\xa9(\x98\xe1\xc2\x80\xc3\x05\xa6-J\xc8\xa0\x96\xd0\xb5\xc1j\\\xcbg!0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000680)='\xfc\xa5\x13\x9c\xa1\xfdcP\x9a\xf0\x12Eu[2E\x89\xe7\xa0W%\xd2\x8d\xc2\xab\xb9y\xe9\xc0\\\r\x18u\xd4C=\xe9\xee+\xd4J\xfd\x1ew\x99\xe8<\xcdjk(\xfe\xbf\xe9\x81j;\xe7n\bG\xb5<\xcdN.\xd9Y\xee\xbd\a\xa0\xcdv\x81\xaf\x17\xfc\xa3r\xc8m\xa8\xa0t\x02\xf1\f/@\x00\x00\x009\xca\xd1q\xa1`\x99\xad*\x10\xb1\x02\x05\xde:1/N8\x03\xcbe\xb7\x9c\xcf\x15\x90E\x9e\xe06\x85!\xbe\xf3\x9d\xcc`C\x15\x959\xa4\xd0j\xf9l\x82\xe1\xeaL\xc2\xab\xc7F;\x87]\xd7\xda\x98\xddI=;\x13j\xcf\x9cw\xf8\xf7\x17\xdah\x01\x9bL\x00\x969\x8b\x04\x85\xe5\xcc,\xe0\xd3\x02%\xf7\\7\xd7d\xdbX\x9b[\x8b\xb6\xc7\xf7\x00'/223, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003000000008117980840000102030109022d0001010050010904000b0103010208092103000401225c4f448b0c09058103ff0309050203000200000022dcb47eb521da9a90710ec300d3312c629b58ac5c1313973936cd0760939c9a0481e5879bf131b81918440a90a1218c46eb9d38fc34fd7cec6f74869ca59c7c9bee1f439d8666df73b09a3f6b43c7e9a6ae77cfb9b9f74ae63b1c2be64c081550790a305479744e44af3654d9ff00"], &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6b, 0x5, 0x8, 0x10, 0x7}, 0x70, &(0x7f0000000340)={0x5, 0xf, 0x70, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x42, 0x1, 0x2, 0x880, 0x1, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x3, 0xfda2}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x4, 0x8, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x98, 0x6, 0x40, 0x2, 0x2}, @generic={0x3b, 0x10, 0x3, "db08eec6982950e8b5f2a2e9b73005c666cbfa07c5052c5fe7a61a090dd5d620d021f08db01acd33055f8894474d8aa26378f6e30080ccfd"}]}, 0x3, [{0xfc, &(0x7f0000000180)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100c}}]}) 3m32.249584373s ago: executing program 5 (id=1199): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) unshare(0x26020400) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "b73d"}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 3m30.140932856s ago: executing program 5 (id=1202): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(0x0, &(0x7f00000002c0)=""/185, 0xb9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000180)={0x0, 0x6c00}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000d40)={[{@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0xd, 0x5ed, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000000c0)={0x1004, 0x8, {0x57, 0x6, 0x7, {0x9, 0x8}, {0xee, 0x5}, @const={0x4, {0x7, 0x100, 0x7, 0x8006}}}, {0x55, 0x1, 0x73c, {0x8, 0x10}, {0x6, 0x96}, @cond=[{0xa, 0x7fff, 0x8000, 0x600, 0x805, 0x4}, {0x573b, 0x1, 0x277, 0xfffd, 0x9}]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x20, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3m27.513120216s ago: executing program 5 (id=1205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8=0xffffffffffffffff], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000400)={0x1, @win={{0x49d, 0x7, 0x2, 0x7}, 0x1, 0xfffffffe, &(0x7f00000002c0)={{0x0, 0x2, 0x170f, 0x1}, &(0x7f0000000200)={{0x2, 0x6, 0x21b, 0x6}, &(0x7f00000001c0)={{0x8, 0x101, 0x9}, &(0x7f0000000180)={{0x6, 0x3, 0x3, 0x19}}}}}, 0xff, &(0x7f0000000300)="c67c960536bb741b163df854d9d4ae8b012482d7fb03dca2c41927948988c207ff866482d2b7f837d7e722181edbf756f4e7bce894167483fb610bc5d23169e3ef7c598acd0e967b0f51fab2b0124911d14b6973711619604bd610ec304304eafd9303ee3cc0f42a30b8a824b38eae09f0ba9d7e151670a326679f663880b91502acc11f014a374de70dd9a5c3e81786c2f020a13a61eaa0f3b24ca78c79fc4f1f78bbbb5273186929ad8c4528c66df73bcb6879c54414613f420b4e2c70ad2b621cf676ad3367982df8137488dc23f32d596e3d65326e0c2685c402", 0x7}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYRESDEC=r2], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000001c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000000c00)={0x101c, 0x8, 0x9, 0x401, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x2}, [@generic="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", @nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x2d}]}]}, 0x101c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) 3m27.108783914s ago: executing program 37 (id=1205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8=0xffffffffffffffff], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000400)={0x1, @win={{0x49d, 0x7, 0x2, 0x7}, 0x1, 0xfffffffe, &(0x7f00000002c0)={{0x0, 0x2, 0x170f, 0x1}, &(0x7f0000000200)={{0x2, 0x6, 0x21b, 0x6}, &(0x7f00000001c0)={{0x8, 0x101, 0x9}, &(0x7f0000000180)={{0x6, 0x3, 0x3, 0x19}}}}}, 0xff, &(0x7f0000000300)="c67c960536bb741b163df854d9d4ae8b012482d7fb03dca2c41927948988c207ff866482d2b7f837d7e722181edbf756f4e7bce894167483fb610bc5d23169e3ef7c598acd0e967b0f51fab2b0124911d14b6973711619604bd610ec304304eafd9303ee3cc0f42a30b8a824b38eae09f0ba9d7e151670a326679f663880b91502acc11f014a374de70dd9a5c3e81786c2f020a13a61eaa0f3b24ca78c79fc4f1f78bbbb5273186929ad8c4528c66df73bcb6879c54414613f420b4e2c70ad2b621cf676ad3367982df8137488dc23f32d596e3d65326e0c2685c402", 0x7}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYRESDEC=r2], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000001c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000000c00)={0x101c, 0x8, 0x9, 0x401, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x2}, [@generic="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", @nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x2d}]}]}, 0x101c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) 2m45.030275835s ago: executing program 7 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000340)="7606dd511fe08a273c5bba167fe0fe12ffdb2147d8f72e22300868338a2612100626c1b7b77da7ce1c5e2b20898e07e8e26a36662121c14a3085a749a91fb3775768a4feb3ab11c00053159c0ece381957c1b725a511dab539b2234df09228109baab05b7c63b912b27ddf3a7e0c87e9d2a967f11cd4db32135a81c5a2b243eb6bc71443303bedaf6e71bdcaeb2c04a202cf241cdd63c662a5074efc416ac936fef0a6a63b1a260f441b7ca71a164f5c0d5bb69a015f2c77edf628e36e914f81a64610517315055274ab5daa56d4028b1b1f416df19d32e4669b94298ac965772e2d44cbd38113", 0xe7}], 0x1, 0x4) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffc4b, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x5]}}) sched_setaffinity(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) close(r4) 2m44.127878513s ago: executing program 7 (id=1232): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2c, r0, 0x801, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32=r4], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x4, 0x2000) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)=""/131, &(0x7f00000000c0)=0x83) 2m43.600290674s ago: executing program 7 (id=1233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = socket$l2tp(0x2, 0x2, 0x73) pwrite64(r0, &(0x7f0000000100)="416f56a1b13accba0003eab4a8bedee199b997e93b0df3ede81a89beae29cc2a14ae36caa5f7eabec7b2d8bf116a2cf0c761e07d808a2657bb08f0c89158d45d2676291ab8abc81bea5d6ea98801d25253c94222f156f91b242a707bf1eb8c7034973a51f9b8c83f74285abbcf93d69520d9522f4dfe146dca58a42f765d8dd9beb6565b64ee9c71d61409012e702e955bbe44343b2883563ada08c189d1fe4796e280902e77dd4689a49d064b91c22f7bf9a56414a3f5663ccf893da1d5416cc5757bc52b3495814e29cbf8aa1e94fb0984a85a970783b5ac94a32eaa8b96ec9f7be53deeaf8331f7", 0xe9, 0x4) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0x3, 0x4) recvfrom$l2tp(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 2m43.540996372s ago: executing program 7 (id=1234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[0x9, 0x1e5], &(0x7f0000000340)=[0x5], 0x0, 0x2, 0x0, r0}}, 0x40) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x112) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0xffffffffffffffc2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x804, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x2c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x10}, 0x94) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00') 2m42.325823504s ago: executing program 7 (id=1235): r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1f000000000000002900000039000000"], 0x10}}], 0x1, 0x4000000) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0xfffffa78, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x6ce, 0x0, &(0x7f0000000180)) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x204000, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x7) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usbip_server_init(0x1) 2m40.868372359s ago: executing program 7 (id=1236): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0x2}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e25}]}}]}, 0x54}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x21000000) 2m40.381929622s ago: executing program 38 (id=1236): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0x2}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e25}]}}]}, 0x54}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x21000000) 51.339994037s ago: executing program 9 (id=1311): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) socket$inet_udp(0x2, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x400]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0xd, 0x2, "4b97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) 46.548387418s ago: executing program 9 (id=1318): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000009c0)={0x0, 0x4, 0x1, [0x9, 0x180000000, 0xbc7, 0x6, 0x10000000007f], [0x0, 0x9, 0xce4, 0x7, 0x6, 0x12b, 0x7, 0x9, 0x8bcb, 0x6, 0x7406, 0x40, 0x8000401, 0x2, 0x7, 0x4, 0x8000, 0xf, 0x7fffffff, 0x18db, 0x86a, 0x6, 0x81, 0x9, 0x8000000000000001, 0x6, 0x0, 0x800, 0x1000, 0x7, 0x10000, 0x8, 0xbc7e, 0x9, 0xfffffffffffffffc, 0x8, 0x3ff, 0xa9a8, 0x8, 0x2, 0x5, 0x2, 0x4, 0x7f, 0x7fffffff, 0x0, 0xb, 0x9, 0x7, 0xb, 0x481e51310, 0x7fffffffffffffff, 0xffffffffb84f7a18, 0x4, 0x0, 0x4, 0x1, 0x1, 0x9, 0x10001, 0x7ff, 0x2, 0x8001, 0xfffffffffffffffd, 0x2, 0x0, 0xffff, 0x2, 0x5, 0x0, 0x7fffffffffffffff, 0x5, 0x9, 0x5, 0x7fffffffffffffff, 0x8, 0x9, 0x9, 0xba, 0x2, 0xc, 0x8, 0x59, 0x2, 0x4d, 0x1000, 0xfffffffffffffeff, 0x8, 0x2, 0x47, 0x4, 0xfffffffffffffffa, 0xe38, 0x4, 0x7, 0x8001, 0x8, 0x3, 0x9, 0xfffffffffffffff7, 0x3, 0x200, 0x0, 0x65f, 0x5, 0xa, 0x6, 0x5, 0x15, 0xda5e, 0x100007, 0xc, 0xd, 0x6, 0x80000000, 0x899, 0xbd, 0x0, 0x2, 0x100000000, 0x2]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000440)="164993115d1275fab5a0773ac9a2", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_open_pts(r0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff9, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9655, 0xfffffffffffffffe, 0x40000000000009, 0x6, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffd, 0x81, 0x8000000000000000, 0x6, 0x100000000, 0x5, 0x200000006, 0xfffffffffffffffc, 0x3, 0xa}) ptrace(0x10, r5) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200075b, &(0x7f0000000680)={[{@usrjquota}, {@nobarrier}, {@discard}, {@debug}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@barrier}, {@data_err_abort}, {}, {@lazytime}, {@block_validity}, {@nolazytime}, {@usrjquota}, {@resgid}, {@lazytime}, {@sysvgroups}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000540)={0x0}) dup3(r4, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf9) 45.050413099s ago: executing program 9 (id=1320): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94, &(0x7f0000000100)=ANY=[], 0x1, 0xdc8, &(0x7f0000002080)="$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") (async) syz_mount_image$vfat(&(0x7f0000005900), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399483d, 0x0, 0x0, 0x0, &(0x7f00000000c0)) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000080)={@loopback, @remote, 0x14, 0x7}}) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r1, &(0x7f0000001fc0)=""/169, 0xa9) (async) recvmmsg(r1, &(0x7f00000040c0)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/116, 0x74}], 0x9, &(0x7f0000000740)=""/18, 0x12}, 0x7bc}, {{&(0x7f0000000780)=@caif=@dgm, 0x80, &(0x7f0000003f00)=[{&(0x7f0000000800)=""/6, 0x6}, {&(0x7f0000000840)=""/17, 0x11}, {&(0x7f0000000880)=""/46, 0x2e}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/51, 0x33}, {&(0x7f0000003ec0)=""/19, 0x13}], 0x6, &(0x7f0000003f80)=""/212, 0xd4}, 0x8001}, {{0x0, 0x0, &(0x7f0000004080)}}], 0x3, 0x40000000, &(0x7f0000004180)) 44.326496457s ago: executing program 9 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4ec42, 0x40) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='H', 0x1, 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000dd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) 43.358809981s ago: executing program 9 (id=1327): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400030a0000000000008000000000030006002b0000000200000400400000000000000000000002000100000000000000fb0200000000030005003200000002"], 0x50}, 0x1, 0x7}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2204806, &(0x7f0000000300)=ANY=[@ANYBLOB='hide,iocharset=cp860\x00mode=0x0000000000000001,nojoliet,utf8,iocharset=macgreekAmap=acorn,iocharset=iso8859-2,session=0x0800000000000056,mode=0x0000000000000004,mode=0xfffffffffffffffe,unhide,gid=', @ANYRESHEX, @ANYBLOB="08ee"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) userfaultfd(0x80001) (async) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = socket(0x1d, 0x2, 0x6) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001840)={0x90000001}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r7, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmmsg(r1, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)}}], 0x58, 0x4040040) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r9, &(0x7f000057eff8)=@abs={0x1}, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000240)={r10, &(0x7f0000000180)=""/67}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) accept4(r11, 0x0, 0x0, 0x0) 43.260352518s ago: executing program 6 (id=1328): r0 = epoll_create(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000042}, 0x40040) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x90000000}) read(r1, &(0x7f0000000540)=""/4096, 0x1000) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0xfffffe7d) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f00000003c0)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) ioctl$FITRIM(r5, 0x40e8662e, &(0x7f0000000080)={0xe024, 0xd000007}) lseek(r4, 0xf5, 0x0) epoll_create(0x4) (async) pipe(&(0x7f0000000040)) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000042}, 0x40040) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x90000000}) (async) read(r1, &(0x7f0000000540)=""/4096, 0x1000) (async) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0xfffffe7d) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f00000003c0)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) (async) ioctl$FITRIM(r5, 0x40e8662e, &(0x7f0000000080)={0xe024, 0xd000007}) (async) lseek(r4, 0xf5, 0x0) (async) 42.816405639s ago: executing program 6 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)="a5ce", 0xfed0) r5 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xcea5, 0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80d}]}, 0x24}}, 0x40400c0) 42.260334347s ago: executing program 6 (id=1331): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x4, 0x1, 0xe80, 0x40086, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xb}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=@getnexthop={0x0, 0x6a, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_FDB={0x48}, @NHA_FDB, @NHA_ID={0x0, 0x1, 0x2}, @NHA_GROUPS, @NHA_ID={0x0, 0x1, 0x2}, @NHA_OIF, @NHA_MASTER, @NHA_GROUPS]}, 0xfffffffffffffef5}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 42.219801685s ago: executing program 6 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_ignore}, {@jqfmt_vfsv0}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008814}, 0x4000) (async) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) (async) close(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2842, 0x0) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x814c18, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r8, @ANYBLOB="a58f5d4d86a3ce16e0caf86aad08c82cbe74591c72edc15581e1896d19ddcf735d4e21c32d96b534f657df0f3d6437d472b6681f496e2800457bea11beec7862752b008ada1f52adcdec38d42424564013ac14ccb5704d46000000000d554b14ade673d9a91de4991011037ef275c8b30d8385dd759f85e8445f"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x40, 0x80, 0x1, 0x10001, {{0x10, 0x4, 0x0, 0x1f, 0x40, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0xcf, 0xf, "6015e304000000000000977500"}, @end, @generic={0x82, 0xa, "6d1438ebeb771cfa"}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0x7, 0x0, 0x8, [0x7ff, 0x0]}]}}}}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.numa_stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_newroute={0x68, 0x18, 0x400, 0x70bd27, 0x25dfdbfb, {0x1c, 0x14, 0xa, 0x3, 0xfd, 0x1, 0xff, 0x6, 0x3100}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x29, 0xb, r1}}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_OIF={0x8, 0x4, r8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb9}, @RTA_DST={0x8, 0x1, {0xfff, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r9}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r10}]}, 0x68}}, 0x0) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000000), 0x4) 41.641912654s ago: executing program 6 (id=1333): r0 = io_uring_setup(0x4ef1, &(0x7f00000000c0)={0x0, 0x8a66, 0x1000, 0x0, 0x3a0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) syz_ublk_setup_io_uring(0x60b3, &(0x7f0000000140)={0x0, 0x2704, 0x20, 0x3, 0x2d0, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xb) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) mremap(&(0x7f0000498000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000002c0)=0x0) ptrace$pokeuser(0x6, r4, 0x9, 0x9) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r5, &(0x7f0000005200)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000340)={0x10000010}) 40.433742231s ago: executing program 9 (id=1336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r6 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r8 = open(&(0x7f0000000340)='./bus\x00', 0x18123d, 0x22) fallocate(r8, 0x0, 0x40000, 0x1000f4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r9 = dup(r7) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x10040) 40.303152271s ago: executing program 39 (id=1336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r6 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r8 = open(&(0x7f0000000340)='./bus\x00', 0x18123d, 0x22) fallocate(r8, 0x0, 0x40000, 0x1000f4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r9 = dup(r7) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x10040) 40.145167461s ago: executing program 6 (id=1339): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x33c4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000100001002bbd700000000000e0000002000000000000000000000000ff0100000000000000000000000000010000ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x198}}, 0x4050) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r2, &(0x7f0000000440)=""/4090, 0xffa) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() getsockname$qrtr(r2, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 38.915121773s ago: executing program 40 (id=1339): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x33c4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000100001002bbd700000000000e0000002000000000000000000000000ff0100000000000000000000000000010000ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003200000064010100000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0300000000000000000000000000000008000000000000000008400000000000000000000000000000040000000000000000000000000000000000000000000007350000020004002c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f4d0014"], 0x198}}, 0x4050) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r2, &(0x7f0000000440)=""/4090, 0xffa) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() getsockname$qrtr(r2, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 4.67304339s ago: executing program 2 (id=1373): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) getpriority(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd700000000000140000001c0007800c0003000000003e0a0000f1"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x840) shmctl$SHM_INFO(0x0, 0xe, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@map_fd={0x18, 0x9, 0x1, 0x0, r5}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x46}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 3.531431845s ago: executing program 2 (id=1374): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x112) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x2000000) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x2, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) fcntl$lock(r3, 0x25, &(0x7f0000000400)={0x2, 0x1, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8d4ca001}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f5, &(0x7f0000000000)) 3.026525472s ago: executing program 2 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000004f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000006f80)='./file0\x00', &(0x7f0000006fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007040)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000007140)=0xe8) statx(0xffffffffffffffff, &(0x7f0000007180)='./file0\x00', 0x800, 0x8, &(0x7f00000071c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000008c80)=[{{&(0x7f0000001200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="a7258bee022df65c03b80dc21be163a5cfe54924faf9e10578cc1a11b14b8b151aa0790a57b2974d0aad2e625d5d358f33755f76a924b9163ca8a3317306a3df822213e68316d2154abe1907c5ac8bea3aaa18cdcdfcab72f6c7e75672c883bc88fb3e235d4c89035c1025baaf3c35c2438918530c2dade71759518e2de772c744cabb4575ef0aa41769fd4440153998bed469f0b7deeaa34e89fadbc66bd51190f1fc9212c2af636947bdd3190172d5fb861d4ad3c3f333a7532cbd2417bbbd198269780c00ea3fabb87c088a8c8abe6bde1602c4b49a8c6531299eabc0117d11e5eddbd006734f", 0xe8}, {&(0x7f00000025c0)="1dcc230043d536766350fcfbd5af654c56c77af6f5fb02130ed5838b2d5dfd49750500106f60ffdd3f91b605ef98474d5167ec6162d5baa85a0010d5bf744c7fa33aa45614d09b25995a2cb199d4c99f1723fab0527f52e17d747e2731db7e64cf77cc449f5f0639b85977eb5786337c08b4ec54617b8efd993f0d9bfc407da7f71b6a6e1ab39a6a88a451f86f3097409018dab30a6b544219c08d343e8b6d28cca1f224b938fe63e273671a2989be292be26020f830d2a6adf7e9", 0xbb}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="9eee0f54912cf12f5c589af945d947bf5ef6edc8cd0993eb58707ae1a934cc2e33d9a51ea056f1054d0fcf6f10f421226025f35fb6924f7a6b2aeb884cc9270e0eaf84b15dd32e166a551fab0c349840e16152fbc1ff870891cbc4a6680e57f2c9fd08137d49c0f250c5428d56d61f", 0x6f}, {&(0x7f0000003700)='aW5\f', 0x4}, {&(0x7f0000003740)="0855cbbf7d83cf87a8ba13efd89ed2a14b61921aed5bbd3fce", 0x19}, {&(0x7f0000003780)="548657ca7772181d8b43ca5357ba5ab6dd5dea9f964b239e48cab0002cab13105f522ea70e3c9f7a1ab527044420d0dc595c78a185028b0f506a5cf9e790703d8040d9d0c3341e01dd309e31d03eba359cdfb2cc1364fb7328ee8aa1798a2480bdf4f6b8c3d4fdb22f737f09c72a852f2936a8941078bf166440367c929bc83ad164ea5c8b37b7f8ef066389ce36c4a28cf20d29cc06", 0x96}], 0x8, 0x0, 0x0, 0x8}}, {{&(0x7f00000038c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003940)="78e81c57a557abce593d684673fe94740ca11060e92e731fb1a09ed3eedf985704dbb0cde90f448c5a244457b3bfdba334d79fa414895016802d100326492e0d54cef1866de1d30f6edc187ff42d42ed6cc13a90869dc5c2b28533d006478e7a2010b66361bd586bbb2fe6e36103875958fa07b1c92687645f42ad3d025cb71812b83da56622ee19e1a0f6e73670d30ef64d8c513a5b8485", 0x98}, {&(0x7f0000003a00)="7570348f926a8ed720274d5f980acf252d48039d6b1966700eba24a313aa56d85d5c0df21ed80acc93bac720138d9f32591b16812a429170a6e34b63f85d9c4f381acf65a26a4997d41885a288c0f1ef0a92a9d843169481d3d6b197348a3458dfafd8a133c96459dffa963f5781f0872ba962b0980716d72cab36839cfdb5", 0x7f}, {&(0x7f0000003a80)="b9d8dc336a98fe29b637070b091018b59714648637b555ec8a653592a73414c6c4b3fcc694fc9203ca1ca091eb58fc8c7212551b637d7638cbb40126d83237", 0x3f}, {&(0x7f0000003ac0)="db2d4d238d8c479d4dcb4450f7776f56e56ce90dbe76df06185e0cf42971b8d9a75e00ff6808ff322a7c784a0309c1da3be89a60f7b856fa8deb82ec587a515d2fcc361b87f4d0b00bdc6f75f18e8ebfd25cbde5927ade2abc83aa667150e64b671b", 0x62}, {&(0x7f0000003b40)="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", 0x1000}, {&(0x7f0000004b40)="ca5aa5de2550ca7d7f1b4516aca9", 0xe}, {&(0x7f0000004b80)="5d1bb203df71f7ec09eeaa64a5edad48fb4de2e06c20fb32cd90df5e344f5b", 0x1f}, {&(0x7f0000004bc0)="dcf3e35eefcf126254d395bcb4aa43415cd3a8be8c6b2742f79c174a8f7024d94ed6dd9150e2e0c682cd85c3b388f5fe7204af8f9c39043e1b3ef7b90c3bd129a95e31067e58841e28e8a7f8c093a3048f6d912fc3e3cd429e65e5d33906edc2ebd0fee4e7784423576fae9a2ba29c2636ca0387a1503776213f4f3f7107346ce1a0fe6c2895645b7049b4a614547f127b04ec71b8d8b2c7f7ac5ea70e9753d8b4f04d2b7a27dfd4ee6861baa7f8e6f9538f19ad46796964033fbdf13b4ebb46bd5ba33f9a13a7fe6273e4eca497de7a90616001f0b7", 0xd6}, {&(0x7f0000004cc0)="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", 0xfb}, {&(0x7f0000004dc0)="722cf36792ac8d2349fec482f4cd703f2d9cd8c14963768fe73faf3894d685d1798a1b7aeba56d8e1598097209a0bbbc6557a43e01227c59fb419696932963b11c69dbf4b1fb3124eb9a035763f10ed86ad9a57dbc436ab2e1dec681f59ed59526c7aa62f472f8fb340d8822e7c4bbb2bc643b842c733b08456213d15ebc29cfeb60b9a544c014730fcb7c350c537e4a4c39ee3109917af1a0", 0x99}], 0xa, &(0x7f00000074c0)=ANY=[@ANYBLOB="1a0000000e000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x24040040}}, {{&(0x7f0000008280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008540)=[{&(0x7f0000008300)="472288d41da19b62e6d86437f5d8051ba24e67ba8a40f6a9c1765e6cf257a26872053e0bada02032f646911032f6d4e0a3a6275fae4d68f3941d1d739ec4a3aedc35ec19b7ed1d07ea99cc198b9ecfff700152d437381803d364d8ca28424b097b998fdd51fab12bfb62680e4ddaf5b5cae611317eedb0e0b58e268e626cd8a3b1369c40a8062c7d85ae6948abd640ae8cfeb13feaa0d132da66ce99a11a4b8134617c", 0xa3}, {&(0x7f00000083c0)="558a13d274da3e1f786b6bcde2afb242", 0x10}, {&(0x7f0000008400)="f332b1555386fc3c8694bf374d295b97c0d59bc1f70573aceb", 0x19}, {&(0x7f0000008440)="2881de1ec88b35aaba056f394a79accee1d2678ca6aefb2081d2e668ebf310a587c90ed72f26b521c927d6a4465ddb32feac419d4fb605b91ee8564b09fef514dce2fd44c4ddb3984bb7785199a89b5ceeba3f4fc10678e399c67225425a14dc3f3659e9a981fb9a865cf40ca3537479328f6ab495b3044b411887323dc52dab7087897e5db57a93cf599431dbe8b91e019c1c7e2f58896db499c74a39e7bbbca8c7549c93d7004cfb6a2c91a1cc356e0518629552d4e9dcdb20abcfc0c19fd8b66145f7e7108d", 0xc7}], 0x4, &(0x7f00000085c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r9]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [r9, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108, 0xc0}}, {{&(0x7f0000008700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000089c0)=[{&(0x7f0000008780)="f7", 0x1}, {&(0x7f00000087c0)="2b238560e90d168ecf39e66a081f005f932fd185e2fee8be52409e5bace1f08a7e2871ecf09c34b0d7ec70fb15170a72d3dd1340c38fa442183817e0ca0852f633f49034ff13ed203983283a836606f0ad58964f20d30f8b8debb450a08b1043b6384912f1c57c88139754a88847452631a903880d06d53c163313f842fbaa0356997d7c4093ad355f79ae1be8733348d3ac5f131433236d146b66b05f58569507e897e1045565c78d10f7aa241c5f3f4df7537c94", 0xb5}, {&(0x7f0000008880)="73f4e82d1995e7c2734d251a50c87ef3bcecb9aa28999f0d35374fa2c81b50101ad84de21281c2a345802102515f1c00b6669c4c54110a75a695fd758ca5d8caeb068bfba7e621113c827735e0eb9d9bba9e", 0x52}, {&(0x7f0000008900)="58c03df9d7604a0ea525f885578bebd3053c41ea67db529dea3e0e22806b7b5d3705643384608d2bb26e291f4e8c8c946237464b544860e29f2a446e222f80fecbc530f7bfbec371bfb888c898ad1c210acb5805dadfb97562fdebc06e18434e4cf6ee090f9e72017194fc382ae441a2560f20b6b96e87aca0a7a863abaa0ef470ab69524cde5acadefc0acbd767fdb625205c19149992671c418e4fd5bfcbceef6be7ebb52156cf1bf58e371391364eca14ceb074349c2ce41d", 0xba}], 0x4, &(0x7f0000008b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x20000000}}], 0x4, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clock_gettime(0x3, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "000000ffffff00000000000200000000000000000001000000008879e66485201a0015ca837400"/55}, {0x1, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079110c00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) ftruncate(0xffffffffffffffff, 0x1000000001000006) syz_open_dev$video4linux(&(0x7f0000000000), 0x84d, 0x40000) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1210048, &(0x7f0000000240)=ANY=[], 0x43, 0xc2c, &(0x7f0000000380)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtqnakhZ6E7o3pTdFNF1aSKFX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhTPzjjSSZVuJV1/277fM/mfOPGf0fozPHIHeOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARHz6M1fOnE07NvYeUmMAgANxbfwLZ87v/PwHAB5r13f7/R8AAAAAAAAAAAAAADhKUhRxIlIMvL6eJluP26pXG807dydGx3bfrT9FikoUrfryVj177vyFT1y8NNzJvH9xMN34YLw4fv1K7YX5W7cXZhcXZ2dqE83G9PzM7J5f4VH332moNQC1Wy/fmblxY7F27vT5bU/fHXyz7+kTg5cvnbo43KmdGB0bG++q6XkHv4bhfis8nooi6pHi7cG3Uj0iKvHoY/GQ985+6291YqjViYnRsVZH5hr15lL5ZKrkqkpErWunkc4YHcBcPJKRiOWy+WWDh8rujd+uL9Sn5mZrn68vLDWWGvPNVGm3tuxPLSoxnCJWImKt796X640iPhwpXj2znqYiouiMw8dbC4Mf3p7KPvRxD8p21nojVirHYM6OsL4o4lqk+MkbJ2O6HLN8i49GfK7M1yNeK/NTEal8Y1yI+PEu7yOOp54o4t8jxXxaTzOdb/5pHVeufrH22eaN+a7aznHl2H8+HKQjfmyqRhFTrSP+evrFT3YAAAAAAAAAAAAAAAAAeKf1RxHfjBR//PzvtNYVR2td+nsuD7/rpd/sXjP+3ENep6w9HRHLlb2tye3NS4dTpfxvHzrGnlSjiK/l9X9/eNiNAQAAAAAAAAAAAAAAAAAAeKIV8VKk+NKpk2kluq8p3mjerF2vT821rwrbufZv55rpGxsbG7XUzpGckzmXc67kXM25ljMqef+cIzkncy7nXMm5mnMtZxR5/5wjOSdzLudcybmacy1n9OT9c47knMy5nHMl52rOtZxxRK7dCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKlEET+NFN/4ynqKFBEjEZPRztW+w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCqpiJOR4rVl6qtxyuViOsR8dONjY3OLSLWy9zp79MuGx/gsPsKAAAAAAAAAAAAAAAAAAAAR1Yq4iOR4tn/W0+1iLg7+Gbf0ycGL186dXG4iCJSWdJd/+L49Su1F+Zv3V6YXVycnalNNBvT8zOze/1x1auN5p27E6Nj+9KZh+rf5/b3V1+Yv/3KQuPml5d2fX6gemVqcWmhPr3709EflYjJ7i1DrQZPjI61Gj3XqDdbu6bKfRpYiRjZa2cAAAAAAAAAAAAAAAAAAAA4MgZSEZ+JFD/6rwups268p73m/5faj4rN2td+b+u7AOZ2ZEf39wfs5X7aa0OHWgvvaxOjY2PjXZt7eu8tLduUUhHPRYqPvfqB1nr4FAO7ro0v695d1t26kOsGf6WsW95WVR2aGB2rXZtvnroyNzc/XV+qT83N1sZv16f3/MUBAAAAAAAAAAAAAAAAAAAA8AADqYgfRIr/+bv/SJ3rzuf1/z3tR13r/3+jtYS+pZq256bW2v53t9b2t++/5/LwwIefv9/2/Vj/X7YppSK+HinO/+ADrevpd9b/T+6oLev+NFK89fyHcl3lqbKu3ulO+xVvNOZmz5S1fxUpfvXtTm20am/m2me3as+Wtf2R4i/Wt9d+Ode+b6v2XFl7MlJ85793r33/Vu35svZHkeKf/rbWqR0oa383157Yqj09PT8387BhLef/W5Hib679Vur0+b7z3/X9D8s7ctM9c/7g++/U/A92bVvO8/onef7rD5n/i5HiW9UP5br22E/l559p/X9r/j8WKf7z37bX3si1792qPbvXbh22cv6/GSm+/Zc/3Oxznv88slsz1D3/v9yzPTffJYc0/890bRvM7Zr+OcfiSbT4yldfrs/NzS7s152NP2j/oH38Ee48wXfKA88RaMbjd+ewj0wchPLz/88ixf+fKFLnPCZ//r+r/Wjr/O9/v7b1+X95R246pM//93Ztu5zPWnp7IqpLt273PhdRXXzlq6cat+o3Z2/ONs+dPfPJT148e+bsxd6nOid3W/f2PHaPg3L+vxcpvv8P39/8PWb7+d/u5/8DO3LTIc3/s9192nZes+eheCKV8//XkeKZT/9w8/fNB53/d37/P/mR7bn57++Q5v99XdsGc7saP+dYAAAAAAAAAAAAHCcDqYg/jxS//Ue/njpriPby938zO3LTIf3914mubTMHsa7BXxYCAMdUef73/kjxzxvf3VzLvf38L36tU9t9/nc/R+H6/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNylKOL3I8XA6+tpta983Fa92mjeuTsxOrb7bv0pUlSiaNWXt+rZc+cvfOLipeFOPnj/d9oH48Xx61dqL8zfur0wu7g4O1ObaDam52dm9/wKj7r/TkOtAajdevnOzI0bi7Vzp89ve/ru4Jt9T58YvHzp1MXhTu3E6NjYeFdNT+8v/NPvke6z/ako4ruR4u3Bt9K3+yIq8ehj8ZD3zn7rb3ViqNWJidGxVkfmGvXmUvlkquSqSkSta6eRzhgdwFw8kpGI5bL5ZYOHyu6N364v1KfmZmufry8sNZYa881Uabe27E8tKjGcIlYiYq3v3pfrjSK+HilePbOe/qUvouiMw8evjX/hzPmHt6eyD33cg7Kdtd6IlcoxmLMjrC+K+MdI8ZM3TsZ3+iJ6on2Lj0Z8rszXI14r81MRqXxjXIj48S7vI46nnijiQqSYT+vpjb7yeNA5rlz9Yu2zzRvzXbWd48qx/3w4SEf82FSNIr7XOuKvp3/17xoAAAAAAAAAAAAAAADgCCliJVJ86dTJ1FofvLmmuNG8Wbten5prL+vrrP3rrJne2NjYqKV2juSczLmccyXnas61nFHJ++ccyTmZcznnSs7VnGs5o8j75xzJOZlzOedKztWcazmjJ++fcyTnZM7lnCs5V3Ou5YwjsnYPAAAAAAAAAAAAAAAAAAB4vFSiaF3F/RtfWU8bfe3rS09GO1ddD/Sx97MAAAD//9Wxb9A=") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 2.69196186s ago: executing program 2 (id=1376): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004000000000008000f00ff01"], 0x64}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001880)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) 136.925285ms ago: executing program 2 (id=1377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x4000, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 0s ago: executing program 2 (id=1378): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000040)=0x80000000) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x0, 0x9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) sendmmsg$inet6(r1, &(0x7f0000003140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7e, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1}}], 0x2, 0x200040c0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xa, 0x3, 0x2, 0x2}, 0x30, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x4c) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwritev2(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="9a", 0x1}], 0x1, 0xf, 0x4, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r8, 0x1) poll(&(0x7f0000000200)=[{r8, 0x1210}], 0x1, 0x1ff8) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r8, 0xda90) accept4(r8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x31, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) landlock_restrict_self(r4, 0x2) sendto$inet(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) kernel console output (not intermixed with test programs): : 00007fe30d9e330a R14: 00000000000ee0aa R15: 00007ffd150a2220 [ 976.843082][ T9893] [ 976.843088][ T9893] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 977.273541][ T9893] Flush: task=syz-executor[9893] dev=loop7 state=2 [ 977.344063][ T5250] 8021q: adding VLAN 0 to HW filter on device eth24 [ 977.360521][ T9893] Teardown: task=syz-executor[9893] dev=loop7 state=2 [ 979.252627][T11961] veth0_vlan: entered promiscuous mode [ 979.489734][T11961] veth1_vlan: entered promiscuous mode [ 979.960689][T12063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.075471][T11961] veth0_macvtap: entered promiscuous mode [ 980.356105][T11961] veth1_macvtap: entered promiscuous mode [ 980.444350][T12063] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.743864][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.744138][T10661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.781737][T11961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.803094][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.803299][T10661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.879963][T11961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.920406][T10661] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.939910][T10661] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.201753][T10661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.218317][T10661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.246690][T12076] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 981.393087][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.454556][T12076] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 981.669840][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.852063][T12076] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 982.130160][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.546126][T12076] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 982.572547][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 982.668886][ T5577] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 982.894612][ T5577] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 982.894646][ T5577] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 982.894671][ T5577] usb 8-1: config 0 interface 0 has no altsetting 0 [ 982.894702][ T5577] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 982.894734][ T5577] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.977120][ T5577] usb 8-1: config 0 descriptor?? [ 982.978124][T12363] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 983.381678][ T5577] hid_parser_main: 28 callbacks suppressed [ 983.381709][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381740][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381767][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381793][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381820][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381846][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381871][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381897][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381922][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.381948][ T5577] microsoft 0003:045E:009D.000B: unknown main item tag 0x0 [ 983.684264][ T5577] microsoft 0003:045E:009D.000B: hidraw0: USB HID v0.06 Device [HID 045e:009d] on usb-dummy_hcd.7-1/input0 [ 983.684299][ T5577] microsoft 0003:045E:009D.000B: no inputs found [ 983.684313][ T5577] microsoft 0003:045E:009D.000B: could not initialize ff, continuing anyway [ 984.391886][ T5923] usb 8-1: USB disconnect, device number 19 [ 984.464114][T12388] fido_id[12388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 985.194148][T12398] loop7: detected capacity change from 0 to 8 [ 985.501874][ T9501] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 985.637549][ T9501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 985.652424][ T9501] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 985.656485][ T9501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 985.658879][ T9501] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 985.972836][T12147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 985.988023][T12398] SQUASHFS error: zlib decompression failed, data probably corrupt [ 985.988058][T12398] SQUASHFS error: Failed to read block 0x9b: -5 [ 985.988077][T12398] SQUASHFS error: Unable to read metadata cache entry [99] [ 985.988159][T12398] SQUASHFS error: Unable to read inode 0x127 [ 986.046625][T12147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 986.088014][T12147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 986.096881][T12398] Flush: task=syz.7.1228[12398] dev=loop7 state=2 [ 986.177538][T12147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 986.339210][T12398] Teardown: task=syz.7.1228[12398] dev=loop7 state=2 [ 986.658982][T12147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 986.707407][T12147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.755192][T12076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.759137][T12416] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1228'. [ 986.760680][T12147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 986.870308][T12147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 987.265363][T12076] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.278470][T12063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.350576][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.350820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.708843][T12450] loop7: detected capacity change from 0 to 1024 [ 987.918738][ T61] Bluetooth: hci2: command tx timeout [ 988.036732][T12450] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 988.575198][T12450] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.358477][ T9893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.453469][ T9893] Flush: task=syz-executor[9893] dev=loop7 state=2 [ 989.503681][ T1160] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.530219][ T9893] Teardown: task=syz-executor[9893] dev=loop7 state=2 [ 989.587333][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.587452][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.108398][ T61] Bluetooth: hci2: command tx timeout [ 990.835075][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1231'. [ 990.835108][T12483] netlink: 'syz.7.1231': attribute type 30 has an invalid length. [ 990.866158][ T1160] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.962763][ T1504] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.986274][ T1504] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.017710][ T1504] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.050028][ T1504] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.503720][ T1160] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.217739][ T61] Bluetooth: hci2: command tx timeout [ 992.260344][ T1160] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.354398][ T9893] do_umount: task=syz-executor[9893] propagate_mount_busy()!=0 [ 993.354684][ T9893] do_umount: task=syz-executor[9893] propagate_mount_busy()!=0 [ 993.364045][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.364102][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.446178][T12063] veth0_vlan: entered promiscuous mode [ 993.825618][T12063] veth1_vlan: entered promiscuous mode [ 993.897701][T12147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.238793][ T61] Bluetooth: hci2: command tx timeout [ 994.496191][T12147] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.816177][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.819471][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.568005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.568190][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.774386][ T9501] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 995.805093][ T9501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 995.864407][ T9501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 995.926686][ T9501] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 995.931799][ T9501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 996.146362][T12063] veth0_macvtap: entered promiscuous mode [ 996.225579][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.303186][T12403] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.303420][T12403] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.303641][T12403] bridge_slave_0: entered allmulticast mode [ 996.307377][T12403] bridge_slave_0: entered promiscuous mode [ 996.351834][T12403] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.352139][T12403] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.352404][T12403] bridge_slave_1: entered allmulticast mode [ 996.358173][T12403] bridge_slave_1: entered promiscuous mode [ 996.389451][T12063] veth1_macvtap: entered promiscuous mode [ 996.609204][ T1160] bridge_slave_1: left allmulticast mode [ 996.609239][ T1160] bridge_slave_1: left promiscuous mode [ 996.609514][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.770197][ T1160] bridge_slave_0: left allmulticast mode [ 996.770233][ T1160] bridge_slave_0: left promiscuous mode [ 996.770536][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.650641][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.709233][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.752370][ T1160] bond0 (unregistering): Released all slaves [ 997.821991][T12403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.946413][T12403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.096865][T12403] team0: Port device team_slave_0 added [ 998.105258][ T9501] Bluetooth: hci3: command tx timeout [ 998.145431][T12403] team0: Port device team_slave_1 added [ 998.257104][T12063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.450688][T12403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.450699][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.450714][T12403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.465678][T12403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.465695][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.465721][T12403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.482062][T12063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.678354][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.715297][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.756062][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.822897][T12403] hsr_slave_0: entered promiscuous mode [ 998.827988][T12403] hsr_slave_1: entered promiscuous mode [ 998.833610][T12403] debugfs: 'hsr0' already exists in 'hsr' [ 998.833637][T12403] Cannot create hsr debugfs directory [ 998.847931][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.060055][ T1160] hsr_slave_0: left promiscuous mode [ 999.098662][ T1160] hsr_slave_1: left promiscuous mode [ 999.099804][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.099820][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.173012][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.173038][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.303156][ T1160] veth1_macvtap: left promiscuous mode [ 999.303253][ T1160] veth0_macvtap: left promiscuous mode [ 999.303533][ T1160] veth1_vlan: left promiscuous mode [ 999.303739][ T1160] veth0_vlan: left promiscuous mode [ 1000.059822][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 1000.099056][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 1000.169001][ T9501] Bluetooth: hci3: command tx timeout [ 1000.296135][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1000.912434][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1000.966981][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1000.990555][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1001.018098][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1001.027162][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1001.756786][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1001.793504][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1001.824204][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1001.837455][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1001.846628][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1002.258157][ T61] Bluetooth: hci3: command tx timeout [ 1003.296446][ T61] Bluetooth: hci4: command tx timeout [ 1003.505601][T12147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.090173][ T61] Bluetooth: hci6: command tx timeout [ 1004.248426][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1004.318926][ T61] Bluetooth: hci3: command tx timeout [ 1005.251575][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.251795][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.251940][T12573] bridge_slave_0: entered allmulticast mode [ 1005.253742][T12573] bridge_slave_0: entered promiscuous mode [ 1005.302493][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.302803][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.303064][T12573] bridge_slave_1: entered allmulticast mode [ 1005.306069][T12573] bridge_slave_1: entered promiscuous mode [ 1005.358935][ T61] Bluetooth: hci4: command tx timeout [ 1005.844698][T12573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.903808][T12573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.003885][T12573] team0: Port device team_slave_0 added [ 1006.023736][T12573] team0: Port device team_slave_1 added [ 1006.158921][ T61] Bluetooth: hci6: command tx timeout [ 1006.265324][T12573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.265334][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.265348][T12573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.400528][T12573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.400538][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.400553][T12573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.407507][T12147] veth0_vlan: entered promiscuous mode [ 1006.855593][T12573] hsr_slave_0: entered promiscuous mode [ 1006.856750][T12573] hsr_slave_1: entered promiscuous mode [ 1006.885035][T12147] veth1_vlan: entered promiscuous mode [ 1007.173775][T12403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1007.197330][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.252411][T12403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1007.275074][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.333618][T12403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1007.357971][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.439218][ T61] Bluetooth: hci4: command tx timeout [ 1007.627908][ T1160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.671778][T12403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1007.702579][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1007.703154][T12641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.703441][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.703682][T12641] bridge_slave_0: entered allmulticast mode [ 1007.705868][T12641] bridge_slave_0: entered promiscuous mode [ 1007.707942][T12633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.708248][T12633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.721708][T12633] bridge_slave_0: entered allmulticast mode [ 1007.725950][T12633] bridge_slave_0: entered promiscuous mode [ 1007.831777][T12641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.831965][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.832111][T12641] bridge_slave_1: entered allmulticast mode [ 1007.833893][T12641] bridge_slave_1: entered promiscuous mode [ 1007.835553][T12633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.835711][T12633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.835848][T12633] bridge_slave_1: entered allmulticast mode [ 1007.837605][T12633] bridge_slave_1: entered promiscuous mode [ 1008.113989][ T1160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.227531][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.239367][ T61] Bluetooth: hci6: command tx timeout [ 1008.294145][T12633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.363365][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.368375][T12633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.610923][ T1160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.683441][T12641] team0: Port device team_slave_0 added [ 1008.903399][T12633] team0: Port device team_slave_0 added [ 1008.921048][T12641] team0: Port device team_slave_1 added [ 1009.011433][T12633] team0: Port device team_slave_1 added [ 1009.171548][ T1160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.364431][ T9501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.382574][ T9501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.384075][ T9501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.385041][ T9501] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.386456][ T9501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.522337][ T9501] Bluetooth: hci4: command tx timeout [ 1009.906939][T12147] veth0_macvtap: entered promiscuous mode [ 1010.092961][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.092978][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.093004][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.101741][T12633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.101757][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.101783][T12633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.106259][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.106273][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.106299][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.176559][T12633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.176575][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.176602][T12633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.318844][ T61] Bluetooth: hci6: command tx timeout [ 1010.612428][T12641] hsr_slave_0: entered promiscuous mode [ 1010.614528][T12641] hsr_slave_1: entered promiscuous mode [ 1010.616251][T12641] debugfs: 'hsr0' already exists in 'hsr' [ 1010.616273][T12641] Cannot create hsr debugfs directory [ 1011.441040][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1011.487763][T12633] hsr_slave_0: entered promiscuous mode [ 1011.489606][T12633] hsr_slave_1: entered promiscuous mode [ 1011.491692][T12633] debugfs: 'hsr0' already exists in 'hsr' [ 1011.491716][T12633] Cannot create hsr debugfs directory [ 1011.598896][ T61] Bluetooth: hci0: command tx timeout [ 1012.523967][ T1160] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.523989][ T1160] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.165265][ T1160] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.165287][ T1160] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.231847][T12403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.345549][T12403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.580887][ T1160] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.580909][ T1160] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.657771][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.657935][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.679075][ T61] Bluetooth: hci0: command tx timeout [ 1014.063710][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.063856][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.412658][ T1160] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.412694][ T1160] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.992792][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.992954][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.993117][T12712] bridge_slave_0: entered allmulticast mode [ 1014.997887][T12712] bridge_slave_0: entered promiscuous mode [ 1015.023004][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.023311][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.023570][T12712] bridge_slave_1: entered allmulticast mode [ 1015.035187][T12712] bridge_slave_1: entered promiscuous mode [ 1015.357263][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.381009][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.741189][T12712] team0: Port device team_slave_0 added [ 1015.759027][ T61] Bluetooth: hci0: command tx timeout [ 1015.914611][T12712] team0: Port device team_slave_1 added [ 1016.166353][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.166369][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.166396][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.216389][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.216404][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.216432][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.718887][ T1160] bridge_slave_1: left allmulticast mode [ 1016.718920][ T1160] bridge_slave_1: left promiscuous mode [ 1016.728971][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.880036][ T1160] bridge_slave_0: left allmulticast mode [ 1016.880058][ T1160] bridge_slave_0: left promiscuous mode [ 1016.880230][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.178799][ T1160] bridge_slave_1: left allmulticast mode [ 1017.178834][ T1160] bridge_slave_1: left promiscuous mode [ 1017.179092][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.339517][ T1160] bridge_slave_0: left allmulticast mode [ 1017.339540][ T1160] bridge_slave_0: left promiscuous mode [ 1017.339713][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.559570][ T1160] bridge_slave_1: left allmulticast mode [ 1017.559599][ T1160] bridge_slave_1: left promiscuous mode [ 1017.559778][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.685113][ T1160] bridge_slave_0: left allmulticast mode [ 1017.685145][ T1160] bridge_slave_0: left promiscuous mode [ 1017.685338][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.838820][ T61] Bluetooth: hci0: command tx timeout [ 1018.659424][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.739219][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.787890][ T1160] bond0 (unregistering): Released all slaves [ 1019.360406][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.440925][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.460687][ T1160] bond0 (unregistering): Released all slaves [ 1020.179641][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.259879][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.301157][ T1160] bond0 (unregistering): Released all slaves [ 1020.383288][T12712] hsr_slave_0: entered promiscuous mode [ 1020.388221][T12712] hsr_slave_1: entered promiscuous mode [ 1020.392352][T12712] debugfs: 'hsr0' already exists in 'hsr' [ 1020.392376][T12712] Cannot create hsr debugfs directory [ 1021.754312][T12403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.708679][ T1160] hsr_slave_0: left promiscuous mode [ 1022.749080][ T1160] hsr_slave_1: left promiscuous mode [ 1022.750176][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.789324][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.968738][ T1160] hsr_slave_0: left promiscuous mode [ 1023.008668][ T1160] hsr_slave_1: left promiscuous mode [ 1023.009800][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.009823][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.030816][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.030842][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.199010][ T1160] hsr_slave_0: left promiscuous mode [ 1023.238704][ T1160] hsr_slave_1: left promiscuous mode [ 1023.239849][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.239866][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.259836][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.259863][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.358904][ T1160] veth1_macvtap: left promiscuous mode [ 1023.359019][ T1160] veth0_macvtap: left promiscuous mode [ 1023.359311][ T1160] veth1_vlan: left promiscuous mode [ 1023.359509][ T1160] veth0_vlan: left promiscuous mode [ 1023.380306][ T1160] veth1_macvtap: left promiscuous mode [ 1023.380406][ T1160] veth0_macvtap: left promiscuous mode [ 1023.380701][ T1160] veth1_vlan: left promiscuous mode [ 1023.380905][ T1160] veth0_vlan: left promiscuous mode [ 1024.089364][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 1024.154778][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 1024.749649][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 1024.789130][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 1025.399642][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 1025.439518][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 1025.654673][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1026.086755][T12403] veth0_vlan: entered promiscuous mode [ 1026.175241][T12403] veth1_vlan: entered promiscuous mode [ 1026.314788][T12403] veth0_macvtap: entered promiscuous mode [ 1026.432923][T12403] veth1_macvtap: entered promiscuous mode [ 1026.591723][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1026.672447][T12403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.717274][T12403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.764906][T12573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1026.823806][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1026.924274][T10650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.944143][T12573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1027.064143][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.124165][T10650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.124436][T12573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1027.166925][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.178192][T10650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.188070][T12573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1027.212012][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1027.212272][T10650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.314406][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1029.170982][T12641] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1029.233323][T12641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.236714][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.236731][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.653309][T12641] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1029.671953][T12641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.674318][T12641] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1029.721145][T12641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.735162][T12641] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1029.772098][T12641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.197928][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.197941][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.546293][T12573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.115758][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1031.225640][T12917] netlink: 'syz.6.818': attribute type 10 has an invalid length. [ 1031.225654][T12917] netlink: 'syz.6.818': attribute type 4 has an invalid length. [ 1031.225661][T12917] netlink: 116 bytes leftover after parsing attributes in process `syz.6.818'. [ 1031.247718][T12917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1031.283137][T12573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.457964][T12923] loop6: detected capacity change from 0 to 4096 [ 1031.599912][T12923] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1031.964434][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.964676][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.027317][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.027478][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.466894][T12641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.760606][ T38] audit: type=1800 audit(1784461451.846:644): pid=12923 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.6.1238" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 1032.762277][T12641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.920444][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.920671][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.278807][ T1160] bridge_slave_1: left allmulticast mode [ 1033.278831][ T1160] bridge_slave_1: left promiscuous mode [ 1033.278997][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.422860][ T1160] bridge_slave_0: left allmulticast mode [ 1033.422895][ T1160] bridge_slave_0: left promiscuous mode [ 1033.423149][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.458704][T12403] Flush: task=syz-executor[12403] dev=loop6 state=2 [ 1033.558137][T12403] Teardown: task=syz-executor[12403] dev=loop6 state=2 [ 1035.308783][T12394] IPVS: starting estimator thread 0... [ 1035.398874][T12972] IPVS: using max 7 ests per chain, 16800 per kthread [ 1036.240858][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.320125][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.340489][ T1160] bond0 (unregistering): Released all slaves [ 1036.535096][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.535317][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.190128][ T1160] hsr_slave_0: left promiscuous mode [ 1038.502750][ T1160] hsr_slave_1: left promiscuous mode [ 1038.504145][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.769512][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.823032][T12994] syz.6.1244 (12994) used greatest stack depth: 17248 bytes left [ 1038.920231][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1245'. [ 1038.920263][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1245'. [ 1038.928686][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1245'. [ 1038.928717][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1245'. [ 1038.938128][ T1160] veth0_macvtap: left promiscuous mode [ 1038.938692][ T1160] veth1_vlan: left promiscuous mode [ 1038.952216][ T1160] veth0_vlan: left promiscuous mode [ 1039.829821][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 1039.880411][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 1040.842870][T12633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1040.914777][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1040.935571][T12633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1041.016343][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.081573][T13034] loop6: detected capacity change from 0 to 4096 [ 1041.082780][T13034] EXT4-fs: Ignoring removed orlov option [ 1041.101631][T12633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1041.232680][T13034] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1041.268404][T13034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.269429][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.552702][T12633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1041.602258][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.679123][T12573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.768750][ T823] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1041.945787][ T823] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1041.946528][ T823] usb 7-1: not running at top speed; connect to a high speed hub [ 1041.947663][ T823] usb 7-1: config 254 has an invalid interface number: 216 but max is 0 [ 1041.947687][ T823] usb 7-1: config 254 has no interface number 0 [ 1041.947718][ T823] usb 7-1: config 254 interface 216 has no altsetting 0 [ 1041.948237][ T823] usb 7-1: language id specifier not provided by device, defaulting to English [ 1042.007876][ T823] usb 7-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=fb.ac [ 1042.007906][ T823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.007926][ T823] usb 7-1: Product:  [ 1042.007940][ T823] usb 7-1: Manufacturer: 籊檡ê·í—†äƒ„쩦霥粡鱟ዋ턅朴㫜塵桌ë‚⧋娚趭ê²â‡¹á¶ºï ší™—ä¢î™“㲊猻빪楿銂Ἶ⬻äžì§ [ 1042.698461][ T823] upd78f0730 7-1:254.216: upd78f0730 converter detected [ 1042.742068][ T823] usb 7-1: upd78f0730 converter now attached to ttyUSB0 [ 1042.799817][ T823] usb 7-1: USB disconnect, device number 2 [ 1042.806131][ T823] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1042.861155][ T823] upd78f0730 7-1:254.216: device disconnected [ 1043.451902][T12712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1043.493893][T12712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.536366][T12403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.554113][T12712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1043.582986][T12712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1043.667884][T12712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1043.682607][T12403] Flush: task=syz-executor[12403] dev=loop6 state=2 [ 1043.757246][T12712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1043.784597][T12641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.834233][T12403] Teardown: task=syz-executor[12403] dev=loop6 state=2 [ 1043.948869][T12712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1043.978049][T12712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1044.015045][T12573] veth0_vlan: entered promiscuous mode [ 1045.194907][T12573] veth1_vlan: entered promiscuous mode [ 1045.468269][T12633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.574608][ T5923] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1045.658656][T12573] veth0_macvtap: entered promiscuous mode [ 1045.693792][T12633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.698120][T12573] veth1_macvtap: entered promiscuous mode [ 1045.758604][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 1045.818104][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.818441][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.917578][T10676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.917759][T10676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.990106][ T5923] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1045.992281][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1045.992317][ T5923] usb 7-1: can't read configurations, error -71 [ 1046.044661][T12573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.100690][T12573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.173991][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.203542][T10677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.225650][T10677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.257521][T10677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.309853][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.352590][T12641] veth0_vlan: entered promiscuous mode [ 1046.518174][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.699519][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.699768][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.709250][T12641] veth1_vlan: entered promiscuous mode [ 1046.984372][T10650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.984602][T10650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.670474][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.670495][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.856541][T13134] loop6: detected capacity change from 0 to 32768 [ 1047.941034][T13134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1249 (13134) [ 1048.135736][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.135757][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.173494][T12641] veth0_macvtap: entered promiscuous mode [ 1048.320517][T12641] veth1_macvtap: entered promiscuous mode [ 1048.399035][T13134] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1048.399069][T13134] BTRFS info (device loop6): using crc32c checksum algorithm [ 1048.635851][T12641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.694585][T12641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.771565][ T68] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.789608][ T68] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.791484][ T68] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.813044][ T68] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.874638][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1049.118289][T13134] BTRFS info (device loop6): enabling ssd optimizations [ 1049.118314][T13134] BTRFS info (device loop6): turning on flush-on-commit [ 1049.118330][T13134] BTRFS info (device loop6): turning on async discard [ 1049.118344][T13134] BTRFS info (device loop6): enabling free space tree [ 1049.118358][T13134] BTRFS info (device loop6): enabling auto defrag [ 1049.118373][T13134] BTRFS info (device loop6): use lzo compression, level 1 [ 1049.118389][T13134] BTRFS info (device loop6): max_inline set to 4096 [ 1049.121272][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1050.084860][T12403] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1050.596470][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.596526][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.605610][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.708125][T12403] Flush: task=syz-executor[12403] dev=loop6 state=2 [ 1052.417613][T12403] Teardown: task=syz-executor[12403] dev=loop6 state=2 [ 1052.872367][ T1504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.872388][ T1504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.433656][T12633] veth0_vlan: entered promiscuous mode [ 1053.657831][T12712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.899767][T12633] veth1_vlan: entered promiscuous mode [ 1054.428048][T13206] loop6: detected capacity change from 0 to 4096 [ 1054.678872][T13212] loop2: detected capacity change from 0 to 256 [ 1054.691101][T13212] exfat: Unknown parameter '± [ 1054.691101][T13212] «|DÍ#çµïtüÄS  {vßäÙ§z¡øùRt¿ lÀÕ£›«Þ—d5ÔÃQð„Ô‰“'*Ü[ÐР iÆÁ(ÙàìUuµ'•»' [ 1054.691515][T13212] Flush: task=syz.2.1251[13212] dev=loop2 state=2 [ 1054.803396][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.803497][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.832340][T13212] Teardown: task=syz.2.1251[13212] dev=loop2 state=2 [ 1054.911235][T12633] veth0_macvtap: entered promiscuous mode [ 1054.996006][T12712] veth0_vlan: entered promiscuous mode [ 1055.102221][T12633] veth1_macvtap: entered promiscuous mode [ 1055.514013][T12712] veth1_vlan: entered promiscuous mode [ 1055.583925][T12633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.725381][T12633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.865775][T10676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.868133][T10676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.869647][T10676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.958137][T10676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.022247][T12712] veth0_macvtap: entered promiscuous mode [ 1057.211995][T12712] veth1_macvtap: entered promiscuous mode [ 1057.769707][ T5923] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1058.051899][T12737] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1058.069973][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 1058.108250][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.108305][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1058.108326][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.156742][ T5923] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1058.156772][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.156791][ T5923] usb 3-1: Product: syz [ 1058.156804][ T5923] usb 3-1: Manufacturer: syz [ 1058.156818][ T5923] usb 3-1: SerialNumber: syz [ 1058.201694][T12712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.225370][T12737] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.225392][T12737] usb 10-1: config 0 has no interface number 0 [ 1058.231109][ T5923] usb 3-1: config 0 descriptor?? [ 1058.257301][T12737] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1058.257330][T12737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.257349][T12737] usb 10-1: Product: syz [ 1058.257362][T12737] usb 10-1: Manufacturer: syz [ 1058.257377][T12737] usb 10-1: SerialNumber: syz [ 1058.335589][T12737] usb 10-1: config 0 descriptor?? [ 1058.368089][ T5923] radioshark 3-1:0.0: Invalid radioSHARK device [ 1058.368123][ T5923] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 1058.372671][T12712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.779152][ T5923] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1058.788429][T13230] loop2: detected capacity change from 0 to 1024 [ 1058.932707][T12737] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1059.480896][T10650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.480928][T10650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.482958][T10661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.484175][T10661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.487435][T10661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.487479][T10661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.604207][T12737] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1059.605412][T12403] Flush: task=syz-executor[12403] dev=loop6 state=2 [ 1059.630026][T12737] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1059.631304][T12737] usb 10-1: media controller created [ 1059.768333][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.768991][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.826296][T12737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1060.114727][T12403] Teardown: task=syz-executor[12403] dev=loop6 state=2 [ 1060.910258][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.910279][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.012143][T13230] hfsplus: failed to load catalog file [ 1061.168327][ T37] usb 3-1: USB disconnect, device number 11 [ 1061.418814][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1061.480322][T12737] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1061.801902][T10280] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1061.809687][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1061.943360][T10280] usb 7-1: device descriptor read/64, error -32 [ 1062.054786][T12737] usb 10-1: USB disconnect, device number 2 [ 1062.113675][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1062.386425][T10280] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1062.777337][T10280] usb 7-1: Using ep0 maxpacket: 32 [ 1063.196248][T13263] loop9: detected capacity change from 0 to 128 [ 1065.738038][T13263] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1065.921146][T10280] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1065.923362][T10280] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1065.923397][T10280] usb 7-1: can't read configurations, error -71 [ 1065.958603][T10280] usb usb7-port1: attempt power cycle [ 1066.156499][T13300] FAULT_INJECTION: forcing a failure. [ 1066.156499][T13300] name failslab, interval 1, probability 0, space 0, times 1 [ 1066.156523][T13300] CPU: 1 UID: 0 PID: 13300 Comm: syz.6.1259 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1066.156538][T13300] Tainted: [L]=SOFTLOCKUP [ 1066.156542][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.156549][T13300] Call Trace: [ 1066.156553][T13300] [ 1066.156558][T13300] dump_stack_lvl+0xe8/0x150 [ 1066.156579][T13300] should_fail_ex+0x467/0x600 [ 1066.156699][T13300] should_failslab+0xa8/0x100 [ 1066.156761][T13300] ? do_getname+0x2e/0x250 [ 1066.156794][T13300] kmem_cache_alloc_noprof+0x9e/0x680 [ 1066.156855][T13300] ? do_getname+0x2e/0x250 [ 1066.156868][T13300] do_getname+0x2e/0x250 [ 1066.156880][T13300] ? getname_flags+0x11/0x20 [ 1066.156894][T13300] do_sys_openat2+0xcc/0x200 [ 1066.156909][T13300] ? __pfx_do_sys_openat2+0x10/0x10 [ 1066.156923][T13300] ? ksys_write+0x248/0x270 [ 1066.156938][T13300] ? __pfx_ksys_write+0x10/0x10 [ 1066.156953][T13300] __x64_sys_openat+0x138/0x170 [ 1066.156967][T13300] do_syscall_64+0x17b/0x530 [ 1066.156983][T13300] ? irqentry_exit+0x10f/0x8f0 [ 1066.156996][T13300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.157007][T13300] ? clear_bhb_loop+0x40/0x90 [ 1066.157020][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.157030][T13300] RIP: 0033:0x7fe676e0e6ce [ 1066.157041][T13300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1066.157051][T13300] RSP: 002b:00007fe675084b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1066.157062][T13300] RAX: ffffffffffffffda RBX: 00007fe6750856c0 RCX: 00007fe676e0e6ce [ 1066.157070][T13300] RDX: 0000000000000081 RSI: 00007fe675084c00 RDI: ffffffffffffff9c [ 1066.157077][T13300] RBP: 00007fe675084c00 R08: 0000000000000000 R09: 0000000000000000 [ 1066.157084][T13300] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1066.157091][T13300] R13: 00007fe6770d6128 R14: 00007fe6770d6090 R15: 00007fff6309a1b8 [ 1066.157106][T13300] [ 1066.445279][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1066.555062][ T5592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1066.563901][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1066.567488][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1066.568313][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.620541][T13263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1067.552455][ T37] hid_parser_main: 30 callbacks suppressed [ 1067.552480][ T37] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1067.561832][ T37] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1067.822856][T13317] fido_id[13317]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1067.955623][T13323] loop6: detected capacity change from 0 to 128 [ 1067.961873][T13323] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1068.092193][T13247] Flush: task=udevd[13247] dev=loop6 state=2 [ 1068.148286][T13299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.148306][T13299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.178296][T12641] Flush: task=syz-executor[12641] dev=loop9 state=2 [ 1068.206049][T13247] Teardown: task=udevd[13247] dev=loop6 state=2 [ 1068.276486][T12641] Teardown: task=syz-executor[12641] dev=loop9 state=2 [ 1068.808612][ T37] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1068.928766][T13342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1263'. [ 1068.973571][ T37] usb 10-1: config 0 has an invalid interface number: 6 but max is 0 [ 1068.973597][ T37] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.973615][ T37] usb 10-1: config 0 has no interface number 0 [ 1068.973652][ T37] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1068.973679][ T37] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 204, setting to 64 [ 1068.975928][ T37] usb 10-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1068.975956][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.975976][ T37] usb 10-1: Product: syz [ 1068.975999][ T37] usb 10-1: Manufacturer: syz [ 1068.976013][ T37] usb 10-1: SerialNumber: syz [ 1069.004283][T13342] loop2: detected capacity change from 0 to 512 [ 1069.038448][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.039118][ T5592] Bluetooth: hci1: command tx timeout [ 1069.045841][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.106467][ T37] usb 10-1: config 0 descriptor?? [ 1069.107491][T13334] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1069.107678][T13334] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1069.249743][ T37] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1069.532952][ T37] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1069.629514][ T37] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1070.167853][T13297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.285692][T13357] tipc: Started in network mode [ 1070.285712][T13357] tipc: Node identity 4, cluster identity 4711 [ 1070.285724][T13357] tipc: Node number set to 4 [ 1070.566453][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1070.624246][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1070.643494][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1070.674622][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1070.675496][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1071.131186][ T5592] Bluetooth: hci1: command tx timeout [ 1071.733187][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1071.863163][T12392] usb 10-1: USB disconnect, device number 3 [ 1072.020508][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1072.257418][T13381] loop2: detected capacity change from 0 to 2048 [ 1072.342177][T13381] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1072.373008][T13381] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1072.373031][T13381] UDF-fs: Scanning with blocksize 512 failed [ 1072.715574][T13381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1073.040310][ T5592] Bluetooth: hci4: command tx timeout [ 1073.205563][ T5592] Bluetooth: hci1: command tx timeout [ 1073.234912][ T5730] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1073.481880][ T5730] usb 10-1: Using ep0 maxpacket: 32 [ 1073.506623][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1073.603970][T13297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.711274][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1075.135343][ T5592] Bluetooth: hci4: command tx timeout [ 1075.290857][ T61] Bluetooth: hci1: command tx timeout [ 1075.788372][T13403] loop2: detected capacity change from 0 to 32768 [ 1075.963930][ T5730] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1075.966780][ T5730] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1075.966814][ T5730] usb 10-1: can't read configurations, error -71 [ 1076.089733][T13403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1270 (13403) [ 1076.251069][T13403] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1076.251103][T13403] BTRFS info (device loop2): using sha256 checksum algorithm [ 1076.713406][T13403] BTRFS info (device loop2): enabling ssd optimizations [ 1076.713433][T13403] BTRFS info (device loop2): turning on sync discard [ 1076.713450][T13403] BTRFS info (device loop2): enabling free space tree [ 1077.237540][ T5592] Bluetooth: hci4: command tx timeout [ 1077.253565][T13435] loop9: detected capacity change from 0 to 1024 [ 1077.270954][T13435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1077.363531][T13437] ceph: No mds server is up or the cluster is laggy [ 1077.374243][ T9427] libceph: connect (1)[c::]:6789 error -101 [ 1077.374441][ T9427] libceph: mon0 (1)[c::]:6789 connect error [ 1077.427221][T13435] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 1077.427339][T13435] System zones: 0-1, 3-12 [ 1077.644852][T13435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.736962][T13297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.251392][ T823] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1078.463852][ T823] usb 10-1: Using ep0 maxpacket: 32 [ 1078.488670][ T823] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1078.488695][ T823] usb 10-1: config 0 has no interface number 0 [ 1078.488732][ T823] usb 10-1: config 0 interface 188 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 1078.488779][ T823] usb 10-1: config 0 interface 188 has no altsetting 0 [ 1078.536520][ T823] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1078.536548][ T823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.536566][ T823] usb 10-1: Product: syz [ 1078.536579][ T823] usb 10-1: Manufacturer: syz [ 1078.536592][ T823] usb 10-1: SerialNumber: syz [ 1078.657970][ T823] usb 10-1: config 0 descriptor?? [ 1078.692199][T12573] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1079.045033][ T823] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1079.298020][ T5592] Bluetooth: hci4: command tx timeout [ 1079.383183][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1079.384407][T13297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.579389][ T823] gspca_topro: reg_w err -110 [ 1079.587127][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1079.611495][ T823] gspca_topro: Sensor soi763a [ 1080.242946][T13453] loop6: detected capacity change from 0 to 256 [ 1080.480470][T13453] exfat: Deprecated parameter 'namecase' [ 1080.560087][T13453] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1080.615276][ T823] usb 10-1: USB disconnect, device number 6 [ 1080.861609][T12641] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.063148][T12641] Flush: task=syz-executor[12641] dev=loop9 state=2 [ 1081.265982][T12641] Teardown: task=syz-executor[12641] dev=loop9 state=2 [ 1081.445697][T12403] Flush: task=syz-executor[12403] dev=loop6 state=2 [ 1081.653462][T12403] Teardown: task=syz-executor[12403] dev=loop6 state=2 [ 1082.356032][T13480] FAULT_INJECTION: forcing a failure. [ 1082.356032][T13480] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.356095][T13480] CPU: 0 UID: 0 PID: 13480 Comm: syz.6.1277 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1082.356123][T13480] Tainted: [L]=SOFTLOCKUP [ 1082.356136][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1082.356149][T13480] Call Trace: [ 1082.356158][T13480] [ 1082.356168][T13480] dump_stack_lvl+0xe8/0x150 [ 1082.356205][T13480] should_fail_ex+0x467/0x600 [ 1082.356241][T13480] should_failslab+0xa8/0x100 [ 1082.356268][T13480] __kmalloc_cache_noprof+0xa1/0x670 [ 1082.356291][T13480] ? rdmacg_css_alloc+0x4e/0xc0 [ 1082.356408][T13480] ? rdmacg_css_alloc+0x4e/0xc0 [ 1082.356435][T13480] rdmacg_css_alloc+0x4e/0xc0 [ 1082.356458][T13480] cgroup_apply_control_enable+0x5b8/0xd40 [ 1082.356556][T13480] cgroup_apply_control+0x9b/0x730 [ 1082.356581][T13480] ? __pfx_cgroup_apply_control+0x10/0x10 [ 1082.356610][T13480] ? css_next_child+0xbc/0x220 [ 1082.356633][T13480] ? css_next_descendant_pre+0x18e/0x260 [ 1082.356662][T13480] ? cgroup_save_control+0x2db/0x350 [ 1082.356687][T13480] cgroup_subtree_control_write+0xa6a/0x1080 [ 1082.356724][T13480] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1082.356745][T13480] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1082.356768][T13480] ? cgroup_file_write+0x318/0x8f0 [ 1082.356804][T13480] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1082.356826][T13480] cgroup_file_write+0x331/0x8f0 [ 1082.356866][T13480] ? __pfx_cgroup_file_write+0x10/0x10 [ 1082.356913][T13480] ? __pfx_cgroup_file_write+0x10/0x10 [ 1082.356942][T13480] kernfs_fop_write_iter+0x3a5/0x540 [ 1082.356984][T13480] vfs_write+0x61e/0xbb0 [ 1082.357022][T13480] ? __pfx_vfs_write+0x10/0x10 [ 1082.357060][T13480] ? mutex_lock_nested+0x152/0x1d0 [ 1082.357084][T13480] ? fdget_pos+0x252/0x320 [ 1082.357148][T13480] ksys_write+0x156/0x270 [ 1082.357179][T13480] ? __pfx_ksys_write+0x10/0x10 [ 1082.357217][T13480] do_syscall_64+0x17b/0x530 [ 1082.357248][T13480] ? irqentry_exit+0x10f/0x8f0 [ 1082.357275][T13480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.357297][T13480] ? clear_bhb_loop+0x40/0x90 [ 1082.357323][T13480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.357349][T13480] RIP: 0033:0x7fe676e4de99 [ 1082.357369][T13480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.357386][T13480] RSP: 002b:00007fe675064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1082.357407][T13480] RAX: ffffffffffffffda RBX: 00007fe6770d6180 RCX: 00007fe676e4de99 [ 1082.357422][T13480] RDX: 000000000000000e RSI: 0000200000000140 RDI: 0000000000000008 [ 1082.357435][T13480] RBP: 00007fe675064090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.357448][T13480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.357460][T13480] R13: 00007fe6770d6218 R14: 00007fe6770d6180 R15: 00007fff6309a1b8 [ 1082.357494][T13480] [ 1083.060122][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 1083.060237][T13481] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1279'. [ 1083.728684][ T823] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1083.901197][ T823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1083.901235][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1083.901261][ T823] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1083.901293][ T823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.905707][ T823] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1083.905733][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.905750][ T823] usb 3-1: Product: syz [ 1083.905768][ T823] usb 3-1: Manufacturer: syz [ 1083.905781][ T823] usb 3-1: SerialNumber: syz [ 1084.013906][ T823] usb 3-1: config 0 descriptor?? [ 1084.093363][ T823] redrat3 3-1:0.0: Couldn't find all endpoints [ 1085.255243][ T5730] usb 3-1: USB disconnect, device number 12 [ 1085.707677][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.708091][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.708372][T13279] bridge_slave_0: entered allmulticast mode [ 1085.711859][T13279] bridge_slave_0: entered promiscuous mode [ 1085.741724][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.742061][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.742351][T13279] bridge_slave_1: entered allmulticast mode [ 1085.745921][T13279] bridge_slave_1: entered promiscuous mode [ 1085.903818][T13516] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 1086.588155][T13518] FAULT_INJECTION: forcing a failure. [ 1086.588155][T13518] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1086.588191][T13518] CPU: 0 UID: 0 PID: 13518 Comm: syz.9.1284 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1086.588218][T13518] Tainted: [L]=SOFTLOCKUP [ 1086.588225][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.588237][T13518] Call Trace: [ 1086.588245][T13518] [ 1086.588253][T13518] dump_stack_lvl+0xe8/0x150 [ 1086.588288][T13518] should_fail_ex+0x467/0x600 [ 1086.588322][T13518] _copy_to_user+0x31/0xb0 [ 1086.588430][T13518] simple_read_from_buffer+0xe1/0x170 [ 1086.588496][T13518] proc_fail_nth_read+0x1be/0x230 [ 1086.588557][T13518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1086.588583][T13518] ? rw_verify_area+0x250/0x4d0 [ 1086.588611][T13518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1086.588634][T13518] vfs_read+0x219/0xa90 [ 1086.588673][T13518] ? __pfx_vfs_read+0x10/0x10 [ 1086.588701][T13518] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1086.588731][T13518] ? lockdep_hardirqs_on+0x7a/0x110 [ 1086.588757][T13518] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1086.588784][T13518] ? mutex_lock_nested+0x152/0x1d0 [ 1086.588805][T13518] ? fdget_pos+0x252/0x320 [ 1086.588845][T13518] ksys_read+0x156/0x270 [ 1086.588873][T13518] ? __pfx_ksys_read+0x10/0x10 [ 1086.588908][T13518] do_syscall_64+0x17b/0x530 [ 1086.588935][T13518] ? irqentry_exit+0x10f/0x8f0 [ 1086.588961][T13518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.588982][T13518] ? clear_bhb_loop+0x40/0x90 [ 1086.589006][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.589025][T13518] RIP: 0033:0x7f0a1103e6ce [ 1086.589043][T13518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1086.589060][T13518] RSP: 002b:00007f0a0f2d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1086.589082][T13518] RAX: ffffffffffffffda RBX: 00007f0a0f2d66c0 RCX: 00007f0a1103e6ce [ 1086.589096][T13518] RDX: 000000000000000f RSI: 00007f0a0f2d60a0 RDI: 0000000000000003 [ 1086.589109][T13518] RBP: 00007f0a0f2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.589122][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.589133][T13518] R13: 00007f0a11306038 R14: 00007f0a11305fa0 R15: 00007fff1a8655c8 [ 1086.589166][T13518] [ 1086.669298][T13297] bridge_slave_1: left allmulticast mode [ 1086.669331][T13297] bridge_slave_1: left promiscuous mode [ 1086.669608][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.134739][T13297] bridge_slave_0: left allmulticast mode [ 1087.134770][T13297] bridge_slave_0: left promiscuous mode [ 1087.181531][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.305086][T13520] binder: 13519:13520 ioctl c0306201 200000000480 returned -14 [ 1089.550929][T13297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.630140][T13297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.650406][T13297] bond0 (unregistering): Released all slaves [ 1089.688973][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.688993][T13545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.714810][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.714827][T13545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.896970][T13279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.082156][T13543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1090.127633][T13279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.337990][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 1090.338023][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'. [ 1090.463109][T13359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.463498][T13359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.463767][T13359] bridge_slave_0: entered allmulticast mode [ 1090.466157][T13549] loop9: detected capacity change from 0 to 1024 [ 1090.467317][T13549] EXT4-fs: Ignoring removed i_version option [ 1090.467398][T13549] EXT4-fs: Ignoring removed bh option [ 1090.470072][T13549] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1090.537772][T13549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.568715][T13359] bridge_slave_0: entered promiscuous mode [ 1090.688056][T13359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.688347][T13359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.689150][T13359] bridge_slave_1: entered allmulticast mode [ 1090.748326][T13359] bridge_slave_1: entered promiscuous mode [ 1090.772353][T13279] team0: Port device team_slave_0 added [ 1090.974992][T13279] team0: Port device team_slave_1 added [ 1091.971125][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1294'. [ 1091.971147][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1294'. [ 1091.971171][T13562] netlink: 'syz.6.1294': attribute type 13 has an invalid length. [ 1091.971185][T13562] netlink: 'syz.6.1294': attribute type 14 has an invalid length. [ 1092.313833][T13359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.408685][T13567] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 1093.300778][T12641] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.443516][T12641] Flush: task=syz-executor[12641] dev=loop9 state=2 [ 1093.609941][T12641] Teardown: task=syz-executor[12641] dev=loop9 state=2 [ 1093.761277][T13359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.782393][T13279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.782409][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.782437][T13279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.957138][T13577] faux_driver vkms: [drm] Unknown color mode 262147; guessing buffer size. [ 1094.225693][T13279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.225703][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.225719][T13279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.290234][T13577] input: syz0 as /devices/virtual/input/input32 [ 1095.908796][T13359] team0: Port device team_slave_0 added [ 1095.981198][T13359] team0: Port device team_slave_1 added [ 1096.435694][T13359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.435706][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.435721][T13359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.539929][T13279] hsr_slave_0: entered promiscuous mode [ 1096.545815][T13279] hsr_slave_1: entered promiscuous mode [ 1096.563411][T13279] debugfs: 'hsr0' already exists in 'hsr' [ 1096.563439][T13279] Cannot create hsr debugfs directory [ 1096.596445][T13359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.596460][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.596484][T13359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.914745][T13297] hsr_slave_0: left promiscuous mode [ 1096.949745][T13297] hsr_slave_1: left promiscuous mode [ 1096.952268][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.952295][T13297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.989825][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.989852][T13297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.253600][T13297] veth1_macvtap: left promiscuous mode [ 1097.253716][T13297] veth0_macvtap: left promiscuous mode [ 1097.254020][T13297] veth1_vlan: left promiscuous mode [ 1097.255796][T13297] veth0_vlan: left promiscuous mode [ 1099.849429][T13297] team0 (unregistering): Port device team_slave_1 removed [ 1099.934405][T13297] team0 (unregistering): Port device team_slave_0 removed [ 1100.568688][ T200] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1100.738626][ T200] usb 7-1: Using ep0 maxpacket: 16 [ 1100.746581][ T200] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.746614][ T200] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1100.746648][ T200] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1100.746670][ T200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.792888][ T200] usb 7-1: config 0 descriptor?? [ 1101.235191][T13615] openvswitch: netlink: Tunnel attr 169 out of range max 16 [ 1101.594506][T13627] loop2: detected capacity change from 0 to 256 [ 1101.597543][T13627] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1101.661803][T13615] input: syz1 as /devices/virtual/input/input33 [ 1101.689920][T13359] hsr_slave_0: entered promiscuous mode [ 1101.753796][T13359] hsr_slave_1: entered promiscuous mode [ 1101.756488][T13359] debugfs: 'hsr0' already exists in 'hsr' [ 1101.756522][T13359] Cannot create hsr debugfs directory [ 1102.063642][T12394] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1102.208879][T12394] usb 3-1: Using ep0 maxpacket: 32 [ 1102.211559][T12394] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1102.214496][T12394] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1102.214523][T12394] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1102.214542][T12394] usb 3-1: Product: syz [ 1102.214557][T12394] usb 3-1: Manufacturer: syz [ 1102.214570][T12394] usb 3-1: SerialNumber: syz [ 1104.413637][T12394] usb 3-1: config 0 descriptor?? [ 1104.426690][T13627] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1104.449005][T12394] hub 3-1:0.0: bad descriptor, ignoring hub [ 1104.449044][T12394] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1104.865818][T12394] usb 3-1: USB disconnect, device number 13 [ 1105.134828][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1105.342025][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1105.597667][T13634] openvswitch: netlink: Missing valid actions attribute. [ 1105.597725][T13634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1106.080961][ T200] usbhid 7-1:0.0: can't add hid device: -32 [ 1106.236845][ T200] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1106.507718][ T823] usb 7-1: USB disconnect, device number 8 [ 1106.608000][T13639] netlink: del zone limit has 8 unknown bytes [ 1106.718950][ T200] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1106.918583][ T200] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.918640][ T200] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1106.918663][ T200] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.993190][ T200] usb 10-1: config 0 descriptor?? [ 1107.007845][ T200] pwc: Askey VC010 type 2 USB webcam detected. [ 1107.553702][ T200] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1107.594205][ T200] pwc: recv_control_msg error -32 req 02 val 2700 [ 1107.797958][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1311'. [ 1108.169938][ T5592] Bluetooth: hci2: command 0x0406 tx timeout [ 1108.386241][ T200] pwc: recv_control_msg error -71 req 04 val 1000 [ 1108.386763][ T200] pwc: recv_control_msg error -71 req 04 val 1300 [ 1108.387561][ T200] pwc: recv_control_msg error -71 req 04 val 1400 [ 1108.388164][ T200] pwc: recv_control_msg error -71 req 02 val 2000 [ 1108.388872][ T200] pwc: recv_control_msg error -71 req 02 val 2100 [ 1108.392558][ T200] pwc: recv_control_msg error -71 req 04 val 1500 [ 1108.434031][ T200] pwc: recv_control_msg error -71 req 02 val 2500 [ 1108.446832][ T200] pwc: recv_control_msg error -71 req 02 val 2400 [ 1108.449327][ T200] pwc: recv_control_msg error -71 req 02 val 2600 [ 1108.453245][ T200] pwc: recv_control_msg error -71 req 02 val 2900 [ 1108.453844][ T200] pwc: recv_control_msg error -71 req 02 val 2800 [ 1108.455994][ T200] pwc: recv_control_msg error -71 req 04 val 1100 [ 1108.456544][ T200] pwc: recv_control_msg error -71 req 04 val 1200 [ 1108.518902][ T200] pwc: Registered as video103. [ 1108.621642][ T200] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input34 [ 1108.761307][T13655] loop2: detected capacity change from 0 to 1024 [ 1108.938074][ T200] usb 10-1: USB disconnect, device number 7 [ 1109.223878][ T1504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.038574][T13659] loop9: detected capacity change from 0 to 512 [ 1110.092358][T13663] loop6: detected capacity change from 0 to 2048 [ 1110.246017][T13659] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 1110.326917][T13664] hfsplus: request for non-existent node 33423360 in B*Tree [ 1110.326937][T13664] hfsplus: request for non-existent node 33423360 in B*Tree [ 1110.521342][T13665] hfsplus: request for non-existent node 33423360 in B*Tree [ 1110.521363][T13665] hfsplus: request for non-existent node 33423360 in B*Tree [ 1110.553043][T13401] Flush: task=udevd[13401] dev=loop9 state=2 [ 1110.737829][T13401] Teardown: task=udevd[13401] dev=loop9 state=2 [ 1110.858347][T12403] Flush: task=syz-executor[12403] dev=loop6 state=2 [ 1111.027062][T12403] Teardown: task=syz-executor[12403] dev=loop6 state=2 [ 1111.091677][ T1504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.352972][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1111.662725][T13681] loop9: detected capacity change from 0 to 40427 [ 1111.668239][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1111.700152][T13681] F2FS-fs (loop9): build fault injection rate: 174 [ 1111.700175][T13681] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 1111.734947][T13681] F2FS-fs (loop9): invalid crc value [ 1111.830712][T13681] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1111.864008][T13681] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1111.984095][ T38] audit: type=1800 audit(1784461531.066:645): pid=13681 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.9.1324" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 1112.012202][T13681] netlink: 'syz.9.1324': attribute type 7 has an invalid length. [ 1112.012215][T13681] netlink: 'syz.9.1324': attribute type 5 has an invalid length. [ 1112.012223][T13681] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1324'. [ 1112.055476][T13681] F2FS-fs (loop9): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0 [ 1112.055545][T13681] F2FS-fs (loop9): inconsistent node block, node_type:1, nid:22, node_footer[nid:22,ino:22,ofs:0,cpver:0,blkaddr:0] [ 1112.059602][T13681] CPU: 0 UID: 0 PID: 13681 Comm: syz.9.1324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1112.059635][T13681] Tainted: [L]=SOFTLOCKUP [ 1112.059644][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1112.059657][T13681] Call Trace: [ 1112.059665][T13681] [ 1112.059674][T13681] dump_stack_lvl+0xe8/0x150 [ 1112.059711][T13681] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 1112.059745][T13681] f2fs_unlink+0x4a6/0xb00 [ 1112.059849][T13681] ? __pfx_f2fs_unlink+0x10/0x10 [ 1112.059889][T13681] ? try_break_deleg+0x5e/0x190 [ 1112.059922][T13681] vfs_unlink+0x27b/0x6e0 [ 1112.059950][T13681] ovl_cleanup+0x120/0x230 [ 1112.060043][T13681] ovl_fill_super+0x50b4/0x5d40 [ 1112.060147][T13681] ? __pfx_ovl_fill_super+0x10/0x10 [ 1112.060176][T13681] ? do_raw_spin_lock+0x12b/0x2f0 [ 1112.060212][T13681] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1112.060249][T13681] ? rt_mutex_slowunlock+0x219/0x460 [ 1112.060298][T13681] ? shrinker_register+0x158/0x210 [ 1112.060386][T13681] ? sget_fc+0x195c/0x1a60 [ 1112.060436][T13681] ? __pfx_ovl_next_opt+0x10/0x10 [ 1112.060460][T13681] ? rcu_is_watching+0x15/0xb0 [ 1112.060489][T13681] ? cap_capable+0x123/0x460 [ 1112.060581][T13681] ? __pfx_ovl_fill_super+0x10/0x10 [ 1112.060613][T13681] get_tree_nodev+0xbb/0x150 [ 1112.060645][T13681] vfs_get_tree+0x92/0x2a0 [ 1112.060677][T13681] do_new_mount+0x319/0xdc0 [ 1112.060700][T13681] ? cap_capable+0x123/0x460 [ 1112.060733][T13681] ? __pfx_do_new_mount+0x10/0x10 [ 1112.060761][T13681] ? ns_capable+0x89/0xe0 [ 1112.060825][T13681] ? path_mount+0x647/0x1050 [ 1112.060852][T13681] ? user_path_at+0xd4/0x160 [ 1112.060881][T13681] __se_sys_mount+0x31d/0x420 [ 1112.060914][T13681] ? __pfx___se_sys_mount+0x10/0x10 [ 1112.060944][T13681] ? __x64_sys_mount+0x20/0xc0 [ 1112.060972][T13681] do_syscall_64+0x17b/0x530 [ 1112.061003][T13681] ? irqentry_exit+0x10f/0x8f0 [ 1112.061031][T13681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.061052][T13681] ? clear_bhb_loop+0x40/0x90 [ 1112.061078][T13681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.061098][T13681] RIP: 0033:0x7f0a1107de99 [ 1112.061120][T13681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.061138][T13681] RSP: 002b:00007f0a0f2d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.061161][T13681] RAX: ffffffffffffffda RBX: 00007f0a11305fa0 RCX: 00007f0a1107de99 [ 1112.061177][T13681] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 1112.061192][T13681] RBP: 00007f0a11113eaf R08: 0000200000000240 R09: 0000000000000000 [ 1112.061206][T13681] R10: 0000000001000008 R11: 0000000000000246 R12: 0000000000000000 [ 1112.061220][T13681] R13: 00007f0a11306038 R14: 00007f0a11305fa0 R15: 00007fff1a8655c8 [ 1112.061257][T13681] [ 1112.061267][T13681] F2FS-fs (loop9): Stopped filesystem due to reason: 5 [ 1112.061359][T13681] overlayfs: failed to set xattr on upper [ 1112.061367][T13681] overlayfs: ...falling back to redirect_dir=nofollow. [ 1112.061377][T13681] overlayfs: ...falling back to index=off. [ 1112.162457][ T200] F2FS-fs (loop9): f2fs_evict_inode: inconsistent node id, ino:22 [ 1112.293712][T12641] do_umount: task=syz-executor[12641] propagate_mount_busy()!=0 [ 1112.293953][T12641] do_umount: task=syz-executor[12641] propagate_mount_busy()!=0 [ 1112.570180][T12641] syz-executor: attempt to access beyond end of device [ 1112.570180][T12641] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1112.570487][T12641] syz-executor: attempt to access beyond end of device [ 1112.570487][T12641] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1112.571558][T12641] do_umount: task=syz-executor[12641] propagate_mount_busy()!=0 [ 1112.616023][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1328'. [ 1112.633881][T13694] loop6: detected capacity change from 0 to 512 [ 1112.746388][T13694] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1112.791272][T13694] EXT4-fs (loop6): 1 truncate cleaned up [ 1112.794395][T13694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.951618][T12403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.076855][T12403] Flush: task=syz-executor[12403] dev=loop6 state=2 [ 1113.126899][ T1504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.180738][T12403] Teardown: task=syz-executor[12403] dev=loop6 state=2 [ 1113.503996][T13710] loop6: detected capacity change from 0 to 512 [ 1113.565127][T13710] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1113.582034][T13710] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1332: bg 0: block 63: padding at end of block bitmap is not set [ 1113.582067][T13710] loop6: lost filesystem error report for type 5 error -117 [ 1113.583790][T13710] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.1332: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1113.583824][T13710] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1113.588543][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1113.588566][ C1] EXT4-fs (loop6): initial error at time 1784461532: ext4_validate_block_bitmap:441 [ 1113.588590][ C1] EXT4-fs (loop6): last error at time 1784461532: ext4_xattr_inode_update_ref:1037: inode 11 [ 1113.729438][T13710] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.1332: ea_inode dec ref err=-117 [ 1113.729755][T13710] EXT4-fs (loop6): 1 orphan inode deleted [ 1113.731304][T13710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1114.020198][T12403] do_umount: task=syz-executor[12403] propagate_mount_busy()!=0 [ 1114.020341][T12403] do_umount: task=syz-executor[12403] propagate_mount_busy()!=0 [ 1114.021021][T12403] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1114.027896][T12403] EXT4-fs error (device loop6): ext4_lookup:1785: inode #11: comm syz-executor: unexpected EA_INODE flag [ 1114.192223][T12403] EXT4-fs error (device loop6): ext4_lookup:1785: inode #11: comm syz-executor: unexpected EA_INODE flag [ 1114.351665][ T1504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.835289][T13719] netlink: 'syz.2.1334': attribute type 4 has an invalid length. [ 1115.411187][T13714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.491280][T13726] loop2: detected capacity change from 0 to 512 [ 1115.547647][T13726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1115.869745][T13726] EXT4-fs (loop2): 1 truncate cleaned up [ 1115.878962][T13726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.998404][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1116.066649][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1116.101799][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1116.104981][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1116.105824][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1116.265000][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.265097][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.400341][T13737] tls_set_device_offload: netdev not found [ 1116.956662][T13726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.073812][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1117.255363][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1117.299947][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1117.376201][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1117.381289][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1117.404884][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1117.422234][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1118.372759][ T9501] Bluetooth: hci3: command 0x0406 tx timeout [ 1118.470913][ T1504] bridge_slave_1: left allmulticast mode [ 1118.470949][ T1504] bridge_slave_1: left promiscuous mode [ 1118.471235][ T1504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.591417][T13776] IPv6: NLM_F_CREATE should be specified when creating new route [ 1118.690384][ T1504] bridge_slave_0: left allmulticast mode [ 1118.690421][ T1504] bridge_slave_0: left promiscuous mode [ 1118.690850][ T1504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.802384][ T5592] Bluetooth: hci0: command tx timeout [ 1119.598818][ T5592] Bluetooth: hci2: command tx timeout [ 1119.670788][ T1504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.700705][T13790] loop2: detected capacity change from 0 to 764 [ 1119.746847][T13790] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1119.770383][ T1504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.812415][ T1504] bond0 (unregistering): Released all slaves [ 1119.889395][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1120.455524][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1120.549301][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1120.889050][ T5592] Bluetooth: hci0: command tx timeout [ 1121.678745][ T5592] Bluetooth: hci2: command tx timeout [ 1122.928685][ T1504] hsr_slave_0: left promiscuous mode [ 1122.968707][ T5592] Bluetooth: hci0: command tx timeout [ 1122.969370][ T1504] hsr_slave_1: left promiscuous mode [ 1122.987933][ T1504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.987959][ T1504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.019412][ T1504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.019430][ T1504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.110267][ T1504] veth1_macvtap: left promiscuous mode [ 1123.110376][ T1504] veth0_macvtap: left promiscuous mode [ 1123.110604][ T1504] veth1_vlan: left promiscuous mode [ 1123.110729][ T1504] veth0_vlan: left promiscuous mode [ 1123.770644][ T5592] Bluetooth: hci2: command tx timeout [ 1123.917294][ T9501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1123.956723][ T9501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1123.990879][ T9501] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1123.998347][ T9501] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1124.016202][ T9501] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1124.112631][ T1504] team0 (unregistering): Port device team_slave_1 removed [ 1124.279322][ T1504] team0 (unregistering): Port device team_slave_0 removed [ 1124.345998][T13848] loop2: detected capacity change from 0 to 4096 [ 1124.361385][T13848] EXT4-fs: quotafile must be on filesystem root [ 1124.845818][T13401] Flush: task=udevd[13401] dev=loop2 state=2 [ 1124.921173][T13401] Teardown: task=udevd[13401] dev=loop2 state=2 [ 1125.039031][ T9501] Bluetooth: hci0: command tx timeout [ 1125.579523][T13736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.579876][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.580154][T13736] bridge_slave_0: entered allmulticast mode [ 1125.583579][T13736] bridge_slave_0: entered promiscuous mode [ 1125.626543][T13736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.626915][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.627189][T13736] bridge_slave_1: entered allmulticast mode [ 1125.658735][T13736] bridge_slave_1: entered promiscuous mode [ 1125.853149][ T9501] Bluetooth: hci2: command tx timeout [ 1126.054543][T13736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.237120][T13736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.336697][ T9501] Bluetooth: hci5: command tx timeout [ 1126.564070][T13857] loop2: detected capacity change from 0 to 32768 [ 1126.646603][T13857] btrfs: Deprecated parameter 'usebackuproot' [ 1126.646624][T13857] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1126.661578][T13857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1350 (13857) [ 1126.782447][T13857] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1126.782482][T13857] BTRFS info (device loop2): using crc32c checksum algorithm [ 1127.091987][T13299] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1127.106497][T13857] BTRFS error (device loop2): failed to load root extent [ 1127.106527][T13857] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1127.108395][T13299] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1127.148652][T13857] BTRFS warning (device loop2): couldn't read tree root [ 1127.148677][T13857] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1127.149022][T13297] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1127.149147][T13857] BTRFS warning (device loop2): couldn't read tree root [ 1127.149165][T13857] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1127.336158][T13857] BTRFS info (device loop2): rebuilding free space tree [ 1127.404895][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.405201][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.405499][T13749] bridge_slave_0: entered allmulticast mode [ 1127.438823][T13749] bridge_slave_0: entered promiscuous mode [ 1127.456654][T13736] team0: Port device team_slave_0 added [ 1127.499756][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.500111][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.500407][T13749] bridge_slave_1: entered allmulticast mode [ 1127.513866][T13749] bridge_slave_1: entered promiscuous mode [ 1127.568084][T13736] team0: Port device team_slave_1 added [ 1127.611141][T13857] BTRFS info (device loop2): disabling free space tree [ 1127.611222][T13857] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1127.611247][T13857] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1127.832145][T13857] BTRFS info (device loop2): checking UUID tree [ 1127.832657][T13857] BTRFS info (device loop2): enabling ssd optimizations [ 1127.832679][T13857] BTRFS info (device loop2): turning on async discard [ 1127.832697][T13857] BTRFS info (device loop2): force clearing of disk cache [ 1127.832714][T13857] BTRFS info (device loop2): enabling auto defrag [ 1127.832731][T13857] BTRFS info (device loop2): trying to use backup root at mount time [ 1127.832749][T13857] BTRFS info (device loop2): use zstd compression, level 3 [ 1128.238908][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.255668][T13736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.255684][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.255710][T13736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.409232][ T9501] Bluetooth: hci5: command tx timeout [ 1128.431046][T12573] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1128.661199][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1128.844057][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1128.946286][ T1504] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.151294][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.154753][T13736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.154767][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.154790][T13736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.595097][ T5890] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1129.778794][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 1129.785525][ T5890] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1129.787635][ T5890] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1129.787664][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.787677][ T5890] usb 3-1: Product: syz [ 1129.787684][ T5890] usb 3-1: Manufacturer: syz [ 1129.787692][ T5890] usb 3-1: SerialNumber: syz [ 1129.865726][ T5890] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1129.865754][ T5890] r8152-cfgselector 3-1: config 0 descriptor?? [ 1130.413677][ T1504] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.514679][ T61] Bluetooth: hci5: command tx timeout [ 1130.584437][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1130.668786][ T5592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1130.672075][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1130.673950][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1130.685724][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1130.836350][T13749] team0: Port device team_slave_0 added [ 1131.190533][ T5890] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1131.190897][ T5890] r8152-cfgselector 3-1: No union descriptors [ 1131.220504][ T5890] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 1131.227537][T13401] udevd[13401]: setting owner of /dev/bus/usb/003/014 to uid=0, gid=0 failed: No such file or directory [ 1131.291425][T13942] loop2: detected capacity change from 0 to 512 [ 1131.294994][T13942] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1131.328792][T13942] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1352: inode has both inline data and extents flags [ 1131.328824][T13942] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1131.338551][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1131.338574][ C0] EXT4-fs (loop2): initial error at time 1784461550: ext4_orphan_get:1399: inode 15 [ 1131.338605][ C0] EXT4-fs (loop2): last error at time 1784461550: ext4_orphan_get:1399: inode 15 [ 1131.341895][T13942] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1352: couldn't read orphan inode 15 (err -117) [ 1131.341924][T13942] loop2: lost filesystem error report for type 5 error -117 [ 1131.361563][T13942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.390728][T13749] team0: Port device team_slave_1 added [ 1131.415501][T13942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 1132.326843][T13942] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1132.347935][T13736] hsr_slave_0: entered promiscuous mode [ 1132.354014][T13736] hsr_slave_1: entered promiscuous mode [ 1132.357225][T13736] debugfs: 'hsr0' already exists in 'hsr' [ 1132.357250][T13736] Cannot create hsr debugfs directory [ 1132.548111][T12573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.602930][ T5592] Bluetooth: hci5: command tx timeout [ 1132.618809][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1132.663819][ T1504] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.710319][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1132.718654][ T5592] Bluetooth: hci1: command tx timeout [ 1132.765092][T13953] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1353'. [ 1132.953392][T13953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1353'. [ 1132.993307][T13749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.993325][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.993351][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.082091][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.082108][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.082134][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.514651][ T1504] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.921691][T13980] loop2: detected capacity change from 0 to 1024 [ 1133.924094][T13980] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1134.040742][T13980] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.1355: lblock 2 mapped to illegal pblock 2 (length 1) [ 1134.040789][T13980] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1134.044471][T13980] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1134.044523][T13980] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.1355: lblock 0 mapped to illegal pblock 48 (length 1) [ 1134.044555][T13980] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1134.046287][T13980] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1134.046311][T13980] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1355: Failed to acquire dquot type 0 [ 1134.046333][T13980] loop2: lost filesystem error report for type 5 error -117 [ 1134.046657][T13980] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1134.046677][T13980] loop2: lost filesystem error report for type 5 error -117 [ 1134.047007][T13980] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.1355: mark_inode_dirty error [ 1134.047034][T13980] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1134.047273][T13980] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1134.047361][T13980] EXT4-fs (loop2): 1 orphan inode deleted [ 1134.132178][T13299] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 1134.132216][T13299] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1134.132649][T13299] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1134.132686][T13299] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:29: Failed to release dquot type 0 [ 1134.132707][T13299] loop2: lost filesystem error report for type 5 error -117 [ 1134.239260][T13980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.528691][T13994] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1134.635718][T13980] xfrm1: entered allmulticast mode [ 1134.685605][T13749] hsr_slave_0: entered promiscuous mode [ 1134.689115][T13749] hsr_slave_1: entered promiscuous mode [ 1134.699653][T13749] debugfs: 'hsr0' already exists in 'hsr' [ 1134.699679][T13749] Cannot create hsr debugfs directory [ 1134.801155][ T5592] Bluetooth: hci1: command tx timeout [ 1134.900162][T12573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.962879][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1135.089385][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1136.533659][T13844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.533963][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.534216][T13844] bridge_slave_0: entered allmulticast mode [ 1136.563783][T13844] bridge_slave_0: entered promiscuous mode [ 1136.853010][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.853316][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.853917][T13844] bridge_slave_1: entered allmulticast mode [ 1136.863096][T13844] bridge_slave_1: entered promiscuous mode [ 1136.881312][ T5592] Bluetooth: hci1: command tx timeout [ 1137.803824][T14040] loop2: detected capacity change from 0 to 32768 [ 1137.806921][T14040] btrfs: Deprecated parameter 'usebackuproot' [ 1137.806941][T14040] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1137.807630][T14040] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1358 (14040) [ 1138.003071][T14040] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1138.003103][T14040] BTRFS info (device loop2): using crc32c checksum algorithm [ 1138.007100][T13844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.101985][T10663] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1138.102124][T14040] BTRFS error (device loop2): failed to load root extent [ 1138.102162][T14040] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1138.102509][T10663] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1138.102624][T14040] BTRFS warning (device loop2): couldn't read tree root [ 1138.102642][T14040] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1138.103003][T10663] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1138.103551][T14040] BTRFS warning (device loop2): couldn't read tree root [ 1138.103572][T14040] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1138.257864][T14040] BTRFS info (device loop2): rebuilding free space tree [ 1138.567488][T14040] BTRFS info (device loop2): disabling free space tree [ 1138.567570][T14040] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1138.567595][T14040] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1138.624157][T14040] BTRFS info (device loop2): checking UUID tree [ 1138.626538][T14040] BTRFS info (device loop2): enabling ssd optimizations [ 1138.626562][T14040] BTRFS info (device loop2): turning on async discard [ 1138.626578][T14040] BTRFS info (device loop2): force clearing of disk cache [ 1138.626593][T14040] BTRFS info (device loop2): enabling auto defrag [ 1138.626608][T14040] BTRFS info (device loop2): trying to use backup root at mount time [ 1138.626626][T14040] BTRFS info (device loop2): use zstd compression, level 3 [ 1138.765574][T13844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.885425][ T38] audit: type=1800 audit(1784461557.966:646): pid=14040 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.2.1358" name="file1" dev="loop2" ino=257 res=0 errno=0 [ 1138.962028][ T5592] Bluetooth: hci1: command tx timeout [ 1139.167242][T12573] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1139.216259][ T1504] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.394380][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1139.508985][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1139.665336][T14067] loop2: detected capacity change from 0 to 128 [ 1140.032568][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1140.168804][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1140.185456][T13844] team0: Port device team_slave_0 added [ 1140.263412][T14069] loop2: detected capacity change from 0 to 512 [ 1140.266834][T14069] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1140.331585][T14069] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1360: inode has both inline data and extents flags [ 1140.331621][T14069] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1140.331941][T14069] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1360: couldn't read orphan inode 15 (err -117) [ 1140.331959][T14069] loop2: lost filesystem error report for type 5 error -117 [ 1140.336288][T14069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.354230][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 1140.621817][ T1504] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.664786][T13844] team0: Port device team_slave_1 added [ 1140.708592][T14069] bond2: option resend_igmp: invalid value (1869152767) [ 1140.708617][T14069] bond2: option resend_igmp: allowed values 0 - 255 [ 1140.744176][T14069] bond2 (unregistering): Released all slaves [ 1141.164298][T13844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.164315][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.164341][T13844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.252253][T12573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.315037][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1141.398597][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1141.432455][ T1504] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.514741][T13844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.514752][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.514766][T13844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.910850][ T1504] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.973012][T13844] hsr_slave_0: entered promiscuous mode [ 1141.974250][T13844] hsr_slave_1: entered promiscuous mode [ 1141.975729][T13844] debugfs: 'hsr0' already exists in 'hsr' [ 1141.975753][T13844] Cannot create hsr debugfs directory [ 1142.780126][T13930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.780441][T13930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.780729][T13930] bridge_slave_0: entered allmulticast mode [ 1142.783402][T13930] bridge_slave_0: entered promiscuous mode [ 1142.833188][T13930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.833594][T13930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.833872][T13930] bridge_slave_1: entered allmulticast mode [ 1142.837028][T13930] bridge_slave_1: entered promiscuous mode [ 1143.274084][T13930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.332360][T13930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.442046][T13930] team0: Port device team_slave_0 added [ 1143.463843][T13930] team0: Port device team_slave_1 added [ 1143.569234][T13930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.569246][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.569260][T13930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.571350][T13930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.571361][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.571376][T13930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.743609][ T1504] bridge_slave_1: left allmulticast mode [ 1143.743632][ T1504] bridge_slave_1: left promiscuous mode [ 1143.743817][ T1504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.899450][ T1504] bridge_slave_0: left allmulticast mode [ 1143.899472][ T1504] bridge_slave_0: left promiscuous mode [ 1143.899644][ T1504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.178919][ T1504] bridge_slave_1: left allmulticast mode [ 1144.178944][ T1504] bridge_slave_1: left promiscuous mode [ 1144.179153][ T1504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.279641][ T1504] bridge_slave_0: left allmulticast mode [ 1144.279665][ T1504] bridge_slave_0: left promiscuous mode [ 1144.279853][ T1504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.507970][T14104] usb usb8: usbfs: process 14104 (syz.2.1364) did not claim interface 0 before use [ 1145.550588][ T1504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.629381][ T1504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.670914][ T1504] bond0 (unregistering): Released all slaves [ 1146.389246][ T1504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.408619][T10333] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1146.449168][ T1504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.490639][ T1504] bond0 (unregistering): Released all slaves [ 1146.555877][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1146.562682][T10333] usb 3-1: Using ep0 maxpacket: 16 [ 1146.575317][T10333] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 1146.575355][T10333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.575374][T10333] usb 3-1: config 0 has no interface number 0 [ 1146.575418][T10333] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1146.575450][T10333] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1146.575473][T10333] usb 3-1: config 0 interface 98 has no altsetting 0 [ 1146.619981][T10333] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1146.620010][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.620030][T10333] usb 3-1: Product: syz [ 1146.620044][T10333] usb 3-1: Manufacturer: syz [ 1146.620058][T10333] usb 3-1: SerialNumber: syz [ 1146.705566][T10333] usb 3-1: config 0 descriptor?? [ 1146.706343][T14113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1146.706462][T14113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1146.823004][T13930] hsr_slave_0: entered promiscuous mode [ 1146.827386][T13930] hsr_slave_1: entered promiscuous mode [ 1146.829861][T13930] debugfs: 'hsr0' already exists in 'hsr' [ 1146.829886][T13930] Cannot create hsr debugfs directory [ 1146.916981][T14113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1146.917090][T14113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1147.337321][T14116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.338387][T14116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.372014][ T1504] tipc: Left network mode [ 1147.395308][T10333] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1147.395421][T10333] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1147.395727][T10333] asix 3-1:0.98: probe with driver asix failed with error -71 [ 1147.415716][T10333] usb 3-1: USB disconnect, device number 15 [ 1147.583079][T14119] loop2: detected capacity change from 0 to 512 [ 1147.597617][T14119] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1147.678281][T14119] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1368: inode has both inline data and extents flags [ 1147.678315][T14119] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1147.688815][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1147.688835][ C0] EXT4-fs (loop2): initial error at time 1784461566: ext4_orphan_get:1399: inode 15 [ 1147.688858][ C0] EXT4-fs (loop2): last error at time 1784461566: ext4_orphan_get:1399: inode 15 [ 1147.719035][T14119] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1368: couldn't read orphan inode 15 (err -117) [ 1147.719068][T14119] loop2: lost filesystem error report for type 5 error -117 [ 1147.727230][T14119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.761933][T14119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1368'. [ 1147.987977][T14119] bond2: option resend_igmp: invalid value (1869152767) [ 1147.988003][T14119] bond2: option resend_igmp: allowed values 0 - 255 [ 1148.095289][T14119] bond2 (unregistering): Released all slaves [ 1148.583072][T12573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.711378][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1148.799379][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1148.907372][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1149.304537][T14146] loop2: detected capacity change from 0 to 1024 [ 1149.349144][T14146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.579959][T14146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1371'. [ 1149.767693][T12573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.868654][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1149.981532][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1150.850718][ T5250] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1151.048707][T13736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1151.085601][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.105520][T14174] loop2: detected capacity change from 0 to 512 [ 1152.142702][T14174] EXT4-fs error (device loop2): __ext4_iget:5533: inode #11: block 1: comm syz.2.1374: invalid block [ 1152.142735][T14174] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1152.146429][T14174] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1374: couldn't read orphan inode 11 (err -117) [ 1152.146461][T14174] loop2: lost filesystem error report for type 5 error -117 [ 1152.149132][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 1152.149152][ C0] EXT4-fs (loop2): initial error at time 1784461571: __ext4_iget:5533: inode 11: block 1 [ 1152.149186][ C0] EXT4-fs (loop2): last error at time 1784461571: ext4_orphan_get:1404 [ 1152.219757][T14174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1152.222205][T13736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1152.249621][T14174] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #2: comm syz.2.1374: Directory hole found for htree leaf block 0 [ 1152.290856][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1152.448736][T14176] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1152.550086][T13736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1152.591889][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1152.644030][T13736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1152.698425][T12573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.705014][T12573] Flush: task=syz-executor[12573] dev=loop2 state=2 [ 1152.714157][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1152.819351][T12573] Teardown: task=syz-executor[12573] dev=loop2 state=2 [ 1152.871003][T14185] IPv6: addrconf: prefix option has invalid lifetime [ 1152.891492][T14185] loop2: detected capacity change from 0 to 2048 [ 1152.892469][T14185] udf: Unknown parameter 'sec [ 1152.892469][T14185] stack depth 0 max 0 [ 1152.892469][T14185] insns processed 2 [ 1152.892469][T14185] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 1152.892469][T14185] ' [ 1153.036687][T13401] Flush: task=udevd[13401] dev=loop2 state=2 [ 1153.046580][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 1153.088641][ T1504] hsr_slave_0: left promiscuous mode [ 1153.248630][T13401] Teardown: task=udevd[13401] dev=loop2 state=2 [ 1153.259330][ T1504] hsr_slave_1: left promiscuous mode [ 1153.262663][ T1504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.262689][ T1504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.299481][ T1504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.299499][ T1504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.458656][ T1504] hsr_slave_0: left promiscuous mode [ 1153.498649][ T1504] hsr_slave_1: left promiscuous mode [ 1153.577409][ T1504] veth1_macvtap: left promiscuous mode [ 1153.577509][ T1504] veth0_macvtap: left promiscuous mode [ 1153.577841][ T1504] veth1_vlan: left promiscuous mode [ 1153.577958][ T1504] veth0_vlan: left promiscuous mode [ 1153.698771][ T1504] veth1_macvtap: left promiscuous mode [ 1153.698832][ T1504] veth0_macvtap: left promiscuous mode [ 1153.699010][ T1504] veth1_vlan: left promiscuous mode [ 1153.699129][ T1504] veth0_vlan: left promiscuous mode [ 1154.479173][ T1504] team0 (unregistering): Port device team_slave_1 removed [ 1154.519197][ T1504] team0 (unregistering): Port device team_slave_0 removed [ 1155.129353][ T1504] team0 (unregistering): Port device team_slave_1 removed [ 1155.169059][ T1504] team0 (unregistering): Port device team_slave_0 removed [ 1155.347372][T14187] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1155.703098][T14196] usb usb9: usbfs: process 14196 (syz.2.1378) did not claim interface 0 before use [ 1155.794505][T14198] loop2: detected capacity change from 0 to 2048 [ 1155.967629][T14198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.125483][T14196] [ 1156.125497][T14196] ====================================================== [ 1156.125507][T14196] WARNING: possible circular locking dependency detected [ 1156.125525][T14196] syzkaller #0 Tainted: G L [ 1156.125538][T14196] ------------------------------------------------------ [ 1156.125546][T14196] syz.2.1378/14196 is trying to acquire lock: [ 1156.125559][T14196] ffff88806d70eb50 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1156.125724][T14196] [ 1156.125724][T14196] but task is already holding lock: [ 1156.125732][T14196] ffff888038430cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1156.125779][T14196] [ 1156.125779][T14196] which lock already depends on the new lock. [ 1156.125779][T14196] [ 1156.125787][T14196] [ 1156.125787][T14196] the existing dependency chain (in reverse order) is: [ 1156.125795][T14196] [ 1156.125795][T14196] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1156.125822][T14196] percpu_down_read_internal+0x48/0x1d0 [ 1156.125843][T14196] ext4_writepages+0x205/0x3b0 [ 1156.125864][T14196] do_writepages+0x338/0x560 [ 1156.125887][T14196] __writeback_single_inode+0x12e/0xf90 [ 1156.125911][T14196] writeback_single_inode+0x4dd/0xe10 [ 1156.125929][T14196] write_inode_now+0x1c2/0x290 [ 1156.125946][T14196] iput+0x98b/0xf00 [ 1156.125966][T14196] ext4_xattr_block_set+0x22e4/0x2a80 [ 1156.126029][T14196] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 1156.126051][T14196] __ext4_expand_extra_isize+0x30d/0x400 [ 1156.126071][T14196] __ext4_mark_inode_dirty+0x455/0x700 [ 1156.126097][T14196] ext4_evict_inode+0x976/0x10c0 [ 1156.126129][T14196] evict+0x624/0xb50 [ 1156.126156][T14196] ext4_orphan_cleanup+0xc7a/0x14c0 [ 1156.126182][T14196] ext4_fill_super+0x5cc5/0x65d0 [ 1156.126230][T14196] get_tree_bdev_flags+0x430/0x4f0 [ 1156.126258][T14196] vfs_get_tree+0x92/0x2a0 [ 1156.126283][T14196] do_new_mount+0x319/0xdc0 [ 1156.126304][T14196] __se_sys_mount+0x31d/0x420 [ 1156.126325][T14196] do_syscall_64+0x17b/0x530 [ 1156.126353][T14196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.126373][T14196] [ 1156.126373][T14196] -> #0 (&ei->xattr_sem){++++}-{4:4} [ 1156.126387][T14205] ------------[ cut here ]------------ [ 1156.126397][T14196] : [ 1156.126400][T14205] mas->ld_seq != lock_sequence(map) [ 1156.126403][T14196] __lock_acquire+0x15ff/0x2e40 [ 1156.126425][T14196] lock_acquire+0x115/0x350 [ 1156.126442][T14196] down_write+0x3a/0x50 [ 1156.126459][T14196] ext4_destroy_inline_data+0x28/0xe0 [ 1156.126412][T14205] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#1: sed/14205 [ 1156.126482][T14196] ext4_do_writepages+0x576/0x47a0 [ 1156.126500][T14205] Modules linked in: [ 1156.126509][T14196] ext4_writepages+0x241/0x3b0 [ 1156.126525][T14205] CPU: 1 UID: 0 PID: 14205 Comm: sed Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1156.126529][T14196] do_writepages+0x338/0x560 [ 1156.126552][T14205] Tainted: [L]=SOFTLOCKUP [ 1156.126559][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1156.126569][T14205] RIP: 0010:mas_find+0xa02/0xca0 [ 1156.126552][T14196] file_write_and_wait_range+0x374/0x440 [ 1156.126596][T14205] Code: 74 08 4c 89 f7 e8 5e b9 f2 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b 61 86 f6 31 c0 e9 0a fd ff ff e8 6f 61 86 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 61 86 f6 31 c0 e9 f0 fc ff ff e8 55 [ 1156.126624][T14205] RSP: 0018:ffffc90005067778 EFLAGS: 00010293 [ 1156.126641][T14205] RAX: ffffffff8b3f2241 RBX: 1ffff92000a0cf29 RCX: ffff888032d15dc0 [ 1156.126656][T14205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.126669][T14205] RBP: 0000000000000037 R08: 0000000000000000 R09: 0000000000000000 [ 1156.126624][T14196] mmb_fsync_noflush+0x76/0x1d0 [ 1156.126681][T14205] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: 00000000ffffffff [ 1156.126695][T14205] R13: ffffc90005067954 R14: ffffc90005067900 R15: ffffc90005067948 [ 1156.126698][T14196] ext4_sync_file+0x423/0xd10 [ 1156.126710][T14205] FS: 0000000000000000(0000) GS:ffff888125d3c000(0000) knlGS:0000000000000000 [ 1156.126726][T14205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1156.126739][T14205] CR2: 00007f9002489286 CR3: 0000000045508000 CR4: 00000000003526f0 [ 1156.126716][T14196] ext4_buffered_write_iter+0x2ca/0x370 [ 1156.126758][T14205] Call Trace: [ 1156.126766][T14205] [ 1156.126775][T14196] ext4_file_write_iter+0x94b/0x1c90 [ 1156.126798][T14196] do_iter_readv_writev+0x624/0x8d0 [ 1156.126823][T14196] vfs_writev+0x34c/0x990 [ 1156.126778][T14205] tear_down_vmas+0x339/0x520 [ 1156.126841][T14196] __se_sys_pwritev2+0x17a/0x2a0 [ 1156.126862][T14205] exit_mmap+0x4ca/0x9f0 [ 1156.126868][T14196] do_syscall_64+0x17b/0x530 [ 1156.126889][T14205] ? __pfx_exit_mmap+0x10/0x10 [ 1156.126896][T14196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.126906][T14205] ? do_raw_spin_lock+0x12b/0x2f0 [ 1156.126916][T14196] [ 1156.126916][T14196] other info that might help us debug this: [ 1156.126916][T14196] [ 1156.126925][T14196] Possible unsafe locking scenario: [ 1156.126925][T14196] [ 1156.126931][T14196] CPU0 CPU1 [ 1156.126938][T14196] ---- ---- [ 1156.126930][T14205] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1156.126945][T14196] rlock(&sbi->s_writepages_rwsem); [ 1156.126960][T14196] lock(&ei->xattr_sem); [ 1156.126974][T14196] lock(&sbi->s_writepages_rwsem); [ 1156.126991][T14196] lock( [ 1156.126962][T14205] ? __pfx_exit_aio+0x10/0x10 [ 1156.126995][T14196] &ei->xattr_sem); [ 1156.127005][T14196] [ 1156.127005][T14196] *** DEADLOCK *** [ 1156.127005][T14196] [ 1156.127011][T14196] locks held by syz.2.1378/14196: 2, last CPU#0: [ 1156.127026][T14196] #0: ffff88805fe86510 (sb_writers#4 [ 1156.127017][T14205] ? uprobe_clear_state+0x2a7/0x3e0 [ 1156.127052][T14196] ){++++}-{0:0}, at: vfs_writev+0x2b5/0x990 [ 1156.127069][T14205] __mmput+0xcb/0x3e0 [ 1156.127078][T14196] #1: ffff888038430cd8 (&sbi->s_writepages_rwsem [ 1156.127091][T14205] setup_new_exec+0x30d/0x360 [ 1156.127099][T14196] ){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1156.127138][T14196] [ 1156.127138][T14196] stack backtrace: [ 1156.127153][T14196] CPU: 0 UID: 0 PID: 14196 Comm: syz.2.1378 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1156.127118][T14205] load_elf_binary+0xbd6/0x2970 [ 1156.127182][T14196] Tainted: [L]=SOFTLOCKUP [ 1156.127190][T14196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1156.127190][T14205] ? load_elf_binary+0x9a1/0x2970 [ 1156.127202][T14196] Call Trace: [ 1156.127210][T14196] [ 1156.127216][T14205] ? __pfx_load_elf_binary+0x10/0x10 [ 1156.127219][T14196] dump_stack_lvl+0xe8/0x150 [ 1156.127236][T14205] ? rt_read_unlock+0x173/0x340 [ 1156.127249][T14196] print_circular_bug+0x2e2/0x300 [ 1156.127261][T14205] ? rt_read_unlock+0x17f/0x340 [ 1156.127279][T14196] check_noncircular+0x12f/0x150 [ 1156.127285][T14205] bprm_execve+0x926/0x14b0 [ 1156.127310][T14196] __lock_acquire+0x15ff/0x2e40 [ 1156.127317][T14205] ? __pfx_bprm_execve+0x10/0x10 [ 1156.127338][T14196] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1156.127344][T14205] ? get_user_arg_ptr+0x67/0xc0 [ 1156.127368][T14196] ? lockdep_hardirqs_on+0x7a/0x110 [ 1156.127373][T14205] do_execveat_common+0x4f4/0x670 [ 1156.127396][T14196] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1156.127404][T14205] __x64_sys_execve+0x97/0xc0 [ 1156.127425][T14196] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 1156.127432][T14205] do_syscall_64+0x17b/0x530 [ 1156.127450][T14196] lock_acquire+0x115/0x350 [ 1156.127460][T14205] ? irqentry_exit+0x10f/0x8f0 [ 1156.127471][T14196] ? ext4_destroy_inline_data+0x28/0xe0 [ 1156.127487][T14205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.127504][T14196] down_write+0x3a/0x50 [ 1156.127507][T14205] ? clear_bhb_loop+0x40/0x90 [ 1156.127521][T14196] ? ext4_destroy_inline_data+0x28/0xe0 [ 1156.127530][T14205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.127546][T14196] ext4_destroy_inline_data+0x28/0xe0 [ 1156.127549][T14205] RIP: 0033:0x7f90023cf107 [ 1156.127573][T14205] Code: Unable to access opcode bytes at 0x7f90023cf0dd. [ 1156.127572][T14196] ext4_do_writepages+0x576/0x47a0 [ 1156.127584][T14205] RSP: 002b:00007ffcf4011b78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1156.127602][T14196] ? kernel_text_address+0xa5/0xe0 [ 1156.127612][T14205] RAX: ffffffffffffffda RBX: 0000562153b4f078 RCX: 00007f90023cf107 [ 1156.127623][T14196] ? __kernel_text_address+0xd/0x30 [ 1156.127628][T14205] RDX: 0000562153b4f0a0 RSI: 0000562153b4f078 RDI: 0000562153b4f130 [ 1156.127644][T14205] RBP: 0000562153b4f130 R08: 00007ffcf4015e31 R09: 0000000000000000 [ 1156.127656][T14205] R10: 0000000000000008 R11: 0000000000000246 R12: 0000562153b4f0a0 [ 1156.127669][T14205] R13: 00007f9002594e8b R14: 0000562153b4f0a0 R15: 0000000000000000 [ 1156.127644][T14196] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1156.127690][T14205] [ 1156.127706][T14205] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1156.127696][T14196] ? arch_stack_walk+0xfb/0x150 [ 1156.127728][T14205] CPU: 1 UID: 0 PID: 14205 Comm: sed Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1156.127756][T14205] Tainted: [L]=SOFTLOCKUP [ 1156.127763][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1156.127774][T14205] Call Trace: [ 1156.127782][T14205] [ 1156.127789][T14205] vpanic+0x56c/0xa60 [ 1156.127886][T14205] ? __pfx__printk+0x10/0x10 [ 1156.127910][T14205] ? __pfx_vpanic+0x10/0x10 [ 1156.127927][T14205] ? is_bpf_text_address+0x292/0x2b0 [ 1156.127999][T14205] ? is_bpf_text_address+0x26/0x2b0 [ 1156.128022][T14205] panic+0xc5/0xd0 [ 1156.128038][T14205] ? __pfx_panic+0x10/0x10 [ 1156.128059][T14205] __warn+0x315/0x4c0 [ 1156.128074][T14205] ? mas_find+0xa02/0xca0 [ 1156.128100][T14205] ? mas_find+0xa02/0xca0 [ 1156.128122][T14205] __report_bug+0x276/0x570 [ 1156.128199][T14205] ? mas_find+0xa02/0xca0 [ 1156.128223][T14205] ? __pfx___report_bug+0x10/0x10 [ 1156.128254][T14205] ? mas_find+0xa02/0xca0 [ 1156.128278][T14205] report_bug+0x16a/0x220 [ 1156.128304][T14205] ? mas_find+0xa02/0xca0 [ 1156.128326][T14205] ? mas_find+0xa04/0xca0 [ 1156.128349][T14205] handle_bug+0x9c/0x200 [ 1156.128366][T14205] exc_invalid_op+0x1a/0x50 [ 1156.128384][T14205] asm_exc_invalid_op+0x1a/0x20 [ 1156.128401][T14205] RIP: 0010:mas_find+0xa02/0xca0 [ 1156.128432][T14205] Code: 74 08 4c 89 f7 e8 5e b9 f2 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b 61 86 f6 31 c0 e9 0a fd ff ff e8 6f 61 86 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 61 86 f6 31 c0 e9 f0 fc ff ff e8 55 [ 1156.128448][T14205] RSP: 0018:ffffc90005067778 EFLAGS: 00010293 [ 1156.128463][T14205] RAX: ffffffff8b3f2241 RBX: 1ffff92000a0cf29 RCX: ffff888032d15dc0 [ 1156.128477][T14205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.128488][T14205] RBP: 0000000000000037 R08: 0000000000000000 R09: 0000000000000000 [ 1156.128499][T14205] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: 00000000ffffffff [ 1156.128512][T14205] R13: ffffc90005067954 R14: ffffc90005067900 R15: ffffc90005067948 [ 1156.128529][T14205] ? mas_find+0xa01/0xca0 [ 1156.128556][T14205] ? mas_find+0xa01/0xca0 [ 1156.128582][T14205] tear_down_vmas+0x339/0x520 [ 1156.128611][T14205] exit_mmap+0x4ca/0x9f0 [ 1156.128629][T14205] ? __pfx_exit_mmap+0x10/0x10 [ 1156.128646][T14205] ? do_raw_spin_lock+0x12b/0x2f0 [ 1156.128670][T14205] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1156.128703][T14205] ? __pfx_exit_aio+0x10/0x10 [ 1156.128730][T14205] ? uprobe_clear_state+0x2a7/0x3e0 [ 1156.128747][T14205] __mmput+0xcb/0x3e0 [ 1156.128767][T14205] setup_new_exec+0x30d/0x360 [ 1156.128791][T14205] load_elf_binary+0xbd6/0x2970 [ 1156.128813][T14205] ? load_elf_binary+0x9a1/0x2970 [ 1156.128845][T14205] ? __pfx_load_elf_binary+0x10/0x10 [ 1156.128865][T14205] ? rt_read_unlock+0x173/0x340 [ 1156.128888][T14205] ? rt_read_unlock+0x17f/0x340 [ 1156.128911][T14205] bprm_execve+0x926/0x14b0 [ 1156.128942][T14205] ? __pfx_bprm_execve+0x10/0x10 [ 1156.128969][T14205] ? get_user_arg_ptr+0x67/0xc0 [ 1156.128997][T14205] do_execveat_common+0x4f4/0x670 [ 1156.129027][T14205] __x64_sys_execve+0x97/0xc0 [ 1156.129055][T14205] do_syscall_64+0x17b/0x530 [ 1156.129082][T14205] ? irqentry_exit+0x10f/0x8f0 [ 1156.129107][T14205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.129125][T14205] ? clear_bhb_loop+0x40/0x90 [ 1156.129145][T14205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.129159][T14205] RIP: 0033:0x7f90023cf107 [ 1156.129178][T14205] Code: Unable to access opcode bytes at 0x7f90023cf0dd. [ 1156.129188][T14205] RSP: 002b:00007ffcf4011b78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1156.129208][T14205] RAX: ffffffffffffffda RBX: 0000562153b4f078 RCX: 00007f90023cf107 [ 1156.129223][T14205] RDX: 0000562153b4f0a0 RSI: 0000562153b4f078 RDI: 0000562153b4f130 [ 1156.129237][T14205] RBP: 0000562153b4f130 R08: 00007ffcf4015e31 R09: 0000000000000000 [ 1156.129250][T14205] R10: 0000000000000008 R11: 0000000000000246 R12: 0000562153b4f0a0 [ 1156.129263][T14205] R13: 00007f9002594e8b R14: 0000562153b4f0a0 R15: 0000000000000000 [ 1156.129284][T14205] [ 1156.129546][T14205] Kernel Offset: disabled