last executing test programs: 22m28.523171468s ago: executing program 3 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_ACT={0x58, 0x9, 0x0, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x6, 0x2, 0x6, 0x800}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x81}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x40080) 22m28.369731192s ago: executing program 3 (id=230): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f00000001c0)="39c34367f6f2913c", 0x8) 22m28.262393045s ago: executing program 3 (id=232): r0 = syz_io_uring_setup(0x3fa3, &(0x7f0000000780)={0x0, 0x5d64, 0x10000, 0x0, 0x51}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) r4 = userfaultfd(0x80801) syz_io_uring_submit(r1, r2, r3, &(0x7f00000008c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, 0xffffffffffffffff, r4, &(0x7f0000000940)={0x2000}, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 22m28.087010029s ago: executing program 3 (id=234): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 22m27.853173745s ago: executing program 3 (id=236): r0 = socket(0xa, 0x5, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000003c0)={0x3f, 0x8001, 0x80000000, 0xfffffffffffffffd, 0x4, 0x0, 0x9c28}, 0x0, &(0x7f0000000400)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x20000000009}, 0x0, 0x0) 22m26.628891745s ago: executing program 3 (id=242): openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) syz_read_part_table(0x602, &(0x7f0000000400)="$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") 22m26.45590766s ago: executing program 32 (id=242): openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) syz_read_part_table(0x602, &(0x7f0000000400)="$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") 14m35.608030616s ago: executing program 1 (id=2531): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='X', 0x34000, 0x0, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 14m35.177559386s ago: executing program 1 (id=2536): accept$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 14m30.867139681s ago: executing program 1 (id=2549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffffe9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000000), 0x0, 0x483, &(0x7f0000001040)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) 14m29.850362896s ago: executing program 1 (id=2552): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000008c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) 14m29.727186349s ago: executing program 1 (id=2554): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 14m29.537777304s ago: executing program 1 (id=2556): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x23010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x12, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 14m13.772802929s ago: executing program 33 (id=2556): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x23010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x12, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 4m30.625988968s ago: executing program 2 (id=4285): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xf0, 0x19, 0x809, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x204000000000000}, 0x0, 0x6e6bb3}, [@srcaddr={0x14, 0xd, @in=@loopback}, @lifetime_val={0x24, 0x9, {0x3, 0x2, 0xed, 0x3}}]}, 0xf0}}, 0x2c008010) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x1, 0x3, "9e1131"}, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000002040)={&(0x7f0000002000)=""/63, 0x3f}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) socket$vsock_stream(0x28, 0x1, 0x0) 4m26.804839571s ago: executing program 2 (id=4290): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000015, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000300), 0x1, 0x51a, &(0x7f0000000f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) geteuid() r0 = socket$netlink(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_emit_ethernet(0x5c4, &(0x7f0000001900)={@multicast, @broadcast, @void, {@ipv4={0x800, @esp={{0xc, 0x4, 0x0, 0x3b, 0x5b6, 0x64, 0x0, 0xb, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x1c, 0x34, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0xb}, {@loopback, 0x7}, {@multicast2, 0x5}]}]}}, {0x4d5, 0x43, @basic={0x0, 0x0, 0x4, [@ipv6=@dccp_packet={0x8, 0x6, "4583a2", 0x201, 0x21, 0x1, @remote, @private1, {[@fragment={0x3a, 0x0, 0xf7, 0x1, 0x0, 0x1b, 0x65}, @dstopts={0x34, 0x19, '\x00', [@generic={0x2, 0x83, "56f8783db8d3253150eeea94650b481655b89eae0f285289ea1bf6d39b000582f18e7adcfb9982971a0e74cfb9152b91d5842fab59f1b06faa7cbedafdb277fa4e0f0130a3592385f5f5216f0e1997bbca8ef94df89f9180e3752e4e0c6d3c7ca548b2cb3fc2182902955591d6d789923fef840eb935fac2673b7a0f04498837b2e8a1"}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x20, {0x3, 0x6, 0xe0, 0x0, [0x28ed, 0x5, 0xdb7]}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}]}, @dstopts={0x0, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xc, [0x3e62]}}, @pad1, @calipso={0x7, 0x8, {0x1, 0x0, 0xb5, 0x2}}]}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x0, "1804dd", 0x2, "a49668"}, "f544e73a6a9dfe1d3ed061d2283ac72d06993f2d855829f30bc6ec5a3b5b9d68989baaca8951c881dcf357cb96665edf2ac8af5620362b33762d614e5d4c78c57e73ffe042f09f3b2c9da2ba2071d6146039039ac0144e7c4dcf861e5c8d8fc97e05f240bd7c76f056ad1e357c337e5de4cdafae3d714a97a64a198dd4dd606fc691b1cdc35b1eb5912c6f62dbbe70c405a9020b55501e0a1137935959a9b7c2c400074bc26c2280d74084068de81d0b8f497a49ca24cb2e9a30bb61fce422fd71e827258e5c25ec35d4cfffeb933d070e19013f5b334152061007832644ed4c8c"}}}, @ipv4=@generic={{0x18, 0x4, 0x0, 0x37, 0x140, 0x64, 0x0, 0x5, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x2c, 0xda, 0x3, 0x0, [{@local, 0x1}, {@remote, 0x6}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x7fffffff}]}, @ssrr={0x89, 0xf, 0x21, [@rand_addr=0x64010100, @multicast1, @local]}, @lsrr={0x83, 0xf, 0xe7, [@dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, "2e81cc7575ec54caddd4bb1722677975f510de1750f34b72f9c1a0ca8d1b4b87287a349e1026003af5d97815398b65293630667adeb54aba0bd51cdf07dbddceebc84ba243b7fe2ab5e82dd206ac88d698dbda1458553bca0d9e31518bbc4093677b30a93c8022f24d3be02efc0fd3ba2b279d37ad02d4a8fbb48baf784ffebe1c92e8ab5fa2c367693d68cb8ac55fa76e8474ee63443065cdc8b7f5b8580370d1048ba75414477f1862721de1dd48117cdf245bb5d4cd545e84bd547f685651f5ce2d52aef0c0d0d4b96b118a9f99674192bd174040726106db6292d4819f7e"}, @runt="1047c567f31f3f3f39e26e21d7e488870578f16a3660b9469e93e9401faad6c483e06c004234b14c14", @ipv4=@dccp={{0x13, 0x4, 0x1, 0x8, 0x154, 0x64, 0x0, 0xb, 0x21, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x4, [{@rand_addr=0x64010102, 0xc}, {@empty, 0xb}, {@local, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0x6d, 0x1, 0x0, [{@multicast1, 0x80000000}, {@private=0xa010102, 0x51a7}, {@rand_addr=0x64010102, 0xd72}]}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x0, "884a54", 0x80, "10c006"}, "6155067fb0b32adcae2b52c0414f810d3a84a228f32eccbddaf58ed63f04b7c438a926666e224791e79c1e8a1c69bb6cfed67f69b4cd3ec09e7a0d9dfb39b768202af1c54cf99cd53bb047399b08905e3ed1e5a4f1dc3d960b5a0bc0be937a0d65b3566f85f94a0ebc19453d5ca3711873f4f26839aee71bfc653a35210ca802d9f3c052a691aedb30ce78a880a2ca0e797fb1a9b5ee1315577d5c64979acef06a3133c52312078cd08f53a56de2809dbb1ef6f35b5fe5ff603939fc72ae38d8b6a61d44a5ac923c9f739ef33e24868a5875d5f7c521d285cc86c994bd62d2717a4d930f5183c85d67345fe8985eafa7779ec68fa8fd6750"}}, @ipv4=@tcp={{0x10, 0x4, 0x1, 0xb, 0x8d, 0x68, 0x0, 0xd, 0x6, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xca, 0x3, 0x6, [{@loopback, 0x1}, {@remote, 0x8}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}]}, @noop, @ra={0x94, 0x4}, @noop]}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x40, 0x0, 0x4f2, {[@nop, @fastopen={0x22, 0x8, "f5292ad4eca0"}]}}, {"5b0f1f53320d94bee38103248ffebd22eb54979237cb2b93f316460fa5a16d84e9947ab8d268fe2a041544e0a7"}}}]}, "1f412ea057", 0x5}}}}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)={[{@i_version}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4m25.118474252s ago: executing program 2 (id=4297): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000800000000000000020000040000000000000003000000000000000000000002000000000000000e0000000000000c0100000005000000000000040000000000100000002e610000"], 0x0, 0x5c}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x0, 0x1}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x6b3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x800006}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x3}, &(0x7f0000000340)=0x20) 4m20.249659901s ago: executing program 2 (id=4310): setns(0xc9, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x1, 0x392, &(0x7f0000001000)="$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") recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002900)="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", 0x1000}, {&(0x7f0000003900)="720c2b203ee35297b3b116fd83ff085f479850cb1cd071f74806119e84acb49caa3d626216f626151c2008cfa7be9e61f8396296adaf3754340cb1624b82a51e6b5f3e6f69eb9f26e2b1fee3d8279d34ae424280813a75269771d45065e0e2eb6f7e94e4a2beb416177eee3ed86178d955edfb94189149da20f6c87886d3a666e65f7c3c4ad82d21fbbf7c5105a598368e88376a6b33229df69ca02509449190703c4e", 0xa3}, {&(0x7f00000039c0)="e7a4b5dbe2be86014d7e2a89e58e5377f51126657554845994b73596681e4462a8e98ecb6d370f3320b361975693207e643775f94b6cf4ee8df31bb3471d", 0x3e}], 0x3}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) syz_pidfd_open(r2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xfff) ppoll(&(0x7f0000000000)=[{r5, 0x3004}], 0x1, 0x0, 0x0, 0x0) 4m18.061327665s ago: executing program 2 (id=4311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001780), 0x651, 0x0) recvmmsg(r2, &(0x7f00000017c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001800)=0x6) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001840)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001880)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000018c0)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001900), 0x400, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r6 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001980)=0x10, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x4855}, 0x8811) shutdown(r6, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x1000, 0x3, 0x315}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x345c, 0x8000, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2823, 0x10, 0x2, 0x265}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6373, 0x1, 0x3, 0x34d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ce8, 0x40, 0x1, 0x9c}}], 0x4, &(0x7f0000001480)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, '\x00', {0x2, 0xfb3, 0x0, 0x0}}, &(0x7f0000001500)) 4m16.765229266s ago: executing program 2 (id=4313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) fgetxattr(r2, 0x0, 0x0, 0x0) 4m1.078316299s ago: executing program 34 (id=4313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) fgetxattr(r2, 0x0, 0x0, 0x0) 2m44.933994049s ago: executing program 4 (id=4467): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000040)=0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) readahead(r5, 0x7, 0x7fff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) 2m42.724460753s ago: executing program 4 (id=4473): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x4) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000580)='7', 0x1) keyctl$join(0x1, 0x0) 2m42.00614392s ago: executing program 4 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x44000) 2m41.702536857s ago: executing program 4 (id=4476): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29414fdd1d35f159, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) getrusage(0x1, &(0x7f0000003ec0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000c78400000800000001000000c0000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000b000000000000000000e3ffffffffffffff0000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) syz_open_dev$tty20(0xc, 0x4, 0x0) 2m38.513237625s ago: executing program 4 (id=4483): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') openat(0xffffffffffffffff, 0x0, 0xc00, 0x15d) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f0000000c40)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1, 0xffffffff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/events/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='0', 0x1) 2m37.49549448s ago: executing program 4 (id=4489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x2000000, 0x6011, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 2m22.165028194s ago: executing program 35 (id=4489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x2000000, 0x6011, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 13.024709908s ago: executing program 5 (id=4831): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29414fdd1d35f159, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) getrusage(0x1, &(0x7f0000003ec0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000c78400000800000001000000c0000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000b000000000000000000e3ffffffffffffff0000000000000000"], 0x50) 10.357438074s ago: executing program 7 (id=4835): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000040)=0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) readahead(r5, 0x7, 0x7fff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) 8.731519194s ago: executing program 6 (id=4836): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001a00)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x64, 0x0, 0x2, 0x2b, 0x0, @multicast2, @empty}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00') 7.128871244s ago: executing program 6 (id=4838): unshare(0x24020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000012c0)={'bridge0\x00', &(0x7f0000001300)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40c0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000001340)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000001380)) timer_settime(0x0, 0x0, &(0x7f00000013c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000001400)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) accept$unix(r3, 0x0, 0x0) 6.148899668s ago: executing program 0 (id=4839): capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000}) 6.111531s ago: executing program 5 (id=4840): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 6.044879061s ago: executing program 0 (id=4841): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000098, 0x0, 0x200000000005}]}) 5.809710997s ago: executing program 0 (id=4842): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1de, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], "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"}}}}}, 0x0) setpriority(0x0, 0x0, 0x2a14b58) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r2, &(0x7f0000001600)=""/4081, 0x7, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0x0, 0x0, 0x0, 0x1}]}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x480}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) lstat(&(0x7f0000003440)='./file2\x00', 0x0) 5.583984982s ago: executing program 6 (id=4843): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x80, 0xc8, r1}, [@IFA_LABEL={0x14, 0x3, 'bridge0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0xc4) 5.534725414s ago: executing program 0 (id=4844): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7768696e745f6d6f64653d757365722d62617365642c6e6f666c7573685f6d657267652c646973636172645f756e69743d626c6f636b2c636f6d70726573735f63616368652c646973636172642c636f6d70726573735f636163686500636f6d70726573735f63616368652c6e6f646973636172642c6e04000000000000006b67726f756e645f67633d6f66662c6673796e635f6d6f64653d7374726963742c617467632c636865636b706f696e743d64697361626c652c6661756c745f747970653d30303030303030303030303030303030303030362c000bfd62d218a444a68c74f026d4ccec66093eece27fe167b75e67ed0f3b3a51c2b8d1857ec135096f87f1bea6b5fea173b82a6a331ed6a20e7966a79114d49d58aca09dc4cbc08f2ce2ad2c6d576d3babdbc296014f0cb17e6a9d720beaf7459568b858cba1b2d201000000594ac14b0b6d4b160405a05c9b7a14f6b9a37c8ffc9f9b20987a60171b9e5541d7eadf86a1d102cb83caeaf0ff064bd27bb32db4263cfc9821d083fc479cf94b113fa6156274d93a6530b84a92d125ac10ffae140b80ad0569bf76f43d8d490968f8fb5798875bfab54caf996afbd97d0b93b9626acf1b881c6f5d55072164d2e3eff342bb846739c949e100"/473, @ANYRES32=0x0], 0xfd, 0x5524, &(0x7f000000af80)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000d40)={[0x0, 0x3, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x4000000000000007, 0x0, 0x5, 0xb, 0x2, 0xffffffffffffffff], 0x0, 0x45691}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000e00)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.474600375s ago: executing program 6 (id=4845): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}}, 0x8000) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x137) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = inotify_init() ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x80000, 0x6c87) 5.448201726s ago: executing program 7 (id=4846): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000400)=0x72e, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000480)='M', 0x1) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x42) 4.820402752s ago: executing program 5 (id=4847): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000008140)={0x0, 0x4076cbba9945d516, &(0x7f0000008180)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000081c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008200)=0x14) sendmsg$nl_route(r1, &(0x7f0000008240)={0x0, 0x0, &(0x7f0000008280)={&(0x7f00000082c0)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000008340)="466c52b8875d7f9e3b51d567ce1dc2e5edfd56262bc4b89ed32cf057f1e7ccadb04e6e6c2d381199290063308284faa98737941f2b357f471a2ee76b702fb956f2d18b7c79b91d1a911b054e772171054c20c0b9", 0x54, 0x4010, &(0x7f0000008400)={0x11, 0xf8, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) 4.668831595s ago: executing program 7 (id=4848): r0 = syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstatfs(r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x33) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) syz_open_dev$media(&(0x7f0000000440), 0xa, 0x41) syz_open_procfs(0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) 4.47444043s ago: executing program 6 (id=4849): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29414fdd1d35f159, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) getrusage(0x1, &(0x7f0000003ec0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000c78400000800000001000000c0000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000b000000000000000000e3ffffffffffffff0000000000000000"], 0x50) 4.220645626s ago: executing program 5 (id=4850): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55bf, &(0x7f0000006a80)="$eJzs3E2LG3UYAPBnsrt9ty7iwVsHirALTWi2L+jJqi2+YEvx5eBJs0ka0iaZZZOma089eBQPfhNR8OTRz+BBj3oTD4o3oZKZWe32RbtuNsu2vx/MPDP//PPMM0MIPDMhATy1FtM/fkvieByOiLmIOJZEvp2US8SdiAvF3Bci4kREVO5ZknL874EDEXEkIo5Pkhc5k/KlL06NT5779e3fv/3+4PzRL7/5YU9PHNhTL0ZEf63YvtUvYtYp4vVyvDHu5rF/dlzGtS05+lkxfqu9mme41dic18jjmU4xP1u7OZzEa71GcxI73Wv5+NqgOOBw3NnMM3lDer2xnu+32qt57A6zPHZuF8fduF18t90ejoo8rTLfJ3n6GI02YzHe3mgX57N2I4/NwagcL/JmrfbGJI7LWB4umlmvldex+j8v8j7wTndwcyMdt9eH3WyQnqvVX6rVz1fr61mrPWqfrTb6rfNn06VObzKtOmo3+hc6WdbptWvNrL+cLnWazWq9ni5dbK92G4O0Xq+dqZ2unlsut06lb1z5IO210qVJfK07uDnq9obptWw9Ld6xnK7Uzry8nJ6sp+9dvppefffSpctX3//o4odXXr381uvlpAfKSpdWTq+sVOunqyv15afo/D8ti97G+ScPH/7px51dNig84gP2aPO7UwfAPvJA/x/39/+h/wembif9f/9Gub87/X88Tv8f0+z/Jy2V/v+/+9/Ktvrf41PpfxdC/7+L5w87su3+P3dg6nUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBzPy989Wa+sVjsHy3HnymHniv3k4ioRMTdh5iLA1tyzpV5Fh4xf+G+Gr5LIs8wOcbBcjkSERfK5c9nd/sqAAAAwJPr6zsnPi+69WK1uNcFMUvFTZvKsY+nlC+JiIXFX6aUrTJZPT+lZPnnez42ppQtv4F1aErJiltu89PK9ljmtoRD94SkCJWZlgMAAMzE1k5gtl0IAAAAs/TZv776yszqYMaS2HyUufksOP/l/T8PBA9PVnfv+3E/AAAAsJ8ke10AAAAAsOvy/t///wEAAMCTrfj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL3bu50ZtIIoD8LPBQP4pKMo9reQGZaSEHHMMFJAmKIG0kAaogUg5pIQVrLBnkbwL0moZYy36Psn2znj18wxweWNpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLf6v1/PfPL78uzdntL5NnNgAAAMAp22o9r/+YNu13qf9D6vqU2kVElBFxqnYfxKiVOUg51Zn/rx6N4U9EnXDoH6fjbUR8Tcfdx64/BQAAALhdm+Vq1lTrzSktAfzrd1RcSbNoU77/limviIhq+j9TWnk4fc4UVv++h/EjU1q9gDXJFNYsuQ1P3xvlekjboHV5mMmi/hLrVtnNcwEAgD61K4EzVQgAAAA34HvfA+Aanpb2xfF0fM84bi7pheCbVgsAAAB4hYq+BwAAAAB0rq7/u9n/b/Ki/f8K+/8BAABAds3+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW63nm+Vqdu7+4pk5u/1l8s0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHv25xiFYRgKouAmkZK4M7r/Yc2CXbp2MwOCx99KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd1/nyvuLT2JOMXhuz55Xk26nx69T4d25sMxnr6d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs289rHFUcAPA3O9lNU1uMUQJGpUoPerHptrb2KqIED/4JQkg3Nbq12uZgS7Dm4k1y7kX0IogISrzlf+i5gV7qrYccInjyEJlfyWyybX6QzKzN5wNv33ffTt6PmWXJd98sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhbX3wquNPI6Th9EsLtoerC/MJPXqtjqxsvRwIilJHA0Xraff2OvYG/GhLGFQvVZ+cma8vokAAADwrDi96xFxkd+HEB41l6eSujGa5v/N4pgk5/8x7yrK27bn/avrCyfylyaK/P/PPx6/tDnQaJyOk3Q6O9ftnN85laEDL/N/7vldjxhKz3z63UucXpDGR4svrjXT8xl9f//+B600HK5itgDAQZwr6jwo/h9K6nadEwPg2BgqJd5F/h+P1jsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCqsLYbnijgKIUwMbcWJ1fWFmX71t0sPJ1bycvnevaVyn0kXzRDC7Fy3c75ntOEjX89gKs7mnc+nu93OzVu3qw7OhBD6vHR3b38e59N/4jGtEEJPy9mX+/TzyR7G2tbPjiB/e4Zqz+FIsr5dD456WqIdJ/z9jUwdb4BDDlpPukyN/PocxaAjlV/33qB47x1+z/v5LDmun6EAAOxHMy9JJvqouTyVtEVjIWz81Jv/v1mKQ0/ev3E3a8mer5Ty/8efXn5QHquc/7e3mk8d9RoH3eT89S8nb92+8/bc9elrnWudL9650H63ffHKpUtXJtPvSiZnQ2PbNyYAAACwH628lPP/kT77/ydLcXjK/n+2JZzl/1/90P6mPFbcP/8/9rY2/eqeCQAAwHHU2oxeeP2fv6M+R0StVvh6en7+Zjt73Hx+IXusdLoHNJyXcv4fj9U9KwAAAKAKa4tRz/7/1VIcnrL/X77//9Qvr/xW7jPO7i24EULonJu50b1a3XIGWu+Pfn+Oj+KHyulArbpXCgAAQF1G8lLe/2+OJfl/Y/OWh0YI4a2zIfyb/4Y/7DH/jz/87tfyWOX7/y9WusrB0xjPzkdaj4cwNF73jAAAAHiWnchLkuz/1Vye+uz3kx+33P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULX/AgAA//9KES1X") r0 = syz_open_dev$loop(&(0x7f0000000b00), 0x81, 0x141200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000b80)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0xf, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x800000000000009, 0x3]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 3.65775988s ago: executing program 7 (id=4851): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1de, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], "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"}}}}}, 0x0) setpriority(0x0, 0x0, 0x2a14b58) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r2, &(0x7f0000001600)=""/4081, 0x7, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0x0, 0x0, 0x0, 0x1}]}) r3 = userfaultfd(0x80001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x480}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$eJzs3dFrJHcdAPDvTHYvubucSdUHLViLVu6q3ubSeG3woSqIPhXUiq91TTYhZHN7JJv2EopN8Q8QRLTgiz75IvgHCNIX30Uo6LuoKFKv+qDQdmRmZ3u5vd3k4HYzsPl8YG7mNzM73+9v9uaX329n2A3g3HoyIq5FxExEPB0RC+X6tJziqDfl+71z99W1fEoiy158O4mkXNc/1mw5v1y+bC4ivvX1iO8lD8bdOzjcbrbbrd2yvNTdSd7NssPrWzvNzdZm69bKyvKzq8+t3ly9MZZ6LkbE81/9209++MuvPf/bz7/y55f+ce37eVr/y7LXYqAe49Srer04F321iNidRLCK1Ioa9tysOBcAAE6W9/c/HBGfKvr/CzFT9OYAAACAaZJ9aT7eTSIyAAAAYGqlETEfSdoon/edjzRtNHrP8H40LqXtzl73cxud/Vvr+baIxainG1vt1o3y2YHFqCd5ebl8xrZffmagvBIRj0XEjxcuFuXGWqe9XvWHHwAAAHBOXB4Y//9noTf+LxxVnBwAAAAwPotVJwAAAABMnPE/AAAATD/jfwAAAJhq33jhhXzK+r9/vf7ywf525+Xr66297cbO/lpjrbN7u7HZ6WwW39m3c9rx2p3O7S/Erf07S93WXndp7+DwpZ3OfvFb4XNnUiEAAADgAY998s0/JRFx9MWLxZS7UG6rR2Qzx3euVZEhMCnpkHUzo3b+62RzAc7W8Wv9YoV5AGdPlx7Or3rVCQCVS07ZPvLhnd+PPxcAAGAyrn589P3/tzcqTQ2YsPL+f3La+B+YPiOf9TludvJ5AGevd//v/axn2B56BjCt6if1AFz6MPXS8dz/P+VRwkSDAgAAFZsvpiRtlOOA+UjTRiPiSvGzAPVkY6vduhERH4qIPy7UZ/PycvHKRG8eAAAAAAAAAAAAAAAAAAAAAAAAAB5SliWRAQAAAFMtIv17/5e5ri48NT/4+cCF5L8LxTwiXvnZiz+90+x2d5fz9f/6YH33jXL9M1V8ggEAAAAM6o/T++N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABind+6+utafzjLuP78SEYvD4tdirpjPRT0iLv07idqx1yURMTOG+EevR8THhsVP8rRisczivvgXItKIuDiu+EPP/wnxoxf/8hjiw3n2Zt7+fHnY9ZfGk8V8+PVXK6dHNbr9Sz9o/2ZGtH9XRh20fn/x8bd+vTQy/usRj9eGtz/9+El+vCHxP/2Qdfzutw8PR23LfhFxdVj7l9wfa6m7c3tp7+Dw+tZOc7O12bq1srL87OpzqzdXbyxtbLVb5b9DY/zoE795/17pvQfqf+mE9reo/4jz/9QJdZ49tvzeW3fufqS3OPDORD1+niW1ofHT3uyzD8bv/+37TLlXXs7PYfrGd4bm8sSv/vDEqDzz+q+PqP/cKfW/dkL9j3v6mz/4y0PuCgCcgb2Dw+1mu93atVDxQlL2eB/lOP1PRE7d+cqj5pz3O6s+Y60kkthutmfjvk3N6hPrLbxWvhvNdv9qG9ORf1f+V5lk8mfdEAEAABN3r9M/uOXeDRj3mQEAAAAAAAAAAAAAAAAAAGCyTv0asFGb0oh4yK8TG4x5VE1VAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9P8AAAD//xQlyxg=") lstat(&(0x7f0000003440)='./file2\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003580)='./file2\x00', 0x0, 0x4000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000340)="27f4882841cf0df06697114d05305bc2b3784f951567d2c3688a0a891b55a971826e32b22118ea038903dcd95975390070ca3f5d2276a1aedda5cadf1b7f97199bdb246c3ac5191e") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0xfffffffffffffff9, 0x180, 0x1}, 0x0, &(0x7f0000002080)={0x4, 0x0, 0x5, 0x110000001, 0xc6d9, 0x6, 0x7fffffff}, 0x0, 0x0) 2.724323363s ago: executing program 0 (id=4852): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/route\x00') write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x8b}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000006c0)='nv', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000840), 0x651, 0x0) getsockname$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000900)=0x6e) recvmmsg(r3, &(0x7f0000000940), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000a80)={0x6, 0x3, 0x8, 0x9}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000000ac0)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={0x0, &(0x7f0000001b80)=""/226, 0x26, 0xe2, 0x2}, 0x28) mremap(&(0x7f00002cc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000649000/0x3000)=nil) syz_mount_image$ext4(&(0x7f0000001c80)='ext4\x00', &(0x7f0000001cc0)='./file1\x00', 0x200000, &(0x7f0000001d00)={[{@resuid}, {@dioread_lock}, {@grpjquota}, {@dax_always}]}, 0x3, 0x577, &(0x7f0000001d40)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002300)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$media(&(0x7f0000000000), 0xffddfffe, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000040)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0xfffffffffffffddb, 0x0, 0xffffffffffffffff, 0xfffffffffffffd66, 0x0, 0x0, 0x34, 0x0, 0x0}) 2.404704961s ago: executing program 7 (id=4853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/76, 0x4c}, 0xe802}], 0x1, 0x222, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) clock_gettime(0xbed2ecc283524fbc, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 1.424950685s ago: executing program 5 (id=4854): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup2(r1, r0) accept$packet(r2, 0x0, 0x0) 1.160781442s ago: executing program 5 (id=4855): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000040)=0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) readahead(r5, 0x7, 0x7fff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) 1.087138164s ago: executing program 7 (id=4856): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}}, 0x8000) io_setup(0x8, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x137) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = inotify_init() ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x80000, 0x6c87) 828.52636ms ago: executing program 6 (id=4857): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 0s ago: executing program 0 (id=4858): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}}, 0x8000) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x137) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = inotify_init() ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x80000, 0x6c87) kernel console output (not intermixed with test programs): 0x120 [ 1167.141725][T20877] netlink_realloc_groups+0x118/0x320 [ 1167.147123][T20877] ? aa_sk_perm+0x83c/0x970 [ 1167.151650][T20877] netlink_bind+0x2ab/0xd30 [ 1167.156159][T20877] ? netlink_release+0x1a70/0x1a70 [ 1167.161296][T20877] ? __might_fault+0xaa/0x120 [ 1167.165972][T20877] ? bpf_lsm_socket_bind+0x9/0x10 [ 1167.170993][T20877] ? security_socket_bind+0x80/0xa0 [ 1167.176203][T20877] __sys_bind+0x2f0/0x3f0 [ 1167.180544][T20877] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1167.185845][T20877] __x64_sys_bind+0x7a/0x90 [ 1167.190359][T20877] do_syscall_64+0x55/0xb0 [ 1167.194780][T20877] ? clear_bhb_loop+0x40/0x90 [ 1167.199457][T20877] ? clear_bhb_loop+0x40/0x90 [ 1167.204133][T20877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1167.210027][T20877] RIP: 0033:0x7fe4c4d9e2d9 [ 1167.214439][T20877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.234047][T20877] RSP: 002b:00007fe4c5bcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1167.242459][T20877] RAX: ffffffffffffffda RBX: 00007fe4c5026180 RCX: 00007fe4c4d9e2d9 [ 1167.250430][T20877] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000004 [ 1167.258396][T20877] RBP: 00007fe4c4e35888 R08: 0000000000000000 R09: 0000000000000000 [ 1167.266361][T20877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.274321][T20877] R13: 00007fe4c5026218 R14: 00007fe4c5026180 R15: 00007ffe2ff81d18 [ 1167.282306][T20877] [ 1173.387003][T20920] FAULT_INJECTION: forcing a failure. [ 1173.387003][T20920] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1173.519017][T20920] CPU: 1 PID: 20920 Comm: syz.5.4243 Not tainted syzkaller #0 [ 1173.526631][T20920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1173.536714][T20920] Call Trace: [ 1173.540010][T20920] [ 1173.542953][T20920] dump_stack_lvl+0x18c/0x250 [ 1173.547679][T20920] ? show_regs_print_info+0x20/0x20 [ 1173.552895][T20920] ? load_image+0x420/0x420 [ 1173.557441][T20920] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1173.563621][T20920] should_fail_ex+0x394/0x4c0 [ 1173.568337][T20920] get_futex_key+0x136/0x1030 [ 1173.573042][T20920] ? futex_setup_timer+0xc0/0xc0 [ 1173.577998][T20920] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1173.584004][T20920] ? __lock_acquire+0x7eb0/0x7eb0 [ 1173.589058][T20920] ? preempt_schedule+0xc0/0xd0 [ 1173.593939][T20920] futex_wait_setup+0xbc/0x270 [ 1173.598731][T20920] ? futex_wait_multiple+0x920/0x920 [ 1173.604041][T20920] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1173.609971][T20920] ? _raw_spin_unlock+0x40/0x40 [ 1173.614851][T20920] futex_wait+0x1bc/0x5c0 [ 1173.619216][T20920] ? futex_wait_setup+0x270/0x270 [ 1173.624298][T20920] do_futex+0x2ff/0x3e0 [ 1173.628477][T20920] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1173.634412][T20920] ? __sys_bind+0x32f/0x3f0 [ 1173.638945][T20920] __se_sys_futex+0x3a9/0x440 [ 1173.643655][T20920] ? __x64_sys_futex+0xf0/0xf0 [ 1173.648444][T20920] ? __x64_sys_futex+0x21/0xf0 [ 1173.653232][T20920] do_syscall_64+0x55/0xb0 [ 1173.657678][T20920] ? clear_bhb_loop+0x40/0x90 [ 1173.662382][T20920] ? clear_bhb_loop+0x40/0x90 [ 1173.667091][T20920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.673018][T20920] RIP: 0033:0x7fd65159e2d9 [ 1173.677451][T20920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.697090][T20920] RSP: 002b:00007fd6523d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1173.705528][T20920] RAX: ffffffffffffffda RBX: 00007fd651826188 RCX: 00007fd65159e2d9 [ 1173.713529][T20920] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd651826188 [ 1173.721523][T20920] RBP: 00007fd651826180 R08: 0000000000000000 R09: 0000000000000000 [ 1173.729513][T20920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.737506][T20920] R13: 00007fd651826218 R14: 00007ffc7773e370 R15: 00007ffc7773e458 [ 1173.745515][T20920] [ 1177.483619][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.490229][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.415942][T20943] loop4: detected capacity change from 0 to 1024 [ 1178.423438][T20943] EXT4-fs: Ignoring removed nobh option [ 1178.429203][T20943] EXT4-fs: Ignoring removed bh option [ 1178.523744][T20943] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1178.599553][T20943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 1178.608518][T20943] System zones: 0-1, 3-12 [ 1178.639580][T20943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.023504][T14855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.492459][T20966] FAULT_INJECTION: forcing a failure. [ 1179.492459][T20966] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1179.574626][T20966] CPU: 0 PID: 20966 Comm: syz.5.4256 Not tainted syzkaller #0 [ 1179.582151][T20966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1179.592228][T20966] Call Trace: [ 1179.595520][T20966] [ 1179.598457][T20966] dump_stack_lvl+0x18c/0x250 [ 1179.603175][T20966] ? show_regs_print_info+0x20/0x20 [ 1179.608409][T20966] ? load_image+0x420/0x420 [ 1179.612951][T20966] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1179.619138][T20966] should_fail_ex+0x394/0x4c0 [ 1179.623849][T20966] get_futex_key+0x136/0x1030 [ 1179.628558][T20966] ? futex_setup_timer+0xc0/0xc0 [ 1179.633519][T20966] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1179.639530][T20966] ? __lock_acquire+0x7eb0/0x7eb0 [ 1179.644581][T20966] ? preempt_schedule+0xc0/0xd0 [ 1179.649464][T20966] futex_wait_setup+0xbc/0x270 [ 1179.654278][T20966] ? futex_wait_multiple+0x920/0x920 [ 1179.659584][T20966] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1179.665510][T20966] ? _raw_spin_unlock+0x40/0x40 [ 1179.670399][T20966] futex_wait+0x1bc/0x5c0 [ 1179.674759][T20966] ? futex_wait_setup+0x270/0x270 [ 1179.679833][T20966] do_futex+0x2ff/0x3e0 [ 1179.684024][T20966] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1179.689949][T20966] ? __sys_bind+0x32f/0x3f0 [ 1179.694499][T20966] __se_sys_futex+0x3a9/0x440 [ 1179.699214][T20966] ? __x64_sys_futex+0xf0/0xf0 [ 1179.704009][T20966] ? __x64_sys_futex+0x21/0xf0 [ 1179.708799][T20966] do_syscall_64+0x55/0xb0 [ 1179.713241][T20966] ? clear_bhb_loop+0x40/0x90 [ 1179.717943][T20966] ? clear_bhb_loop+0x40/0x90 [ 1179.722646][T20966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.728569][T20966] RIP: 0033:0x7fd65159e2d9 [ 1179.733001][T20966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.752634][T20966] RSP: 002b:00007fd6523d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1179.761081][T20966] RAX: ffffffffffffffda RBX: 00007fd651826188 RCX: 00007fd65159e2d9 [ 1179.769079][T20966] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd651826188 [ 1179.777080][T20966] RBP: 00007fd651826180 R08: 0000000000000000 R09: 0000000000000000 [ 1179.785074][T20966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.793069][T20966] R13: 00007fd651826218 R14: 00007ffc7773e370 R15: 00007ffc7773e458 [ 1179.801087][T20966] [ 1184.266973][T21013] FAULT_INJECTION: forcing a failure. [ 1184.266973][T21013] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.279627][T21013] CPU: 0 PID: 21013 Comm: syz.2.4269 Not tainted syzkaller #0 [ 1184.287113][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1184.297187][T21013] Call Trace: [ 1184.300485][T21013] [ 1184.303434][T21013] dump_stack_lvl+0x18c/0x250 [ 1184.308139][T21013] ? show_regs_print_info+0x20/0x20 [ 1184.313368][T21013] ? load_image+0x420/0x420 [ 1184.317906][T21013] ? _raw_write_lock_irq+0xbb/0xf0 [ 1184.323053][T21013] should_fail_ex+0x394/0x4c0 [ 1184.327771][T21013] should_failslab+0x9/0x20 [ 1184.332305][T21013] slab_pre_alloc_hook+0x59/0x300 [ 1184.337361][T21013] ? netlink_table_grab+0x259/0x2e0 [ 1184.342585][T21013] ? netlink_realloc_groups+0x118/0x320 [ 1184.348160][T21013] ? netlink_realloc_groups+0x118/0x320 [ 1184.353733][T21013] __kmem_cache_alloc_node+0x53/0x250 [ 1184.359138][T21013] ? netlink_realloc_groups+0x118/0x320 [ 1184.364707][T21013] __kmalloc_node_track_caller+0xa4/0x230 [ 1184.370461][T21013] krealloc+0x86/0x120 [ 1184.374561][T21013] netlink_realloc_groups+0x118/0x320 [ 1184.379957][T21013] ? aa_sk_perm+0x83c/0x970 [ 1184.384489][T21013] netlink_bind+0x2ab/0xd30 [ 1184.389029][T21013] ? netlink_release+0x1a70/0x1a70 [ 1184.394169][T21013] ? __might_fault+0xaa/0x120 [ 1184.398873][T21013] ? bpf_lsm_socket_bind+0x9/0x10 [ 1184.403919][T21013] ? security_socket_bind+0x80/0xa0 [ 1184.409147][T21013] __sys_bind+0x2f0/0x3f0 [ 1184.413502][T21013] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1184.418826][T21013] __x64_sys_bind+0x7a/0x90 [ 1184.423366][T21013] do_syscall_64+0x55/0xb0 [ 1184.427784][T21013] ? clear_bhb_loop+0x40/0x90 [ 1184.432460][T21013] ? clear_bhb_loop+0x40/0x90 [ 1184.437133][T21013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1184.443032][T21013] RIP: 0033:0x7fc95a59e2d9 [ 1184.447448][T21013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.467065][T21013] RSP: 002b:00007fc95b390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1184.475491][T21013] RAX: ffffffffffffffda RBX: 00007fc95a826180 RCX: 00007fc95a59e2d9 [ 1184.483464][T21013] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000004 [ 1184.491445][T21013] RBP: 00007fc95a635888 R08: 0000000000000000 R09: 0000000000000000 [ 1184.499424][T21013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.507394][T21013] R13: 00007fc95a826218 R14: 00007fc95a826180 R15: 00007ffc2bd88128 [ 1184.515385][T21013] [ 1191.274154][T21055] FAULT_INJECTION: forcing a failure. [ 1191.274154][T21055] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1191.348014][T21055] CPU: 0 PID: 21055 Comm: syz.4.4281 Not tainted syzkaller #0 [ 1191.355549][T21055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1191.365628][T21055] Call Trace: [ 1191.368934][T21055] [ 1191.371882][T21055] dump_stack_lvl+0x18c/0x250 [ 1191.376600][T21055] ? show_regs_print_info+0x20/0x20 [ 1191.381831][T21055] ? load_image+0x420/0x420 [ 1191.386377][T21055] ? min_deadline_cb_rotate+0x150/0x150 [ 1191.391957][T21055] should_fail_ex+0x394/0x4c0 [ 1191.396676][T21055] get_futex_key+0x136/0x1030 [ 1191.401396][T21055] ? futex_setup_timer+0xc0/0xc0 [ 1191.406359][T21055] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1191.412365][T21055] ? __lock_acquire+0x7eb0/0x7eb0 [ 1191.417421][T21055] ? preempt_schedule+0xc0/0xd0 [ 1191.420381][T21056] tipc: Started in network mode [ 1191.422281][T21055] futex_wait_setup+0xbc/0x270 [ 1191.422314][T21055] ? futex_wait_multiple+0x920/0x920 [ 1191.422336][T21055] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1191.443124][T21055] ? _raw_spin_unlock+0x40/0x40 [ 1191.448015][T21055] futex_wait+0x1bc/0x5c0 [ 1191.452388][T21055] ? futex_wait_setup+0x270/0x270 [ 1191.457469][T21055] do_futex+0x2ff/0x3e0 [ 1191.461658][T21055] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1191.467572][T21055] ? __sys_bind+0x32f/0x3f0 [ 1191.472103][T21055] __se_sys_futex+0x3a9/0x440 [ 1191.476810][T21055] ? __x64_sys_futex+0xf0/0xf0 [ 1191.481602][T21055] ? __x64_sys_futex+0x21/0xf0 [ 1191.486391][T21055] do_syscall_64+0x55/0xb0 [ 1191.490823][T21055] ? clear_bhb_loop+0x40/0x90 [ 1191.495528][T21055] ? clear_bhb_loop+0x40/0x90 [ 1191.500240][T21055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1191.506169][T21055] RIP: 0033:0x7f557919e2d9 [ 1191.510602][T21055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.530241][T21055] RSP: 002b:00007f5579fcb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1191.538688][T21055] RAX: ffffffffffffffda RBX: 00007f5579426188 RCX: 00007f557919e2d9 [ 1191.546679][T21055] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5579426188 [ 1191.554673][T21055] RBP: 00007f5579426180 R08: 0000000000000000 R09: 0000000000000000 [ 1191.562666][T21055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.570654][T21055] R13: 00007f5579426218 R14: 00007ffcf392b790 R15: 00007ffcf392b878 [ 1191.578663][T21055] [ 1191.585350][T21056] tipc: Node identity 1000001, cluster identity 4711 [ 1191.593137][T21056] tipc: Node number set to 16777217 [ 1191.640044][T21057] loop5: detected capacity change from 0 to 512 [ 1191.685884][T21056] tipc: New replicast peer: 127.0.0.1 [ 1191.706835][T21057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.754533][T21056] tipc: Enabled bearer , priority 10 [ 1191.921360][T18852] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1192.254133][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.147743][T18852] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1194.177145][T18852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1194.827095][T18852] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1194.836591][T18852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.858665][T18852] usb 3-1: config 0 descriptor?? [ 1195.140416][T18852] usb 3-1: can't set config #0, error -71 [ 1195.186137][T18852] usb 3-1: USB disconnect, device number 2 [ 1195.276066][T21086] loop2: detected capacity change from 0 to 512 [ 1195.723714][T21086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.842606][T21086] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.566512][T21095] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 66 vs 96 free clusters [ 1196.608453][T21095] Quota error (device loop2): write_blk: dquota write failed [ 1196.625836][T21095] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1196.647999][T21095] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1196.685247][T21095] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.4290: Failed to acquire dquot type 1 [ 1196.856178][T14329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.009251][T21114] FAULT_INJECTION: forcing a failure. [ 1197.009251][T21114] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.021908][T21114] CPU: 1 PID: 21114 Comm: syz.5.4296 Not tainted syzkaller #0 [ 1197.029485][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1197.039558][T21114] Call Trace: [ 1197.042834][T21114] [ 1197.045758][T21114] dump_stack_lvl+0x18c/0x250 [ 1197.050469][T21114] ? show_regs_print_info+0x20/0x20 [ 1197.055666][T21114] ? load_image+0x420/0x420 [ 1197.060176][T21114] ? _raw_write_lock_irq+0xbb/0xf0 [ 1197.065293][T21114] should_fail_ex+0x394/0x4c0 [ 1197.069975][T21114] should_failslab+0x9/0x20 [ 1197.074479][T21114] slab_pre_alloc_hook+0x59/0x300 [ 1197.079496][T21114] ? netlink_table_grab+0x259/0x2e0 [ 1197.084692][T21114] ? netlink_realloc_groups+0x118/0x320 [ 1197.090233][T21114] ? netlink_realloc_groups+0x118/0x320 [ 1197.095772][T21114] __kmem_cache_alloc_node+0x53/0x250 [ 1197.101149][T21114] ? netlink_realloc_groups+0x118/0x320 [ 1197.106691][T21114] __kmalloc_node_track_caller+0xa4/0x230 [ 1197.112440][T21114] krealloc+0x86/0x120 [ 1197.116516][T21114] netlink_realloc_groups+0x118/0x320 [ 1197.121919][T21114] ? aa_sk_perm+0x83c/0x970 [ 1197.126448][T21114] netlink_bind+0x2ab/0xd30 [ 1197.130965][T21114] ? netlink_release+0x1a70/0x1a70 [ 1197.136082][T21114] ? __might_fault+0xaa/0x120 [ 1197.140759][T21114] ? bpf_lsm_socket_bind+0x9/0x10 [ 1197.145788][T21114] ? security_socket_bind+0x80/0xa0 [ 1197.150994][T21114] __sys_bind+0x2f0/0x3f0 [ 1197.155326][T21114] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1197.160625][T21114] __x64_sys_bind+0x7a/0x90 [ 1197.165125][T21114] do_syscall_64+0x55/0xb0 [ 1197.169535][T21114] ? clear_bhb_loop+0x40/0x90 [ 1197.174206][T21114] ? clear_bhb_loop+0x40/0x90 [ 1197.178877][T21114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.184771][T21114] RIP: 0033:0x7fd65159e2d9 [ 1197.189181][T21114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.208784][T21114] RSP: 002b:00007fd6523d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1197.217190][T21114] RAX: ffffffffffffffda RBX: 00007fd651826180 RCX: 00007fd65159e2d9 [ 1197.225153][T21114] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000004 [ 1197.233112][T21114] RBP: 00007fd651635888 R08: 0000000000000000 R09: 0000000000000000 [ 1197.241094][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.249078][T21114] R13: 00007fd651826218 R14: 00007fd651826180 R15: 00007ffc7773e458 [ 1197.257070][T21114] [ 1197.885352][T21122] loop5: detected capacity change from 0 to 2048 [ 1197.995160][T21122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1198.091613][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.325135][T21137] fuse: Bad value for 'fd' [ 1200.522380][T21142] loop5: detected capacity change from 0 to 40427 [ 1200.560132][T21142] F2FS-fs (loop5): Wrong segment_count / block_count (64 > 16384) [ 1200.582865][T21142] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1200.611055][T21142] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1200.772739][T21142] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1200.803256][T21142] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1200.978761][T14544] syz-executor: attempt to access beyond end of device [ 1200.978761][T14544] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1201.029872][T14544] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1201.286472][T21154] loop4: detected capacity change from 0 to 2048 [ 1201.351569][T21154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.550964][T14855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.790263][T21162] loop2: detected capacity change from 0 to 512 [ 1201.872847][T21162] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1201.898558][T21162] FAT-fs (loop2): Filesystem has been set read-only [ 1201.908584][T21162] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 1202.048928][T21165] tipc: New replicast peer: 127.0.0.1 [ 1202.056510][T21165] tipc: Enabled bearer , priority 10 [ 1207.085172][T21190] loop4: detected capacity change from 0 to 2048 [ 1207.173518][T21050] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1207.404875][T21190] loop4: detected capacity change from 0 to 128 [ 1212.238848][T21219] loop5: detected capacity change from 0 to 16 [ 1212.259037][T21220] ip_tables: iptables: counters copy to user failed while replacing table [ 1213.185817][T21219] erofs: (device loop5): mounted with root inode @ nid 36. [ 1213.254119][T21219] syz.5.4321: attempt to access beyond end of device [ 1213.254119][T21219] loop5: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1213.275659][T21219] syz.5.4321: attempt to access beyond end of device [ 1213.275659][T21219] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1213.549498][T21219] syz.5.4321: attempt to access beyond end of device [ 1213.549498][T21219] loop5: rw=524288, sector=1342177304, nr_sectors = 2160 limit=16 [ 1213.566884][T21219] syz.5.4321: attempt to access beyond end of device [ 1213.566884][T21219] loop5: rw=524288, sector=1342179464, nr_sectors = 368 limit=16 [ 1213.809452][T21213] syz.5.4321: attempt to access beyond end of device [ 1213.809452][T21213] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1213.829141][T21213] syz.5.4321: attempt to access beyond end of device [ 1213.829141][T21213] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1213.845114][T21213] syz.5.4321: attempt to access beyond end of device [ 1213.845114][T21213] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1213.861214][T21213] syz.5.4321: attempt to access beyond end of device [ 1213.861214][T21213] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1213.876734][T21213] syz.5.4321: attempt to access beyond end of device [ 1213.876734][T21213] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1213.891743][T21213] syz.5.4321: attempt to access beyond end of device [ 1213.891743][T21213] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1214.139007][ T28] audit: type=1800 audit(1791948541.852:552): pid=21219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4321" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 1215.117079][T21224] loop4: detected capacity change from 0 to 256 [ 1218.086611][T21243] loop5: detected capacity change from 0 to 2048 [ 1223.864994][T14333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1223.878210][T14333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1223.886606][T14333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1223.900213][T14333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1223.907987][T14333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1223.915502][T14333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1225.447789][T21269] chnl_net:caif_netlink_parms(): no params data found [ 1225.735576][T21290] fuse: Bad value for 'fd' [ 1225.932463][T21269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.995181][T21269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.037850][T21269] bridge_slave_0: entered allmulticast mode [ 1226.045197][T21269] bridge_slave_0: entered promiscuous mode [ 1226.067783][T14333] Bluetooth: hci3: command tx timeout [ 1226.136917][T21269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.149780][T21269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.157042][T21269] bridge_slave_1: entered allmulticast mode [ 1226.165918][T21269] bridge_slave_1: entered promiscuous mode [ 1226.389660][T21269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.464245][T21269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.624722][T21269] team0: Port device team_slave_0 added [ 1226.633528][T21269] team0: Port device team_slave_1 added [ 1226.664146][T21269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.687865][T21269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.747664][T21269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.772399][T21269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.793614][T21269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.847652][T21269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.158129][T21297] loop5: detected capacity change from 0 to 40427 [ 1227.175879][T21297] F2FS-fs (loop5): invalid crc value [ 1227.195859][T21269] hsr_slave_0: entered promiscuous mode [ 1227.235537][T21269] hsr_slave_1: entered promiscuous mode [ 1227.258365][T21269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.286280][T21269] Cannot create hsr debugfs directory [ 1227.316730][T21297] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1227.368963][T21297] F2FS-fs (loop5): Start checkpoint disabled! [ 1227.387774][T21297] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1228.699091][T13336] Bluetooth: hci3: command tx timeout [ 1229.275043][T11902] bio_check_eod: 50 callbacks suppressed [ 1229.275059][T11902] kworker/u4:22: attempt to access beyond end of device [ 1229.275059][T11902] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1229.435749][T11902] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1229.463693][T11902] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1229.812535][T21197] tipc: Resetting bearer [ 1230.243505][T21312] cgroup: release_agent respecified [ 1230.760947][T21197] tipc: Disabling bearer [ 1230.777841][T13336] Bluetooth: hci3: command tx timeout [ 1230.954104][T21269] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1231.031421][T21269] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1231.092676][T21269] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1231.130006][T21269] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1231.627328][T21269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.696712][T21269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.745781][T11572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.753033][T11572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.822283][T11572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.829537][T11572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.013357][T21320] loop4: detected capacity change from 0 to 256 [ 1232.079724][T21320] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1232.524768][T21328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1232.540483][T21328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1232.858497][T13336] Bluetooth: hci3: command tx timeout [ 1232.900358][ T3510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.392033][ T3510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.493560][T21269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.614104][ T3510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.823739][ T3510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.480822][T21335] loop5: detected capacity change from 0 to 128 [ 1234.543190][T21335] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1234.586500][T21335] ext4 filesystem being mounted at /404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1234.619220][ T3510] tipc: Disabling bearer [ 1234.632803][ T3510] tipc: Left network mode [ 1235.145137][T21269] veth0_vlan: entered promiscuous mode [ 1235.369379][T21269] veth1_vlan: entered promiscuous mode [ 1235.540556][T14544] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1236.306606][T21364] xt_hashlimit: size too large, truncated to 1048576 [ 1237.259604][T21269] veth0_macvtap: entered promiscuous mode [ 1237.317426][T21269] veth1_macvtap: entered promiscuous mode [ 1237.595016][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.788018][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.822928][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.833594][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.851474][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.862145][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.965063][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.146544][T21377] cgroup: release_agent respecified [ 1238.284287][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.519550][T21269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.580250][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.657236][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.711206][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.757734][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.809147][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.876320][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.887904][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.904387][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.954934][T21269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.007701][T21269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.073808][T21269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.264171][T21269] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.324740][T21269] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.372339][T21269] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.432283][T21269] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.918105][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.941598][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.016257][ T3510] hsr_slave_0: left promiscuous mode [ 1240.058051][ T3510] hsr_slave_1: left promiscuous mode [ 1240.077981][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.095544][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.148529][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.155980][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.238130][ T3510] veth1_macvtap: left promiscuous mode [ 1240.243714][ T3510] veth0_macvtap: left promiscuous mode [ 1240.257803][ T3510] veth1_vlan: left promiscuous mode [ 1240.267961][ T3510] veth0_vlan: left promiscuous mode [ 1240.566983][ T3510] bond3 (unregistering): Released all slaves [ 1240.611269][ T3510] bond2 (unregistering): Released all slaves [ 1240.661907][ T3510] bond1 (unregistering): Released all slaves [ 1242.143610][T21410] loop5: detected capacity change from 0 to 256 [ 1242.168678][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 1242.271890][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 1242.560805][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.253982][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.477343][T21418] 9pnet_fd: Insufficient options for proto=fd [ 1244.556875][T21418] loop5: detected capacity change from 0 to 2048 [ 1244.721239][T21337] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1244.761197][T21418] loop5: detected capacity change from 0 to 128 [ 1244.761336][T21337] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1245.258997][ T3510] bond0 (unregistering): Released all slaves [ 1245.529980][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.568033][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.613682][T21435] tipc: Enabling of bearer rejected, already enabled [ 1245.997004][ T3510] IPVS: stop unused estimator thread 0... [ 1246.116573][T21454] 9pnet_fd: Insufficient options for proto=fd [ 1246.183694][T21454] loop6: detected capacity change from 0 to 2048 [ 1247.161289][T21484] loop6: detected capacity change from 0 to 256 [ 1247.205141][T21484] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1247.476347][T21466] loop4: detected capacity change from 0 to 40427 [ 1247.497241][T21466] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1247.512332][T21466] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1247.528845][T21466] F2FS-fs (loop4): invalid crc value [ 1247.839958][T21496] loop6: detected capacity change from 0 to 16 [ 1247.850511][T21496] erofs: (device loop6): mounted with root inode @ nid 36. [ 1247.861126][T21496] syz.6.4386: attempt to access beyond end of device [ 1247.861126][T21496] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1247.876058][T21496] syz.6.4386: attempt to access beyond end of device [ 1247.876058][T21496] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1247.892606][ T28] audit: type=1800 audit(1791948576.442:553): pid=21496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4386" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1247.905161][T21496] syz.6.4386: attempt to access beyond end of device [ 1247.905161][T21496] loop6: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 1247.913186][T21490] syz.6.4386: attempt to access beyond end of device [ 1247.913186][T21490] loop6: rw=524288, sector=1342179832, nr_sectors = 40 limit=16 [ 1247.934202][T21489] syz.6.4386: attempt to access beyond end of device [ 1247.934202][T21489] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1247.941063][T21490] syz.6.4386: attempt to access beyond end of device [ 1247.941063][T21490] loop6: rw=0, sector=1342179840, nr_sectors = 8 limit=16 [ 1247.954875][T21489] syz.6.4386: attempt to access beyond end of device [ 1247.954875][T21489] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1247.968585][T21490] syz.6.4386: attempt to access beyond end of device [ 1247.968585][T21490] loop6: rw=0, sector=1342179840, nr_sectors = 8 limit=16 [ 1247.982672][T21489] syz.6.4386: attempt to access beyond end of device [ 1247.982672][T21489] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1247.996321][T21490] syz.6.4386: attempt to access beyond end of device [ 1247.996321][T21490] loop6: rw=0, sector=1342179840, nr_sectors = 8 limit=16 [ 1248.137477][T21466] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1248.147871][T21466] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1248.308706][ T28] audit: type=1800 audit(1791948576.852:554): pid=21466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4380" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1248.313931][T21505] 9pnet_fd: Insufficient options for proto=fd [ 1248.425132][T21505] loop6: detected capacity change from 0 to 2048 [ 1248.605277][T21337] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1248.617531][T21505] loop6: detected capacity change from 0 to 128 [ 1250.850956][T14855] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1250.868825][T14855] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1254.767244][T21550] cgroup: release_agent respecified [ 1258.278880][T14333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1258.290768][T14333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1258.302549][T14333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1258.311866][T14333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1258.320589][T14333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1258.329320][T14333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1259.472649][T21573] chnl_net:caif_netlink_parms(): no params data found [ 1259.513599][T21604] dccp_invalid_packet: pskb_may_pull failed [ 1259.551230][T13335] tipc: Resetting bearer [ 1260.019589][T13335] tipc: Disabling bearer [ 1261.115999][T21613] loop4: detected capacity change from 0 to 16 [ 1261.157669][T14333] Bluetooth: hci4: command tx timeout [ 1261.176048][T21613] erofs: (device loop4): mounted with root inode @ nid 36. [ 1261.213650][T21613] bio_check_eod: 56 callbacks suppressed [ 1261.213688][T21613] syz.4.4408: attempt to access beyond end of device [ 1261.213688][T21613] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1261.234878][T21613] syz.4.4408: attempt to access beyond end of device [ 1261.234878][T21613] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1261.375657][T21613] syz.4.4408: attempt to access beyond end of device [ 1261.375657][T21613] loop4: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 1261.735544][ T28] audit: type=1800 audit(1791948589.802:555): pid=21613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4408" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1262.437854][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.157613][T14333] Bluetooth: hci4: command tx timeout [ 1264.640467][T21573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.675111][T21573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.682712][T21573] bridge_slave_0: entered allmulticast mode [ 1264.702503][T21573] bridge_slave_0: entered promiscuous mode [ 1264.898011][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.244918][T14515] IPVS: starting estimator thread 0... [ 1265.389347][T21640] IPVS: using max 17 ests per chain, 40800 per kthread [ 1265.560533][T21573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.598834][T21573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.607271][T21573] bridge_slave_1: entered allmulticast mode [ 1265.642775][T21573] bridge_slave_1: entered promiscuous mode [ 1266.250356][T13336] Bluetooth: hci4: command tx timeout [ 1267.130601][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.201505][T21573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.233615][T21573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.544191][T21666] loop6: detected capacity change from 0 to 16 [ 1267.613084][T21666] erofs: (device loop6): mounted with root inode @ nid 36. [ 1267.637124][T21666] syz.6.4420: attempt to access beyond end of device [ 1267.637124][T21666] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1267.652613][T21666] syz.6.4420: attempt to access beyond end of device [ 1267.652613][T21666] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1267.700936][T21665] syz.6.4420: attempt to access beyond end of device [ 1267.700936][T21665] loop6: rw=524288, sector=1342180720, nr_sectors = 64 limit=16 [ 1267.712139][T21666] syz.6.4420: attempt to access beyond end of device [ 1267.712139][T21666] loop6: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 1267.715483][T21665] syz.6.4420: attempt to access beyond end of device [ 1267.715483][T21665] loop6: rw=0, sector=1342180728, nr_sectors = 32 limit=16 [ 1267.735723][T21660] syz.6.4420: attempt to access beyond end of device [ 1267.735723][T21660] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1267.743721][T21665] syz.6.4420: attempt to access beyond end of device [ 1267.743721][T21665] loop6: rw=0, sector=1342180728, nr_sectors = 32 limit=16 [ 1267.757692][T21660] syz.6.4420: attempt to access beyond end of device [ 1267.757692][T21660] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1267.771316][T21665] syz.6.4420: attempt to access beyond end of device [ 1267.771316][T21665] loop6: rw=0, sector=1342180728, nr_sectors = 32 limit=16 [ 1267.771458][T21665] syz.6.4420: attempt to access beyond end of device [ 1267.771458][T21665] loop6: rw=0, sector=1342180728, nr_sectors = 32 limit=16 [ 1267.816192][ T28] audit: type=1800 audit(1791948596.222:556): pid=21666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4420" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1267.874563][T21573] team0: Port device team_slave_0 added [ 1267.887423][T21573] team0: Port device team_slave_1 added [ 1267.946251][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.299359][T13336] Bluetooth: hci4: command tx timeout [ 1268.363517][T21573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.388872][T21573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.561330][T21573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.853542][T21573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.522082][T21573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.775791][T21573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.101726][T21573] hsr_slave_0: entered promiscuous mode [ 1270.390524][T21698] cgroup: release_agent respecified [ 1270.493965][T21573] hsr_slave_1: entered promiscuous mode [ 1270.743892][T21699] loop4: detected capacity change from 0 to 256 [ 1270.763057][T21573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1271.016015][T21573] Cannot create hsr debugfs directory [ 1272.174989][T21699] exfat: Deprecated parameter 'utf8' [ 1273.167812][T21699] exfat: Deprecated parameter 'namecase' [ 1273.181076][ T1144] tipc: Left network mode [ 1273.189125][T21699] exfat: Deprecated parameter 'namecase' [ 1273.195208][T21699] exfat: Deprecated parameter 'namecase' [ 1273.857026][T21699] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1275.513206][T21729] loop5: detected capacity change from 0 to 128 [ 1275.561890][T21729] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1275.712324][ T28] audit: type=1326 audit(1791948604.252:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1275.881232][ T28] audit: type=1326 audit(1791948604.252:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1276.032489][ T28] audit: type=1326 audit(1791948604.252:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1276.217181][ T28] audit: type=1326 audit(1791948604.252:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1276.326111][ T28] audit: type=1326 audit(1791948604.312:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1276.508728][ T28] audit: type=1326 audit(1791948604.312:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd65159e042 code=0x7ffc0000 [ 1277.077009][ T28] audit: type=1326 audit(1791948605.622:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd65159e0d7 code=0x7ffc0000 [ 1277.185489][T21573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1277.196899][ T28] audit: type=1326 audit(1791948605.622:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd65155afd1 code=0x7ffc0000 [ 1277.321432][T21573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1277.414683][ T28] audit: type=1326 audit(1791948605.622:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd65159f0c9 code=0x7ffc0000 [ 1277.439777][ T28] audit: type=1326 audit(1791948605.622:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21728 comm="syz.5.4435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd65155b03b code=0x7ffc0000 [ 1277.489328][T21573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1277.500954][T21729] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 1277.595938][T21729] FAT-fs (loop5): Filesystem has been set read-only [ 1277.781731][T21751] cgroup: release_agent respecified [ 1278.161318][ T1144] hsr_slave_0: left promiscuous mode [ 1278.212510][ T1144] hsr_slave_1: left promiscuous mode [ 1278.232311][T21728] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1278.268328][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.296596][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.390004][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.432153][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.653940][ T1144] veth1_macvtap: left promiscuous mode [ 1278.679168][ T1144] veth0_macvtap: left promiscuous mode [ 1278.705242][ T1144] veth1_vlan: left promiscuous mode [ 1278.727910][ T1144] veth0_vlan: left promiscuous mode [ 1279.619883][ T1144] bond2 (unregistering): Released all slaves [ 1279.652012][ T1144] bond1 (unregistering): Released all slaves [ 1280.118678][T21771] loop6: detected capacity change from 0 to 40427 [ 1280.131178][T21771] F2FS-fs (loop6): invalid crc value [ 1280.167252][T21771] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1280.217971][T21771] F2FS-fs (loop6): Start checkpoint disabled! [ 1280.260435][T21771] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1282.049800][T21780] overlayfs: failed to clone upperpath [ 1282.392706][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 1282.445792][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 1282.897281][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.248968][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.695444][ T1144] bond0 (unregistering): Released all slaves [ 1284.970285][T21792] cgroup: release_agent respecified [ 1285.404044][T21573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1286.313151][T21573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.453918][T21573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.550520][T11893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.557753][T11893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.599521][T11893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.606705][T11893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.116565][ T1144] IPVS: stop unused estimator thread 0... [ 1287.481668][T21573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.595434][T21573] veth0_vlan: entered promiscuous mode [ 1287.634279][T21573] veth1_vlan: entered promiscuous mode [ 1287.745017][T21573] veth0_macvtap: entered promiscuous mode [ 1287.759136][ T3510] bio_check_eod: 54 callbacks suppressed [ 1287.759151][ T3510] kworker/u4:9: attempt to access beyond end of device [ 1287.759151][ T3510] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1287.794387][T21573] veth1_macvtap: entered promiscuous mode [ 1287.839917][ T3510] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1287.852644][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.883056][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.934217][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.968594][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.997654][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.024726][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.062393][T21573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.119292][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.157870][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.197600][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.217656][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.319713][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.364343][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.435759][T21573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1288.552606][T21573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.602470][T21573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.648080][T21573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.656835][T21573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.837114][T11902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.866658][T11902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.903174][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.916157][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.109130][T21863] FAULT_INJECTION: forcing a failure. [ 1291.109130][T21863] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.109215][T21863] CPU: 1 PID: 21863 Comm: syz.4.4459 Not tainted syzkaller #0 [ 1291.109237][T21863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1291.109251][T21863] Call Trace: [ 1291.109260][T21863] [ 1291.109269][T21863] dump_stack_lvl+0x18c/0x250 [ 1291.109299][T21863] ? show_regs_print_info+0x20/0x20 [ 1291.109320][T21863] ? load_image+0x420/0x420 [ 1291.109352][T21863] ? __might_sleep+0xe0/0xe0 [ 1291.109378][T21863] ? __lock_acquire+0x7eb0/0x7eb0 [ 1291.109408][T21863] should_fail_ex+0x394/0x4c0 [ 1291.109444][T21863] should_failslab+0x9/0x20 [ 1291.109472][T21863] slab_pre_alloc_hook+0x59/0x300 [ 1291.109499][T21863] kmem_cache_alloc+0x5a/0x2c0 [ 1291.109527][T21863] ? __kernfs_new_node+0xe5/0x7f0 [ 1291.109564][T21863] __kernfs_new_node+0xe5/0x7f0 [ 1291.109599][T21863] ? kernfs_new_node+0x260/0x260 [ 1291.109643][T21863] ? up_write+0x1be/0x410 [ 1291.109668][T21863] kernfs_new_node+0x14c/0x260 [ 1291.109703][T21863] __kernfs_create_file+0x4b/0x2e0 [ 1291.109727][T21863] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1291.109761][T21863] sysfs_merge_group+0x184/0x320 [ 1291.109786][T21863] ? sysfs_remove_groups+0xa0/0xa0 [ 1291.109807][T21863] ? device_add_attrs+0x725/0x830 [ 1291.109835][T21863] ? device_add_class_symlinks+0x240/0x240 [ 1291.109867][T21863] dpm_sysfs_add+0xd2/0x270 [ 1291.109897][T21863] device_add+0x55c/0xc40 [ 1291.109927][T21863] device_create+0x26a/0x300 [ 1291.109957][T21863] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1291.109986][T21863] ? _raw_spin_unlock+0x40/0x40 [ 1291.110013][T21863] ? root_device_unregister+0x100/0x100 [ 1291.110038][T21863] ? update_attr+0x550/0x730 [ 1291.110072][T21863] ? is_console_locked+0x9/0x20 [ 1291.110096][T21863] ? csi_J+0xa16/0xea0 [ 1291.110123][T21863] vcs_make_sysfs+0x32/0x80 [ 1291.110144][T21863] vc_allocate+0x5a7/0x680 [ 1291.110180][T21863] ? vc_cons_allocated+0x70/0x70 [ 1291.110219][T21863] con_install+0xa0/0x720 [ 1291.110247][T21863] ? mutex_lock_nested+0x20/0x20 [ 1291.110277][T21863] ? show_tty_active+0x30/0x30 [ 1291.110305][T21863] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1291.110337][T21863] tty_init_dev+0xd3/0x4c0 [ 1291.110368][T21863] tty_open+0x7dd/0xcc0 [ 1291.110404][T21863] ? __lock_acquire+0x7eb0/0x7eb0 [ 1291.110433][T21863] ? tty_compat_ioctl+0x8b0/0x8b0 [ 1291.110466][T21863] ? do_raw_spin_unlock+0x121/0x230 [ 1291.110498][T21863] chrdev_open+0x58c/0x600 [ 1291.110527][T21863] ? cd_forget+0x160/0x160 [ 1291.110556][T21863] ? fsnotify_perm+0x3ed/0x5e0 [ 1291.110590][T21863] do_dentry_open+0x880/0x14b0 [ 1291.110621][T21863] ? cd_forget+0x160/0x160 [ 1291.110652][T21863] path_openat+0x284f/0x3270 [ 1291.110705][T21863] ? verify_lock_unused+0x140/0x140 [ 1291.110730][T21863] ? do_filp_open+0x430/0x430 [ 1291.110764][T21863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1291.110800][T21863] do_filp_open+0x1f2/0x430 [ 1291.110829][T21863] ? vfs_tmpfile+0x620/0x620 [ 1291.110879][T21863] ? _raw_spin_unlock+0x28/0x40 [ 1291.110905][T21863] ? alloc_fd+0x590/0x640 [ 1291.110942][T21863] do_sys_openat2+0x134/0x1d0 [ 1291.110972][T21863] ? do_sys_open+0xe0/0xe0 [ 1291.111000][T21863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1291.111029][T21863] ? lock_chain_count+0x20/0x20 [ 1291.111051][T21863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1291.111082][T21863] __x64_sys_openat+0x139/0x160 [ 1291.111115][T21863] do_syscall_64+0x55/0xb0 [ 1291.111135][T21863] ? clear_bhb_loop+0x40/0x90 [ 1291.111155][T21863] ? clear_bhb_loop+0x40/0x90 [ 1291.111184][T21863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.111214][T21863] RIP: 0033:0x7f557915eb0e [ 1291.111235][T21863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1291.111253][T21863] RSP: 002b:00007f5579fcab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1291.111277][T21863] RAX: ffffffffffffffda RBX: 00007f5579fcb6c0 RCX: 00007f557915eb0e [ 1291.111294][T21863] RDX: 0000000000000002 RSI: 00007f5579fcac00 RDI: ffffffffffffff9c [ 1291.111310][T21863] RBP: 00007f5579235888 R08: 0000000000000000 R09: 0000000000000000 [ 1291.111324][T21863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.111338][T21863] R13: 00007f5579426218 R14: 00007f5579426180 R15: 00007ffcf392b878 [ 1291.111372][T21863] [ 1291.128920][T21864] netlink: 'syz.5.4454': attribute type 5 has an invalid length. [ 1293.838353][T21871] loop6: detected capacity change from 0 to 2048 [ 1295.061706][T21887] loop6: detected capacity change from 0 to 40427 [ 1295.170728][T21887] F2FS-fs (loop6): invalid crc value [ 1295.182872][T21887] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1295.267629][T21887] F2FS-fs (loop6): Start checkpoint disabled! [ 1295.317016][T21887] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1298.534096][T21908] loop4: detected capacity change from 0 to 4096 [ 1298.547119][T21908] EXT4-fs: Ignoring removed orlov option [ 1298.949119][T21908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.121635][ T3534] kworker/u4:10: attempt to access beyond end of device [ 1299.121635][ T3534] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1299.174188][ T3534] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1299.333047][ T3534] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1299.342194][T14855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.559803][T21926] FAULT_INJECTION: forcing a failure. [ 1299.559803][T21926] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1299.597952][T21926] CPU: 1 PID: 21926 Comm: syz.4.4473 Not tainted syzkaller #0 [ 1299.605475][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1299.615557][T21926] Call Trace: [ 1299.618854][T21926] [ 1299.621808][T21926] dump_stack_lvl+0x18c/0x250 [ 1299.626523][T21926] ? show_regs_print_info+0x20/0x20 [ 1299.631755][T21926] ? load_image+0x420/0x420 [ 1299.636294][T21926] ? __key_instantiate_and_link+0x411/0x4c0 [ 1299.642224][T21926] ? key_instantiate_and_link+0x490/0x490 [ 1299.647989][T21926] should_fail_ex+0x394/0x4c0 [ 1299.652714][T21926] get_futex_key+0x136/0x1030 [ 1299.657437][T21926] ? futex_setup_timer+0xc0/0xc0 [ 1299.662412][T21926] futex_wake+0x127/0x4f0 [ 1299.666775][T21926] ? futex_wake_mark+0x150/0x150 [ 1299.671752][T21926] ? __se_sys_keyctl+0xa6d/0xb50 [ 1299.676721][T21926] ? __se_sys_keyctl+0xa6d/0xb50 [ 1299.681694][T21926] ? __se_sys_keyctl+0xa6d/0xb50 [ 1299.686667][T21926] do_futex+0x35d/0x3e0 [ 1299.690860][T21926] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1299.696792][T21926] __se_sys_futex+0x3a9/0x440 [ 1299.701506][T21926] ? __x64_sys_futex+0xf0/0xf0 [ 1299.706304][T21926] ? __x64_sys_futex+0x21/0xf0 [ 1299.711094][T21926] do_syscall_64+0x55/0xb0 [ 1299.715519][T21926] ? clear_bhb_loop+0x40/0x90 [ 1299.720222][T21926] ? clear_bhb_loop+0x40/0x90 [ 1299.724899][T21926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1299.730802][T21926] RIP: 0033:0x7f557919e2d9 [ 1299.735218][T21926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.754827][T21926] RSP: 002b:00007f557a00d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1299.763244][T21926] RAX: ffffffffffffffda RBX: 00007f5579425fa8 RCX: 00007f557919e2d9 [ 1299.771302][T21926] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5579425fac [ 1299.779270][T21926] RBP: 00007f5579425fa0 R08: 000000000074598b R09: 0000000000000000 [ 1299.787236][T21926] R10: 000000000eb3dab4 R11: 0000000000000246 R12: 0000000000000000 [ 1299.795203][T21926] R13: 00007f5579426038 R14: 00007ffcf392b790 R15: 00007ffcf392b878 [ 1299.803210][T21926] [ 1300.307121][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.313581][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.483552][T22000] veth0_vlan: entered allmulticast mode [ 1305.900409][T21970] loop6: detected capacity change from 0 to 131072 [ 1305.920060][T21970] F2FS-fs (loop6): Test dummy encryption mode enabled [ 1305.945390][T21970] F2FS-fs (loop6): invalid crc value [ 1305.987031][T21970] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1307.462445][T22022] cgroup: release_agent respecified [ 1307.999159][T21970] F2FS-fs (loop6): access invalid blkaddr:0 [ 1308.038344][T21970] CPU: 1 PID: 21970 Comm: syz.6.4481 Not tainted syzkaller #0 [ 1308.045877][T21970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1308.055949][T21970] Call Trace: [ 1308.059243][T21970] [ 1308.062186][T21970] dump_stack_lvl+0x18c/0x250 [ 1308.066886][T21970] ? show_regs_print_info+0x20/0x20 [ 1308.072113][T21970] ? __up_read+0x2b8/0x6b0 [ 1308.076633][T21970] ? __lock_acquire+0x7eb0/0x7eb0 [ 1308.081678][T21970] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 1308.087095][T21970] sanity_check_extent_cache+0xfc/0x1f0 [ 1308.092687][T21970] f2fs_iget+0x336f/0x47d0 [ 1308.097160][T21970] f2fs_fill_super+0x4853/0x6b60 [ 1308.102180][T21970] ? kill_f2fs_super+0x3f0/0x3f0 [ 1308.107139][T21970] ? down_write+0x16e/0x200 [ 1308.111680][T21970] ? down_read_killable+0x340/0x340 [ 1308.116910][T21970] ? setup_bdev_super+0x56b/0x660 [ 1308.121959][T21970] mount_bdev+0x21c/0x2c0 [ 1308.126309][T21970] ? kfree+0x31/0x1a0 [ 1308.130312][T21970] ? kill_f2fs_super+0x3f0/0x3f0 [ 1308.135266][T21970] ? get_tree_bdev+0x520/0x520 [ 1308.140050][T21970] ? vfs_parse_fs_param+0x420/0x420 [ 1308.145279][T21970] legacy_get_tree+0xea/0x180 [ 1308.149986][T21970] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 1308.156177][T21970] vfs_get_tree+0x8c/0x280 [ 1308.160626][T21970] do_new_mount+0x24a/0xa40 [ 1308.165162][T21970] __se_sys_mount+0x2e7/0x3d0 [ 1308.169879][T21970] ? __x64_sys_mount+0xc0/0xc0 [ 1308.174675][T21970] ? lockdep_hardirqs_on+0x98/0x150 [ 1308.179894][T21970] ? __x64_sys_mount+0x20/0xc0 [ 1308.184680][T21970] do_syscall_64+0x55/0xb0 [ 1308.189118][T21970] ? clear_bhb_loop+0x40/0x90 [ 1308.193818][T21970] ? clear_bhb_loop+0x40/0x90 [ 1308.198629][T21970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1308.204559][T21970] RIP: 0033:0x7f6b20f9f54a [ 1308.208999][T21970] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.228637][T21970] RSP: 002b:00007f6b21dcfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1308.237086][T21970] RAX: ffffffffffffffda RBX: 00007f6b21dcfee0 RCX: 00007f6b20f9f54a [ 1308.245090][T21970] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f6b21dcfea0 [ 1308.253094][T21970] RBP: 0000200000000000 R08: 00007f6b21dcfee0 R09: 0000000000000010 [ 1308.261096][T21970] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000040 [ 1308.269101][T21970] R13: 00007f6b21dcfea0 R14: 00000000000105df R15: 0000200000000240 [ 1308.277110][T21970] [ 1308.380286][T21970] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 1308.396277][T21970] F2FS-fs (loop6): Failed to read root inode [ 1314.409755][T22081] cgroup: release_agent respecified [ 1317.056298][T22084] FAULT_INJECTION: forcing a failure. [ 1317.056298][T22084] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.069732][T22084] CPU: 1 PID: 22084 Comm: syz.6.4503 Not tainted syzkaller #0 [ 1317.077212][T22084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1317.087287][T22084] Call Trace: [ 1317.090583][T22084] [ 1317.093532][T22084] dump_stack_lvl+0x18c/0x250 [ 1317.098231][T22084] ? show_regs_print_info+0x20/0x20 [ 1317.103446][T22084] ? load_image+0x420/0x420 [ 1317.107993][T22084] should_fail_ex+0x394/0x4c0 [ 1317.112704][T22084] ? __sigqueue_alloc+0x32/0x520 [ 1317.117663][T22084] should_failslab+0x9/0x20 [ 1317.122196][T22084] slab_pre_alloc_hook+0x59/0x300 [ 1317.127230][T22084] ? __lock_acquire+0x7eb0/0x7eb0 [ 1317.132260][T22084] ? __sigqueue_alloc+0x32/0x520 [ 1317.137196][T22084] kmem_cache_alloc+0x5a/0x2c0 [ 1317.141984][T22084] ? __sigqueue_alloc+0x40c/0x520 [ 1317.147026][T22084] ? __sigqueue_alloc+0x32/0x520 [ 1317.151960][T22084] __sigqueue_alloc+0x40c/0x520 [ 1317.156812][T22084] __send_signal_locked+0x22f/0xe00 [ 1317.162017][T22084] do_notify_parent+0xb26/0xd10 [ 1317.166871][T22084] ? trace_signal_generate+0x1c0/0x1c0 [ 1317.172350][T22084] ? __lock_acquire+0x7eb0/0x7eb0 [ 1317.177389][T22084] release_task+0x1227/0x1690 [ 1317.182083][T22084] ? do_exit+0x1888/0x2530 [ 1317.186500][T22084] ? delayed_put_task_struct+0x2a0/0x2a0 [ 1317.192138][T22084] ? _raw_write_lock_irq+0xbb/0xf0 [ 1317.197272][T22084] ? _raw_write_lock_irqsave+0x100/0x100 [ 1317.202927][T22084] ? _raw_write_unlock_irq+0x23/0x50 [ 1317.208229][T22084] ? lockdep_hardirqs_on+0x98/0x150 [ 1317.213423][T22084] do_exit+0x1888/0x2530 [ 1317.217673][T22084] ? put_task_struct+0xc0/0xc0 [ 1317.222437][T22084] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1317.228409][T22084] ? get_signal+0x100e/0x1390 [ 1317.233081][T22084] ? lock_chain_count+0x20/0x20 [ 1317.237948][T22084] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1317.242998][T22084] do_group_exit+0x22d/0x2f0 [ 1317.247597][T22084] ? lockdep_hardirqs_on+0x98/0x150 [ 1317.252801][T22084] get_signal+0x12a6/0x1390 [ 1317.257314][T22084] arch_do_signal_or_restart+0xc2/0x7b0 [ 1317.262861][T22084] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1317.268747][T22084] ? get_sigframe_size+0x20/0x20 [ 1317.273695][T22084] ? exit_to_user_mode_loop+0x3b/0x110 [ 1317.279156][T22084] exit_to_user_mode_loop+0x70/0x110 [ 1317.284437][T22084] exit_to_user_mode_prepare+0xee/0x180 [ 1317.289979][T22084] syscall_exit_to_user_mode+0x1a/0x50 [ 1317.295437][T22084] do_syscall_64+0x61/0xb0 [ 1317.299852][T22084] ? clear_bhb_loop+0x40/0x90 [ 1317.304521][T22084] ? clear_bhb_loop+0x40/0x90 [ 1317.309217][T22084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.315111][T22084] RIP: 0033:0x7f6b20f9e2d9 [ 1317.319520][T22084] Code: Unable to access opcode bytes at 0x7f6b20f9e2af. [ 1317.326530][T22084] RSP: 002b:00007f6b21d8e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1317.334958][T22084] RAX: fffffffffffffe00 RBX: 00007f6b21226188 RCX: 00007f6b20f9e2d9 [ 1317.342924][T22084] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6b21226188 [ 1317.350890][T22084] RBP: 00007f6b21226180 R08: 0000000000000000 R09: 0000000000000000 [ 1317.358851][T22084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.366833][T22084] R13: 00007f6b21226218 R14: 00007ffc9b720170 R15: 00007ffc9b720258 [ 1317.374818][T22084] [ 1317.848641][T22102] loop6: detected capacity change from 0 to 4096 [ 1317.856097][T22102] EXT4-fs: Ignoring removed orlov option [ 1317.935378][T22102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.549297][T21269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.547897][T22147] cgroup: release_agent respecified [ 1322.730931][T22151] netlink: 'syz.5.4510': attribute type 5 has an invalid length. [ 1324.191977][T14855] tipc: Resetting bearer [ 1324.391688][T14333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1324.480449][T14333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1324.493130][T14333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1324.504363][T14333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1324.512461][T14333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1324.520050][T14333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1324.591293][T14855] syz_tun (unregistering): left allmulticast mode [ 1324.646236][T14855] tipc: Disabling bearer [ 1324.893368][ T3510] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.044733][ T3510] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.268209][ T3510] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.800355][ T3510] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.175237][T22200] netlink: 'syz.6.4525': attribute type 5 has an invalid length. [ 1326.207597][T22159] chnl_net:caif_netlink_parms(): no params data found [ 1326.725253][T14333] Bluetooth: hci0: command tx timeout [ 1326.948153][ T3510] tipc: Left network mode [ 1327.627900][T22159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.643504][T22159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.653625][T22159] bridge_slave_0: entered allmulticast mode [ 1327.665688][T22159] bridge_slave_0: entered promiscuous mode [ 1327.712887][T22159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.728214][T22159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.741396][T22159] bridge_slave_1: entered allmulticast mode [ 1327.757720][T22159] bridge_slave_1: entered promiscuous mode [ 1327.959426][T22159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.992137][T22159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.347146][T22237] fuse: Bad value for 'fd' [ 1328.564652][T22159] team0: Port device team_slave_0 added [ 1328.631689][T22159] team0: Port device team_slave_1 added [ 1328.777798][T14333] Bluetooth: hci0: command tx timeout [ 1328.922382][T22159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.939882][T22159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.978065][T22159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.047446][T22159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.055740][T22159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.197485][T22159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.195534][T22159] hsr_slave_0: entered promiscuous mode [ 1330.234879][T22159] hsr_slave_1: entered promiscuous mode [ 1330.268200][T22159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1330.282597][T22159] Cannot create hsr debugfs directory [ 1330.371825][ T3510] hsr_slave_0: left promiscuous mode [ 1330.387120][ T3510] hsr_slave_1: left promiscuous mode [ 1330.394844][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.415546][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.438598][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.465659][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.498776][ T3510] bridge_slave_1: left allmulticast mode [ 1330.512896][ T3510] bridge_slave_1: left promiscuous mode [ 1330.534928][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.546157][ T3510] bridge_slave_0: left allmulticast mode [ 1330.557658][ T3510] bridge_slave_0: left promiscuous mode [ 1330.565866][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.723069][ T3510] veth1_macvtap: left promiscuous mode [ 1330.737917][ T3510] veth0_macvtap: left promiscuous mode [ 1330.752246][ T3510] veth1_vlan: left promiscuous mode [ 1330.773512][ T3510] veth0_vlan: left promiscuous mode [ 1330.860664][T14333] Bluetooth: hci0: command tx timeout [ 1331.165734][ T3510] bond4 (unregistering): Released all slaves [ 1331.239839][ T3510] bond3 (unregistering): Released all slaves [ 1331.334246][ T3510] bond2 (unregistering): Released all slaves [ 1331.396697][ T3510] bond1 (unregistering): Released all slaves [ 1332.662121][T22286] loop6: detected capacity change from 0 to 512 [ 1332.927859][T22286] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1332.937900][T14333] Bluetooth: hci0: command tx timeout [ 1332.952000][T22286] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 1332.963148][T22286] System zones: 0-1, 15-15, 18-18, 34-34 [ 1332.969645][T22286] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1332.976275][T22286] __quota_error: 131 callbacks suppressed [ 1332.976289][T22286] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1333.001394][T22286] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1333.031386][T22286] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1333.040229][T22286] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.4540: bad orphan inode 16 [ 1333.058181][T22286] ext4_test_bit(bit=15, block=18) = 1 [ 1333.064103][T22286] is_bad_inode(inode)=0 [ 1333.076706][T22286] NEXT_ORPHAN(inode)=0 [ 1333.081082][T22286] max_ino=32 [ 1333.084314][T22286] i_nlink=2 [ 1333.089439][T22286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1333.324319][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 1333.584185][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 1333.753043][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.882012][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.745110][T22294] fuse: Bad value for 'fd' [ 1335.378702][ T3510] bond0 (unregistering): Released all slaves [ 1335.640128][T21269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.897416][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4550'. [ 1336.090908][T22323] loop6: detected capacity change from 0 to 512 [ 1336.197723][T22323] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1336.243269][T22323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 1336.252183][T22323] System zones: 0-1, 15-15, 18-18, 34-34 [ 1336.258640][T22323] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1336.265203][T22323] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1336.276742][T22323] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1336.298034][T22323] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1336.337912][T22323] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.4552: bad orphan inode 16 [ 1336.363138][ T3510] IPVS: stop unused estimator thread 0... [ 1336.372111][T22159] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1336.425393][T22323] ext4_test_bit(bit=15, block=18) = 1 [ 1336.431100][T22323] is_bad_inode(inode)=0 [ 1336.435286][T22323] NEXT_ORPHAN(inode)=0 [ 1336.453534][T22159] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1336.460877][T22323] max_ino=32 [ 1336.464124][T22323] i_nlink=2 [ 1336.491130][T22159] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1336.492374][T22323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1336.516090][T22159] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1336.574839][T22323] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 1336.652578][T21269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.779452][T22159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.866913][T22159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.920119][T11893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.927300][T11893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.961968][T11893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.969201][T11893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.670757][T22159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.301008][T22159] veth0_vlan: entered promiscuous mode [ 1338.335354][T22377] loop6: detected capacity change from 0 to 256 [ 1338.356581][T22159] veth1_vlan: entered promiscuous mode [ 1338.496831][T22159] veth0_macvtap: entered promiscuous mode [ 1338.532731][T22159] veth1_macvtap: entered promiscuous mode [ 1338.610014][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.621926][T22364] fuse: Bad value for 'fd' [ 1338.635666][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.645765][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.664569][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.675007][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.686091][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.716594][T22159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.760415][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.797599][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.807478][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.857905][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.878613][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.897635][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.920389][T22159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.943063][T22159] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.957609][T22159] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.966348][T22159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.998201][T22159] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.295226][ T9727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.338134][ T9727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.512712][T11900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.532284][T11900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.198906][T22407] loop6: detected capacity change from 0 to 512 [ 1340.353556][T22407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.694526][T21269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.542977][T22433] loop6: detected capacity change from 0 to 16 [ 1341.795043][T22433] erofs: (device loop6): mounted with root inode @ nid 36. [ 1341.820653][T22433] syz.6.4569: attempt to access beyond end of device [ 1341.820653][T22433] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1341.836044][T22433] syz.6.4569: attempt to access beyond end of device [ 1341.836044][T22433] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1341.877848][ T28] audit: type=1800 audit(1791948670.412:698): pid=22433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4569" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1343.538088][T22423] loop7: detected capacity change from 0 to 40427 [ 1343.589148][T22423] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 1343.596416][T22423] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1343.612435][T22423] F2FS-fs (loop7): Image doesn't support compression [ 1343.619678][T22423] F2FS-fs (loop7): Image doesn't support compression [ 1343.630751][T22423] F2FS-fs (loop7): invalid crc value [ 1343.927210][T22423] F2FS-fs (loop7): Start checkpoint disabled! [ 1347.213163][T22480] loop6: detected capacity change from 0 to 128 [ 1347.277290][T22480] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1347.371182][ T28] audit: type=1326 audit(1791948675.922:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1347.437660][ T28] audit: type=1326 audit(1791948675.922:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1347.513821][ T28] audit: type=1326 audit(1791948675.922:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1347.574489][ T28] audit: type=1326 audit(1791948675.922:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1347.638396][ T28] audit: type=1326 audit(1791948675.972:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1347.682943][ T28] audit: type=1326 audit(1791948675.972:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b20f9e042 code=0x7ffc0000 [ 1348.149924][ T28] audit: type=1326 audit(1791948676.702:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6b20f9e0d7 code=0x7ffc0000 [ 1348.244451][ T28] audit: type=1326 audit(1791948676.702:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b20f5afd1 code=0x7ffc0000 [ 1348.302345][ T28] audit: type=1326 audit(1791948676.702:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6b20f9f0c9 code=0x7ffc0000 [ 1348.557822][ T28] audit: type=1326 audit(1791948676.702:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.4578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1348.592003][T13336] Bluetooth: hci3: command 0x0406 tx timeout [ 1349.755113][T22524] netem: change failed [ 1349.774080][T22526] loop6: detected capacity change from 0 to 256 [ 1350.396993][T22534] FAULT_INJECTION: forcing a failure. [ 1350.396993][T22534] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.397027][T22534] CPU: 1 PID: 22534 Comm: syz.7.4591 Not tainted syzkaller #0 [ 1350.397050][T22534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1350.397064][T22534] Call Trace: [ 1350.397073][T22534] [ 1350.397082][T22534] dump_stack_lvl+0x18c/0x250 [ 1350.397113][T22534] ? show_regs_print_info+0x20/0x20 [ 1350.397135][T22534] ? load_image+0x420/0x420 [ 1350.397168][T22534] ? __might_sleep+0xe0/0xe0 [ 1350.397195][T22534] ? __lock_acquire+0x7eb0/0x7eb0 [ 1350.397225][T22534] should_fail_ex+0x394/0x4c0 [ 1350.397262][T22534] should_failslab+0x9/0x20 [ 1350.397290][T22534] slab_pre_alloc_hook+0x59/0x300 [ 1350.397317][T22534] kmem_cache_alloc+0x5a/0x2c0 [ 1350.397344][T22534] ? __kernfs_new_node+0xe5/0x7f0 [ 1350.397376][T22534] __kernfs_new_node+0xe5/0x7f0 [ 1350.397411][T22534] ? kernfs_new_node+0x260/0x260 [ 1350.397453][T22534] ? up_write+0x1be/0x410 [ 1350.397480][T22534] kernfs_new_node+0x14c/0x260 [ 1350.397516][T22534] __kernfs_create_file+0x4b/0x2e0 [ 1350.397541][T22534] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1350.397574][T22534] sysfs_merge_group+0x184/0x320 [ 1350.397610][T22534] ? sysfs_remove_groups+0xa0/0xa0 [ 1350.397630][T22534] ? device_add_attrs+0x725/0x830 [ 1350.397661][T22534] ? device_add_class_symlinks+0x240/0x240 [ 1350.397696][T22534] dpm_sysfs_add+0xd2/0x270 [ 1350.397727][T22534] device_add+0x55c/0xc40 [ 1350.397757][T22534] device_create+0x26a/0x300 [ 1350.397789][T22534] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1350.397819][T22534] ? _raw_spin_unlock+0x40/0x40 [ 1350.397847][T22534] ? root_device_unregister+0x100/0x100 [ 1350.397873][T22534] ? update_attr+0x550/0x730 [ 1350.397908][T22534] ? is_console_locked+0x9/0x20 [ 1350.397932][T22534] ? csi_J+0xa16/0xea0 [ 1350.397961][T22534] vcs_make_sysfs+0x32/0x80 [ 1350.397984][T22534] vc_allocate+0x5a7/0x680 [ 1350.398013][T22534] ? vc_cons_allocated+0x70/0x70 [ 1350.398050][T22534] con_install+0xa0/0x720 [ 1350.398077][T22534] ? mutex_lock_nested+0x20/0x20 [ 1350.398105][T22534] ? show_tty_active+0x30/0x30 [ 1350.398146][T22534] tty_init_dev+0xd3/0x4c0 [ 1350.398177][T22534] tty_open+0x7dd/0xcc0 [ 1350.398213][T22534] ? __lock_acquire+0x7eb0/0x7eb0 [ 1350.398242][T22534] ? tty_compat_ioctl+0x8b0/0x8b0 [ 1350.398275][T22534] ? do_raw_spin_unlock+0x121/0x230 [ 1350.398307][T22534] chrdev_open+0x58c/0x600 [ 1350.398335][T22534] ? cd_forget+0x160/0x160 [ 1350.398366][T22534] ? fsnotify_perm+0x3ed/0x5e0 [ 1350.398399][T22534] do_dentry_open+0x880/0x14b0 [ 1350.398430][T22534] ? cd_forget+0x160/0x160 [ 1350.398460][T22534] path_openat+0x284f/0x3270 [ 1350.398508][T22534] ? do_sys_openat2+0xda/0x1d0 [ 1350.398532][T22534] ? __x64_sys_openat+0x139/0x160 [ 1350.398561][T22534] ? verify_lock_unused+0x140/0x140 [ 1350.398595][T22534] ? do_filp_open+0x430/0x430 [ 1350.398640][T22534] do_filp_open+0x1f2/0x430 [ 1350.398670][T22534] ? vfs_tmpfile+0x620/0x620 [ 1350.398720][T22534] ? _raw_spin_unlock+0x28/0x40 [ 1350.398748][T22534] ? alloc_fd+0x590/0x640 [ 1350.398785][T22534] do_sys_openat2+0x134/0x1d0 [ 1350.398815][T22534] ? do_sys_open+0xe0/0xe0 [ 1350.398841][T22534] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1350.398869][T22534] ? lock_chain_count+0x20/0x20 [ 1350.398899][T22534] __x64_sys_openat+0x139/0x160 [ 1350.398932][T22534] do_syscall_64+0x55/0xb0 [ 1350.398951][T22534] ? clear_bhb_loop+0x40/0x90 [ 1350.398972][T22534] ? clear_bhb_loop+0x40/0x90 [ 1350.398995][T22534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.399025][T22534] RIP: 0033:0x7f4aa3b5eb0e [ 1350.399046][T22534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1350.399065][T22534] RSP: 002b:00007f4aa4a30b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1350.399090][T22534] RAX: ffffffffffffffda RBX: 00007f4aa4a316c0 RCX: 00007f4aa3b5eb0e [ 1350.399107][T22534] RDX: 0000000000000002 RSI: 00007f4aa4a30c00 RDI: ffffffffffffff9c [ 1350.399123][T22534] RBP: 00007f4aa3c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1350.399138][T22534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.399152][T22534] R13: 00007f4aa3e26038 R14: 00007f4aa3e25fa0 R15: 00007ffd0870fe68 [ 1350.399186][T22534] [ 1351.858250][T22532] loop6: detected capacity change from 0 to 40427 [ 1351.895741][T22532] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1351.913848][T22532] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1351.945329][T22532] F2FS-fs (loop6): invalid crc value [ 1351.973491][T22532] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1352.219897][T22532] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1352.237143][T22532] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1352.888364][T22587] netlink: 'syz.6.4590': attribute type 5 has an invalid length. [ 1355.312070][T22598] loop7: detected capacity change from 0 to 256 [ 1355.501092][T22598] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 1355.561339][T22598] exFAT-fs (loop7): invalid boot region [ 1355.566956][T22598] exFAT-fs (loop7): failed to recognize exfat type [ 1359.322853][T22652] loop6: detected capacity change from 0 to 8192 [ 1361.522609][T22709] loop7: detected capacity change from 0 to 40427 [ 1361.546417][T22709] F2FS-fs (loop7): invalid crc value [ 1361.572877][T22709] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1361.624584][T22709] F2FS-fs (loop7): Start checkpoint disabled! [ 1361.650511][T22709] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1361.778070][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.784467][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.392577][T22724] loop6: detected capacity change from 0 to 8192 [ 1362.586660][T22724] Dev loop6: RDB in block 1 has bad checksum [ 1362.683819][T22724] loop6: unable to read partition table [ 1362.727858][T22724] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 1363.898923][ T3510] kworker/u4:9: attempt to access beyond end of device [ 1363.898923][ T3510] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1363.949823][ T3510] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1363.967799][ T3510] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1367.407834][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1367.407853][ T28] audit: type=1326 audit(1791948695.392:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1367.633281][ T28] audit: type=1326 audit(1791948695.402:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1367.786268][ T28] audit: type=1326 audit(1791948695.402:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1367.957199][ T28] audit: type=1326 audit(1791948695.402:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1368.116635][T22778] fuse: Bad value for 'fd' [ 1368.127145][ T28] audit: type=1326 audit(1791948695.402:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1368.265597][ T28] audit: type=1326 audit(1791948695.412:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1368.406217][ T28] audit: type=1326 audit(1791948695.412:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1368.514036][ T28] audit: type=1326 audit(1791948695.412:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1368.577960][ T28] audit: type=1326 audit(1791948695.412:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1368.646387][ T28] audit: type=1326 audit(1791948695.422:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.6.4643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b20f5eb0e code=0x7ffc0000 [ 1374.872793][T22876] loop7: detected capacity change from 0 to 16 [ 1374.985539][T22876] erofs: (device loop7): mounted with root inode @ nid 36. [ 1378.127361][T22916] loop7: detected capacity change from 0 to 512 [ 1378.269089][T22916] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1378.291253][T22919] loop6: detected capacity change from 0 to 128 [ 1378.329888][T22916] FAT-fs (loop7): Filesystem has been set read-only [ 1378.346659][T22919] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1378.399015][T22916] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 1379.076651][T22934] loop7: detected capacity change from 0 to 128 [ 1379.122140][T22934] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1379.137585][T22934] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.265276][T22943] loop6: detected capacity change from 0 to 512 [ 1379.653956][T22943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.940761][T21269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.019420][T22952] netem: change failed [ 1381.559763][T22978] loop6: detected capacity change from 0 to 128 [ 1381.587714][T22978] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1381.689162][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1381.689177][ T28] audit: type=1326 audit(1791948710.242:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1381.755249][ T28] audit: type=1326 audit(1791948710.282:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1381.810166][ T28] audit: type=1326 audit(1791948710.282:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1381.892150][ T28] audit: type=1326 audit(1791948710.282:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1381.960276][ T28] audit: type=1326 audit(1791948710.282:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1382.016245][ T28] audit: type=1326 audit(1791948710.282:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1382.136665][ T28] audit: type=1326 audit(1791948710.282:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1382.238571][ T28] audit: type=1326 audit(1791948710.282:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1382.264130][ T28] audit: type=1326 audit(1791948710.282:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1382.289043][ T28] audit: type=1326 audit(1791948710.282:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22975 comm="syz.6.4689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1384.298653][T13336] Bluetooth: hci4: command 0x0406 tx timeout [ 1384.661750][T23011] loop6: detected capacity change from 0 to 2048 [ 1385.504167][T22922] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1385.530064][T23011] loop6: detected capacity change from 0 to 128 [ 1385.548445][T22922] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1385.570005][T22159] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1385.582423][T22922] Buffer I/O error on dev loop6, logical block 0, async page read [ 1386.519207][T23040] cgroup: release_agent respecified [ 1387.301426][T23052] capability: warning: `syz.7.4702' uses deprecated v2 capabilities in a way that may be insecure [ 1388.237680][ T55] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1388.471766][T23048] loop6: detected capacity change from 0 to 40427 [ 1388.487354][T23048] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1388.507551][T23048] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1388.547579][T23048] F2FS-fs (loop6): invalid crc value [ 1388.561951][T23048] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1388.568420][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 1388.581635][ T55] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1388.590085][ T55] usb 8-1: config 0 has no interface number 0 [ 1388.604604][ T55] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1388.735618][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.885477][ T55] usb 8-1: Product: syz [ 1389.012481][ T55] usb 8-1: Manufacturer: syz [ 1389.258033][ T55] usb 8-1: SerialNumber: syz [ 1389.283415][T23048] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1389.298754][ T55] usb 8-1: config 0 descriptor?? [ 1389.323081][T23048] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1389.944089][T23074] netlink: 'syz.6.4705': attribute type 5 has an invalid length. [ 1390.890640][ T55] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 1390.933797][ T55] uvcvideo 8-1:0.31: Entity type for entity Output 6 was not initialized! [ 1390.992369][ T55] usb 8-1: Failed to create links for entity 5 [ 1391.030926][ T55] usb 8-1: Failed to register entities (-22). [ 1391.080622][ T55] usb 8-1: USB disconnect, device number 2 [ 1392.035091][T23088] cgroup: release_agent respecified [ 1393.811375][T23106] loop7: detected capacity change from 0 to 2048 [ 1393.879093][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1393.879109][ T28] audit: type=1326 audit(1791948722.432:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1393.945879][ T28] audit: type=1326 audit(1791948722.432:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.010571][ T28] audit: type=1326 audit(1791948722.472:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.143811][ T28] audit: type=1326 audit(1791948722.472:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.218693][ T28] audit: type=1326 audit(1791948722.472:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.352999][ T28] audit: type=1326 audit(1791948722.472:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.462693][ T28] audit: type=1326 audit(1791948722.472:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.487441][ T28] audit: type=1326 audit(1791948722.472:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.517550][ T28] audit: type=1326 audit(1791948722.472:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1394.847214][ T28] audit: type=1326 audit(1791948722.472:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23103 comm="syz.6.4713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b20f9e2d9 code=0x7ffc0000 [ 1395.883320][T23133] loop7: detected capacity change from 0 to 128 [ 1397.933917][ T3510] kworker/u4:9: attempt to access beyond end of device [ 1397.933917][ T3510] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1398.575498][T23150] loop6: detected capacity change from 0 to 16 [ 1399.517760][T23149] loop7: detected capacity change from 0 to 2048 [ 1399.540529][T23150] erofs: (device loop6): mounted with root inode @ nid 36. [ 1399.565492][T23150] syz.6.4728: attempt to access beyond end of device [ 1399.565492][T23150] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1399.581089][T23150] syz.6.4728: attempt to access beyond end of device [ 1399.581089][T23150] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1399.716643][T23150] syz.6.4728: attempt to access beyond end of device [ 1399.716643][T23150] loop6: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 1399.782699][T23144] syz.6.4728: attempt to access beyond end of device [ 1399.782699][T23144] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1399.797934][T23144] syz.6.4728: attempt to access beyond end of device [ 1399.797934][T23144] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1399.813106][T23144] syz.6.4728: attempt to access beyond end of device [ 1399.813106][T23144] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1399.828353][T23144] syz.6.4728: attempt to access beyond end of device [ 1399.828353][T23144] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1399.843687][T23144] syz.6.4728: attempt to access beyond end of device [ 1399.843687][T23144] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1399.859148][T23144] syz.6.4728: attempt to access beyond end of device [ 1399.859148][T23144] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1400.522482][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1400.522493][ T28] audit: type=1800 audit(1791948728.152:823): pid=23150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4728" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1404.420331][ T28] audit: type=1326 audit(1791948732.942:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1404.730496][ T28] audit: type=1326 audit(1791948732.942:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1404.781261][ T28] audit: type=1326 audit(1791948732.942:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1406.524005][ T28] audit: type=1326 audit(1791948732.942:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.099436][T23189] loop6: detected capacity change from 0 to 512 [ 1407.159273][ T28] audit: type=1326 audit(1791948732.942:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.337333][ T28] audit: type=1326 audit(1791948732.942:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.498744][ T28] audit: type=1326 audit(1791948732.942:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.620009][ T28] audit: type=1326 audit(1791948732.942:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.696257][ T28] audit: type=1326 audit(1791948732.942:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.720530][ T28] audit: type=1326 audit(1791948732.942:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.745270][ T28] audit: type=1326 audit(1791948732.942:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.769482][ T28] audit: type=1326 audit(1791948732.942:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1407.793788][ T28] audit: type=1326 audit(1791948732.942:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.7.4736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa3b9e2d9 code=0x7ffc0000 [ 1408.126999][T23205] cgroup: release_agent respecified [ 1410.698218][T23218] fuse: Bad value for 'fd' [ 1414.122019][T23222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.129780][T23222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.266562][T23239] loop6: detected capacity change from 0 to 1024 [ 1414.279181][T23239] ext4: Unknown parameter 'nouser_xattr' [ 1414.345470][T23240] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1414.365819][T23235] loop7: detected capacity change from 0 to 40427 [ 1414.437441][T23235] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1414.486365][T23235] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1414.607656][T23235] F2FS-fs (loop7): invalid crc value [ 1414.624003][T23235] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1415.610661][T23235] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1415.648101][T23235] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1415.943145][T23250] F2FS-fs (loop7): Stopped filesystem due to reason: 0 [ 1416.979188][T23222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.139308][T23222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.756456][T23222] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.766154][T23222] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.775228][T23222] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.784930][T23222] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.025522][T23253] netlink: 'syz.5.4752': attribute type 5 has an invalid length. [ 1419.556248][T23284] loop7: detected capacity change from 0 to 256 [ 1420.026487][T23285] loop6: detected capacity change from 0 to 512 [ 1420.119662][T23285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.748883][T21269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.150669][T23301] netlink: 'syz.0.4758': attribute type 5 has an invalid length. [ 1423.519319][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.525732][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.744607][T23329] loop7: detected capacity change from 0 to 4096 [ 1427.776264][T23329] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1427.844625][T23329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1428.400346][T22159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.517771][T18238] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1430.532033][T18238] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1431.194220][T23356] netem: change failed [ 1431.507540][T18238] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1431.525945][T18238] usb 7-1: string descriptor 0 read error: -71 [ 1432.498271][T18238] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1432.507377][T18238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.529983][T18238] usb 7-1: config 0 descriptor?? [ 1432.855908][T18238] usb 7-1: can't set config #0, error -71 [ 1432.866952][T18238] usb 7-1: USB disconnect, device number 2 [ 1432.930194][T23374] overlayfs: failed to clone upperpath [ 1433.006882][T23375] loop6: detected capacity change from 0 to 16 [ 1433.031972][T23375] erofs: (device loop6): mounted with root inode @ nid 36. [ 1433.053328][T23375] bio_check_eod: 50 callbacks suppressed [ 1433.053363][T23375] syz.6.4780: attempt to access beyond end of device [ 1433.053363][T23375] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1433.074322][T23375] syz.6.4780: attempt to access beyond end of device [ 1433.074322][T23375] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1433.120251][T23372] syz.6.4780: attempt to access beyond end of device [ 1433.120251][T23372] loop6: rw=524288, sector=1342180088, nr_sectors = 64 limit=16 [ 1433.132073][T23375] syz.6.4780: attempt to access beyond end of device [ 1433.132073][T23375] loop6: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 1433.134589][T23372] syz.6.4780: attempt to access beyond end of device [ 1433.134589][T23372] loop6: rw=0, sector=1342180120, nr_sectors = 32 limit=16 [ 1433.155219][T23369] syz.6.4780: attempt to access beyond end of device [ 1433.155219][T23369] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1433.162939][T23372] syz.6.4780: attempt to access beyond end of device [ 1433.162939][T23372] loop6: rw=0, sector=1342180120, nr_sectors = 32 limit=16 [ 1433.176705][T23369] syz.6.4780: attempt to access beyond end of device [ 1433.176705][T23369] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1433.197584][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1433.197599][ T28] audit: type=1800 audit(1791948761.642:857): pid=23375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4780" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1433.205412][T23369] syz.6.4780: attempt to access beyond end of device [ 1433.205412][T23369] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1433.244844][T23369] syz.6.4780: attempt to access beyond end of device [ 1433.244844][T23369] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1433.688082][T23386] netem: change failed [ 1438.561089][T23466] loop6: detected capacity change from 0 to 512 [ 1438.723018][T23466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1439.007397][T23450] loop7: detected capacity change from 0 to 40427 [ 1439.013257][T21269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.015812][T23450] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1439.032455][T23450] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1439.068726][T23450] F2FS-fs (loop7): invalid crc value [ 1439.100824][T23450] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1439.263924][T23476] loop6: detected capacity change from 0 to 128 [ 1439.279628][T23450] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1439.298509][T23450] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1439.331326][T23476] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1439.696017][T23481] netlink: 'syz.7.4804': attribute type 5 has an invalid length. [ 1441.456575][T23485] loop6: detected capacity change from 0 to 40427 [ 1441.490812][T23485] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1441.515064][T23485] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1441.538534][T23485] F2FS-fs (loop6): invalid crc value [ 1441.569124][T23485] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1441.778980][T23485] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1441.794212][T23485] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1442.418130][T23494] netlink: 'syz.6.4812': attribute type 5 has an invalid length. [ 1444.726234][ T28] audit: type=1326 audit(1791948773.272:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1444.792555][T23513] FAULT_INJECTION: forcing a failure. [ 1444.792555][T23513] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.797199][ T28] audit: type=1326 audit(1791948773.272:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1444.827557][T23513] CPU: 0 PID: 23513 Comm: syz.7.4820 Not tainted syzkaller #0 [ 1444.838043][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1444.848139][T23513] Call Trace: [ 1444.851454][T23513] [ 1444.854461][T23513] dump_stack_lvl+0x18c/0x250 [ 1444.859179][T23513] ? show_regs_print_info+0x20/0x20 [ 1444.864412][T23513] ? load_image+0x420/0x420 [ 1444.869054][T23513] should_fail_ex+0x394/0x4c0 [ 1444.873781][T23513] should_failslab+0x9/0x20 [ 1444.878326][T23513] slab_pre_alloc_hook+0x59/0x300 [ 1444.883464][T23513] ? tipc_sub_subscribe+0x114/0x690 [ 1444.886806][ T28] audit: type=1326 audit(1791948773.272:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1444.888684][T23513] __kmem_cache_alloc_node+0x53/0x250 [ 1444.888714][T23513] ? __lock_acquire+0x7eb0/0x7eb0 [ 1444.888740][T23513] ? tipc_sub_subscribe+0x114/0x690 [ 1444.888765][T23513] kmalloc_trace+0x2a/0xe0 [ 1444.888797][T23513] tipc_sub_subscribe+0x114/0x690 [ 1444.888835][T23513] tipc_conn_rcv_sub+0x14f/0x370 [ 1444.888865][T23513] tipc_topsrv_kern_subscr+0x189/0x250 [ 1444.888894][T23513] ? conn_put+0x320/0x320 [ 1444.888926][T23513] ? __asan_memset+0x22/0x40 [ 1444.888956][T23513] tipc_group_create+0x35b/0x4e0 [ 1444.888988][T23513] tipc_sk_join+0x25a/0x6a0 [ 1444.889016][T23513] ? __tipc_sendstream+0x1290/0x1290 [ 1444.889051][T23513] tipc_setsockopt+0x73f/0x990 [ 1444.889081][T23513] ? tipc_shutdown+0x4d0/0x4d0 [ 1444.889102][T23513] ? __fget_files+0x28/0x460 [ 1444.889126][T23513] ? aa_sock_opt_perm+0x74/0x100 [ 1444.889152][T23513] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1444.969453][ T28] audit: type=1326 audit(1791948773.272:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1444.972259][T23513] ? security_socket_setsockopt+0x7e/0xa0 [ 1444.972290][T23513] ? tipc_shutdown+0x4d0/0x4d0 [ 1444.992108][ T28] audit: type=1326 audit(1791948773.272:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1444.997014][T23513] do_sock_setsockopt+0x175/0x1a0 [ 1444.997053][T23513] ? __fdget+0x180/0x210 [ 1445.065055][T23513] __x64_sys_setsockopt+0x182/0x200 [ 1445.070297][T23513] do_syscall_64+0x55/0xb0 [ 1445.074667][ T28] audit: type=1326 audit(1791948773.272:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1445.074720][T23513] ? clear_bhb_loop+0x40/0x90 [ 1445.103563][T23513] ? clear_bhb_loop+0x40/0x90 [ 1445.108279][T23513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1445.114226][T23513] RIP: 0033:0x7f4aa3b9e2d9 [ 1445.118678][T23513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.138314][T23513] RSP: 002b:00007f4aa4a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1445.145620][ T28] audit: type=1326 audit(1791948773.272:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1445.146742][T23513] RAX: ffffffffffffffda RBX: 00007f4aa3e25fa0 RCX: 00007f4aa3b9e2d9 [ 1445.146761][T23513] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1445.186789][T23513] RBP: 00007f4aa3c35888 R08: 0000000000000010 R09: 0000000000000000 [ 1445.194788][T23513] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 1445.202793][T23513] R13: 00007f4aa3e26038 R14: 00007f4aa3e25fa0 R15: 00007ffd0870fe68 [ 1445.210816][T23513] [ 1445.213347][ T28] audit: type=1326 audit(1791948773.272:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1445.239204][T23513] tipc: Subscription rejected, no memory [ 1445.308313][ T28] audit: type=1326 audit(1791948773.272:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1445.365814][ T28] audit: type=1326 audit(1791948773.272:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23497 comm="syz.5.4815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65159e2d9 code=0x7ffc0000 [ 1445.506976][T23518] cgroup: release_agent respecified [ 1447.711842][T23529] netlink: 'syz.6.4825': attribute type 4 has an invalid length. [ 1448.735896][T23544] loop6: detected capacity change from 0 to 256 [ 1449.435702][T23559] cgroup: release_agent respecified [ 1450.861774][T14333] Bluetooth: hci0: command 0x0406 tx timeout [ 1452.284940][T23568] netlink: 'syz.0.4832': attribute type 5 has an invalid length. [ 1453.149311][T23566] loop7: detected capacity change from 0 to 4096 [ 1453.252749][T23566] EXT4-fs: Ignoring removed orlov option [ 1453.504556][T23566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.245473][T23576] bridge0: port 3(erspan0) entered blocking state [ 1454.252513][T23576] bridge0: port 3(erspan0) entered disabled state [ 1454.263627][T23576] erspan0: entered allmulticast mode [ 1454.278541][T23576] erspan0: entered promiscuous mode [ 1454.288145][T23576] bridge0: port 3(erspan0) entered blocking state [ 1454.294722][T23576] bridge0: port 3(erspan0) entered forwarding state [ 1455.111594][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1455.111634][ T28] audit: type=1326 audit(1791948783.652:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.111790][ T28] audit: type=1326 audit(1791948783.652:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.111920][ T28] audit: type=1326 audit(1791948783.652:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.112052][ T28] audit: type=1326 audit(1791948783.652:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.112191][ T28] audit: type=1326 audit(1791948783.652:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.112383][ T28] audit: type=1326 audit(1791948783.652:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.112515][ T28] audit: type=1326 audit(1791948783.652:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.112646][ T28] audit: type=1326 audit(1791948783.652:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.112778][ T28] audit: type=1326 audit(1791948783.652:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1455.112910][ T28] audit: type=1326 audit(1791948783.662:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23579 comm="syz.0.4837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9e2d9 code=0x7ffc0000 [ 1456.493635][T22159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.844439][T23606] loop6: detected capacity change from 0 to 16 [ 1456.859586][T23606] erofs: (device loop6): mounted with root inode @ nid 36. [ 1456.879971][T23606] bio_check_eod: 52 callbacks suppressed [ 1456.880007][T23606] syz.6.4845: attempt to access beyond end of device [ 1456.880007][T23606] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1456.901803][T23606] syz.6.4845: attempt to access beyond end of device [ 1456.901803][T23606] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1456.960501][T23605] syz.6.4845: attempt to access beyond end of device [ 1456.960501][T23605] loop6: rw=524288, sector=1342180192, nr_sectors = 64 limit=16 [ 1456.972336][T23606] syz.6.4845: attempt to access beyond end of device [ 1456.972336][T23606] loop6: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 1456.974867][T23605] syz.6.4845: attempt to access beyond end of device [ 1456.974867][T23605] loop6: rw=0, sector=1342180216, nr_sectors = 32 limit=16 [ 1456.994865][T23603] syz.6.4845: attempt to access beyond end of device [ 1456.994865][T23603] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1457.003293][T23605] syz.6.4845: attempt to access beyond end of device [ 1457.003293][T23605] loop6: rw=0, sector=1342180216, nr_sectors = 32 limit=16 [ 1457.031684][T23603] syz.6.4845: attempt to access beyond end of device [ 1457.031684][T23603] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1457.045757][T23603] syz.6.4845: attempt to access beyond end of device [ 1457.045757][T23603] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1457.060434][T23603] syz.6.4845: attempt to access beyond end of device [ 1457.060434][T23603] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1457.208196][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4847'. [ 1458.548157][T23623] loop7: detected capacity change from 0 to 512 [ 1458.766845][T23623] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1458.884116][T23623] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 1458.951506][T23623] System zones: 0-1, 15-15, 18-18, 34-34 [ 1458.957673][T23623] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1458.964184][T23623] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1458.979006][T23623] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1458.986881][T23623] EXT4-fs error (device loop7): ext4_orphan_get:1434: comm syz.7.4851: bad orphan inode 16 [ 1459.006930][T23623] ext4_test_bit(bit=15, block=18) = 1 [ 1459.013098][T23623] is_bad_inode(inode)=0 [ 1459.017371][T23623] NEXT_ORPHAN(inode)=0 [ 1459.027648][T23623] max_ino=32 [ 1459.030874][T23623] i_nlink=2 [ 1459.035339][T23623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1459.225900][T23623] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 1459.252169][T23621] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 1459.511174][T22159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.316440][T23652] ================================================================== [ 1462.316454][T23652] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 1462.316486][T23652] Write of size 4 at addr ffffc90003e11020 by task syz.6.4857/23652 [ 1462.316505][T23652] [ 1462.316511][T23652] CPU: 1 PID: 23652 Comm: syz.6.4857 Not tainted syzkaller #0 [ 1462.316532][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1462.316546][T23652] Call Trace: [ 1462.316554][T23652] [ 1462.316563][T23652] dump_stack_lvl+0x18c/0x250 [ 1462.316584][T23652] ? sys_imageblit+0x1bac/0x25d0 [ 1462.316607][T23652] ? show_regs_print_info+0x20/0x20 [ 1462.316626][T23652] ? load_image+0x420/0x420 [ 1462.316652][T23652] ? __lock_acquire+0x1431/0x7eb0 [ 1462.316680][T23652] print_report+0xa8/0x210 [ 1462.316707][T23652] ? sys_imageblit+0x1bac/0x25d0 [ 1462.316727][T23652] kasan_report+0x117/0x150 [ 1462.316754][T23652] ? sys_imageblit+0x1bac/0x25d0 [ 1462.316786][T23652] sys_imageblit+0x1bac/0x25d0 [ 1462.316815][T23652] ? sys_copyarea+0x2530/0x2530 [ 1462.316844][T23652] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1462.316873][T23652] soft_cursor+0xa01/0xc30 [ 1462.316898][T23652] bit_cursor+0x16dd/0x1f60 [ 1462.316926][T23652] ? bit_clear_margins+0x550/0x550 [ 1462.316950][T23652] ? get_color+0x2e8/0x4d0 [ 1462.316976][T23652] ? bit_clear_margins+0x550/0x550 [ 1462.316996][T23652] ? fbcon_cursor+0x430/0x640 [ 1462.317023][T23652] hide_cursor+0x7f/0x320 [ 1462.317051][T23652] do_con_write+0x1e1/0x70a0 [ 1462.317103][T23652] ? vt_resize+0xc0/0xc0 [ 1462.317134][T23652] ? prb_read_valid+0x60/0x60 [ 1462.317161][T23652] ? mark_lock+0x94/0x320 [ 1462.317191][T23652] ? con_put_char+0x83/0xc0 [ 1462.317219][T23652] con_put_char+0x83/0xc0 [ 1462.317246][T23652] ? con_write+0x40/0x40 [ 1462.317277][T23652] ? con_write+0x40/0x40 [ 1462.317302][T23652] ? tty_put_char+0xc9/0x150 [ 1462.317329][T23652] ? con_write+0x40/0x40 [ 1462.317355][T23652] tty_put_char+0xc9/0x150 [ 1462.317381][T23652] ? do_SAK_work+0x20/0x20 [ 1462.317409][T23652] ? do_output_char+0x6ab/0x960 [ 1462.317427][T23652] ? mutex_lock_nested+0x20/0x20 [ 1462.317454][T23652] __process_echoes+0x41f/0x9f0 [ 1462.317477][T23652] n_tty_receive_char+0x811/0xbb0 [ 1462.317498][T23652] ? n_tty_receive_char_flow_ctrl+0xaa/0x260 [ 1462.317520][T23652] n_tty_receive_buf_standard+0x61a/0x54e0 [ 1462.317548][T23652] ? __might_sleep+0xe0/0xe0 [ 1462.317573][T23652] ? read_lock_is_recursive+0x20/0x20 [ 1462.317604][T23652] n_tty_receive_buf_common+0xb0c/0x1380 [ 1462.317638][T23652] ? paste_selection+0x1cb/0x4d0 [ 1462.317660][T23652] paste_selection+0x329/0x4d0 [ 1462.317685][T23652] ? set_selection_kernel+0x17b0/0x17b0 [ 1462.317707][T23652] ? do_task_dead+0xd0/0xd0 [ 1462.317729][T23652] ? __might_fault+0xaa/0x120 [ 1462.317750][T23652] ? __might_fault+0xc6/0x120 [ 1462.317778][T23652] ? __might_fault+0xaa/0x120 [ 1462.317800][T23652] ? tioclinux+0x34e/0x450 [ 1462.317826][T23652] vt_ioctl+0x813/0x1f20 [ 1462.317848][T23652] ? __vt_event_wait+0x260/0x260 [ 1462.317873][T23652] ? __fget_files+0x28/0x460 [ 1462.317902][T23652] ? tty_jobctrl_ioctl+0x378/0xba0 [ 1462.317929][T23652] tty_ioctl+0x91e/0xdc0 [ 1462.317955][T23652] ? tty_get_icount+0xb0/0xb0 [ 1462.317980][T23652] __se_sys_ioctl+0xfd/0x170 [ 1462.318007][T23652] do_syscall_64+0x55/0xb0 [ 1462.318026][T23652] ? clear_bhb_loop+0x40/0x90 [ 1462.318047][T23652] ? clear_bhb_loop+0x40/0x90 [ 1462.318068][T23652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1462.318098][T23652] RIP: 0033:0x7f6b20f9e2d9 [ 1462.318117][T23652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.318136][T23652] RSP: 002b:00007f6b21dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.318159][T23652] RAX: ffffffffffffffda RBX: 00007f6b21225fa0 RCX: 00007f6b20f9e2d9 [ 1462.318176][T23652] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000005 [ 1462.318190][T23652] RBP: 00007f6b21035888 R08: 0000000000000000 R09: 0000000000000000 [ 1462.318204][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.318218][T23652] R13: 00007f6b21226038 R14: 00007f6b21225fa0 R15: 00007ffc9b720258 [ 1462.318242][T23652] [ 1462.318249][T23652] [ 1462.318254][T23652] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003e12000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 1462.318294][T23652] Memory state around the buggy address: [ 1462.318304][T23652] ffffc90003e10f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1462.318318][T23652] ffffc90003e10f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1462.318331][T23652] >ffffc90003e11000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.318340][T23652] ^ [ 1462.318351][T23652] ffffc90003e11080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.318364][T23652] ffffc90003e11100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.318374][T23652] ================================================================== [ 1462.318455][T23652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1462.318465][T23652] CPU: 1 PID: 23652 Comm: syz.6.4857 Not tainted syzkaller #0 [ 1462.318484][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1462.318495][T23652] Call Trace: [ 1462.318502][T23652] [ 1462.318509][T23652] dump_stack_lvl+0x18c/0x250 [ 1462.318531][T23652] ? show_regs_print_info+0x20/0x20 [ 1462.318549][T23652] ? load_image+0x420/0x420 [ 1462.318579][T23652] panic+0x2ca/0x720 [ 1462.318606][T23652] ? bpf_jit_dump+0xd0/0xd0 [ 1462.318629][T23652] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1462.318656][T23652] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1462.318682][T23652] ? _raw_spin_unlock+0x40/0x40 [ 1462.318706][T23652] ? print_memory_metadata+0x314/0x400 [ 1462.318735][T23652] ? sys_imageblit+0x1bac/0x25d0 [ 1462.318755][T23652] check_panic_on_warn+0x84/0xa0 [ 1462.318786][T23652] ? sys_imageblit+0x1bac/0x25d0 [ 1462.318806][T23652] end_report+0x6f/0x130 [ 1462.318829][T23652] kasan_report+0x128/0x150 [ 1462.318854][T23652] ? sys_imageblit+0x1bac/0x25d0 [ 1462.318878][T23652] sys_imageblit+0x1bac/0x25d0 [ 1462.318905][T23652] ? sys_copyarea+0x2530/0x2530 [ 1462.318934][T23652] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1462.318962][T23652] soft_cursor+0xa01/0xc30 [ 1462.318986][T23652] bit_cursor+0x16dd/0x1f60 [ 1462.319014][T23652] ? bit_clear_margins+0x550/0x550 [ 1462.319037][T23652] ? get_color+0x2e8/0x4d0 [ 1462.319062][T23652] ? bit_clear_margins+0x550/0x550 [ 1462.319082][T23652] ? fbcon_cursor+0x430/0x640 [ 1462.319108][T23652] hide_cursor+0x7f/0x320 [ 1462.319133][T23652] do_con_write+0x1e1/0x70a0 [ 1462.319184][T23652] ? vt_resize+0xc0/0xc0 [ 1462.319215][T23652] ? prb_read_valid+0x60/0x60 [ 1462.319241][T23652] ? mark_lock+0x94/0x320 [ 1462.319268][T23652] ? con_put_char+0x83/0xc0 [ 1462.319295][T23652] con_put_char+0x83/0xc0 [ 1462.319321][T23652] ? con_write+0x40/0x40 [ 1462.319346][T23652] ? con_write+0x40/0x40 [ 1462.319371][T23652] ? tty_put_char+0xc9/0x150 [ 1462.319396][T23652] ? con_write+0x40/0x40 [ 1462.319421][T23652] tty_put_char+0xc9/0x150 [ 1462.319448][T23652] ? do_SAK_work+0x20/0x20 [ 1462.319475][T23652] ? do_output_char+0x6ab/0x960 [ 1462.319494][T23652] ? mutex_lock_nested+0x20/0x20 [ 1462.319517][T23652] __process_echoes+0x41f/0x9f0 [ 1462.319542][T23652] n_tty_receive_char+0x811/0xbb0 [ 1462.319563][T23652] ? n_tty_receive_char_flow_ctrl+0xaa/0x260 [ 1462.319584][T23652] n_tty_receive_buf_standard+0x61a/0x54e0 [ 1462.319612][T23652] ? __might_sleep+0xe0/0xe0 [ 1462.319635][T23652] ? read_lock_is_recursive+0x20/0x20 [ 1462.319666][T23652] n_tty_receive_buf_common+0xb0c/0x1380 [ 1462.319699][T23652] ? paste_selection+0x1cb/0x4d0 [ 1462.319720][T23652] paste_selection+0x329/0x4d0 [ 1462.319745][T23652] ? set_selection_kernel+0x17b0/0x17b0 [ 1462.319773][T23652] ? do_task_dead+0xd0/0xd0 [ 1462.319792][T23652] ? __might_fault+0xaa/0x120 [ 1462.319813][T23652] ? __might_fault+0xc6/0x120 [ 1462.319831][T23652] ? __might_fault+0xaa/0x120 [ 1462.319852][T23652] ? tioclinux+0x34e/0x450 [ 1462.319878][T23652] vt_ioctl+0x813/0x1f20 [ 1462.319899][T23652] ? __vt_event_wait+0x260/0x260 [ 1462.319923][T23652] ? __fget_files+0x28/0x460 [ 1462.319950][T23652] ? tty_jobctrl_ioctl+0x378/0xba0 [ 1462.319993][T23652] tty_ioctl+0x91e/0xdc0 [ 1462.320017][T23652] ? tty_get_icount+0xb0/0xb0 [ 1462.320043][T23652] __se_sys_ioctl+0xfd/0x170 [ 1462.320068][T23652] do_syscall_64+0x55/0xb0 [ 1462.320086][T23652] ? clear_bhb_loop+0x40/0x90 [ 1462.320105][T23652] ? clear_bhb_loop+0x40/0x90 [ 1462.320125][T23652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1462.320154][T23652] RIP: 0033:0x7f6b20f9e2d9 [ 1462.320170][T23652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.320188][T23652] RSP: 002b:00007f6b21dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.320208][T23652] RAX: ffffffffffffffda RBX: 00007f6b21225fa0 RCX: 00007f6b20f9e2d9 [ 1462.320223][T23652] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000005 [ 1462.320237][T23652] RBP: 00007f6b21035888 R08: 0000000000000000 R09: 0000000000000000 [ 1462.320250][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.320262][T23652] R13: 00007f6b21226038 R14: 00007f6b21225fa0 R15: 00007ffc9b720258 [ 1462.320285][T23652] [ 1462.320531][T23652] Kernel Offset: disabled