last executing test programs: 10m19.393241879s ago: executing program 4 (id=679): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) 10m18.11938576s ago: executing program 4 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 10m17.517549378s ago: executing program 4 (id=687): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r6, 0x409, 0x8) 10m16.055211529s ago: executing program 4 (id=691): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) recvmmsg$unix(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12020, 0x0) 10m14.51086831s ago: executing program 4 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10m10.987655699s ago: executing program 4 (id=700): unshare(0x42000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 9m55.857661565s ago: executing program 32 (id=700): unshare(0x42000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 8m41.020462008s ago: executing program 5 (id=880): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8m38.999106436s ago: executing program 5 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r5, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x7, 0x2, 0x63, @local, @empty, 0x80, 0x7, 0x2, 0x1}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m36.260303986s ago: executing program 5 (id=886): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="37a4cb6de01a15e28e2e9633ad83cc9e921ed75cfefdc2a5c29c6b6c22fc6535e79fe3680d", 0x25}, {&(0x7f0000001980)="a65ee03e351aab1d185e9c23044fa222104d43d66c137737777319157c2a49795ffc2b05e8cd01501d77719d8b1259499b715ed232ce114e1d6319e0d8d37977b4f9b81d473b7d6eedb7ea2b261428d6320b704b6e8f24f1adada0963db698a2d735732f596e20c80e4520a09e6cf7199d4a486c3addc4a6a29c7848e8854d23744ef0cfce86f7c6eaa63ec35bb28a1d14b981b47b1301617408ff6864170f61dbf38d7626d9e497490a7266efc2ccf1d110136497c58a53ac3ed02de7a431bd2a7bc4bd5447ec67aa3678c6a1dcd73e83c6e4a60659ecd5c66dd424d5eb6521348813193bd35c68df8f9f8c741ecca186f0e700a5ccec0b956851834859550f4865083b83e554156e5077750fec0c41472c38ef06d43ae7f3584c65b295cb8206918b940ea24f35e1865f96458e23ee5f1d352aa6b3422d95c3ec7e61a1b303af16afb1ea87c809ba7871879e09cc8eb5090804a1ddbf16555e658559b46666df82403bd314d0a53e6e30eb4fb9300feab597ae6afcf0c356463642008ca6bf8d3d172702b215ad246a365def2431c4dde6218e8f3e3990462acf86123795219fd63c714b4b344b8ed1b8f3ab3b502a4abe0649ab7123b5331a27f0f31237af45fd4df3ad3cbfa6527cb63f5da5f49a730afb75ce9d8fc398a51c6dff3d294269043b15ae1c08cb40aa068df2674d7db0f38a7ba145ba520ad98603e1ea1b1cdeb84e16b4559ccdc530db8230b85f6798139f1ae15d8318ed0acb05d4343fa0d04dfc09a07eaa427e0cf17fa285ee6d8f060874632ac887d9acf440b15a71b11df650e3ad7352d44b6d20ea7c244776a01b83d1ad50bcb0a99de17f64130972ec96483e1e4dfad775f1816ad5fcd777b32359ad4e4a4b47185783ad1599338f0b15ba807c6c4c0d3bc7e4c1545ad64231ec0f4af6140132103e4b0f31689ce6bd950368c90dad26483156f59b3a0dc72d1021ab016f3de2f82e67f5a943de275fbeed60b8cb3a32fb54bbc55cea2bd4fa8e6a88d072e36143cac49ec5abc968e864dacafbc6647a6ad76878208a5b3efceab8b628af7d7dd340136ba502c829703e69b05485dc035c7d3f76c5aedcec2df21ce6db3fa9480c965ec22761768ae25dd1f461cdc42d4f66d06ce2ac72c367b5f403638c5470b05231c76a07a622f6a21f4347c093a8167939685f7efbf7a104f6f6af9a7fe73c9cf16944d2348fdba95706b702652a002113f06b7054519e24864f125934ee30c2573300a07fde093eb767509e802dce78eec93c388892ad41406134be99e2d027464663085e8558e09dfad1be1dbbab81c6e918fdf751f0c699a54688240285adb7b0aa02a0ec496d4bf4bfd2157b512919b7afda53c9ddf76d585ca88f91793196bb5203aab91211b66c3be61f08cb7a28b4c3f670a64f09f36a093556aba4395d7bafb5acfa14385c04025dfa0c4e8c34bea6f52c13e776881522783b101e846d3288fc5e21ea7be5ca229ae5fcc5c2d5bc681cfbe995ded2a091f1915dd26cd4d0aa0beedbc7a2caa21f6b58941bb7e0232eb8855716801ec08901139e819d7c1a537a9adaaff01aab4c4b674418181f2121a339cda37bc338643a1b5334cb26e824ab11259e9b2e26cdbc9bb3fa2241f9b9ee0e0ee412b21b9218255adac3b9a024adeaa588fd25eed58692e44ff111c36aaa7ffea1dcb24b4a8d6ec7598d012afc2270e3e83804b8f240609af306188cac8279530fa31b9a3f0b1a2dd3d5d72f51e26a5fdf9877e9c4a9b5ca585ef3eb152846dba5225cac803c182f4616895a1d5fdd2e3c5372bd77b65c9edcfb2ff9b5bd7cd90b35e35e743f3ff33ab682de02851c8bd1d4d740e05cab3664da49ca1db4d158b05503b63c06fc28c78a619a683184e44d6fa9ce66f66bfb343be5f45a0549", 0x54f}], 0x2}, 0x11084) 8m33.30089977s ago: executing program 5 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200002, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303031302c636f6465706167653d313235352c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c696f636861727365743d63703737352c696f636861727365743d63703836350f7569643d", @ANYRESHEX=0x0, @ANYBLOB="0700000000000000727b4911e04a"], 0x1, 0x343, &(0x7f0000000500)="$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") 8m28.284404039s ago: executing program 5 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 8m28.119537737s ago: executing program 5 (id=899): syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0xb2) 8m11.536657862s ago: executing program 33 (id=899): syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0xb2) 4m10.521398435s ago: executing program 3 (id=1391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, 0x0, 0x0) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) 4m7.689577072s ago: executing program 3 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000007be8b0940000000000", @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4m7.153620436s ago: executing program 3 (id=1398): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) io_setup(0x2279, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x2, r4, 0x0, 0x0, 0x3, 0x0, 0x2}]) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x1000000000000049}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4m4.269523185s ago: executing program 3 (id=1404): r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) read$FUSE(r0, 0x0, 0x0) 4m2.126391592s ago: executing program 3 (id=1408): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) 4m0.461592684s ago: executing program 3 (id=1413): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open_tree(r0, &(0x7f0000000000)='./file2\x00', 0x81000) 3m44.156018949s ago: executing program 34 (id=1413): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open_tree(r0, &(0x7f0000000000)='./file2\x00', 0x81000) 2m10.061010381s ago: executing program 6 (id=1618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x18) 2m8.716221479s ago: executing program 6 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 2m5.031703046s ago: executing program 6 (id=1626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xff, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m4.192121385s ago: executing program 6 (id=1628): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m1.409498416s ago: executing program 6 (id=1632): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socket$packet(0x11, 0x2, 0x300) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1m59.185834646s ago: executing program 6 (id=1638): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) 1m43.303715971s ago: executing program 35 (id=1638): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) 20.891229609s ago: executing program 1 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) 19.42490035s ago: executing program 0 (id=1817): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="37a4cb6de01a15e28e2e9633ad83cc9e921ed75cfefdc2a5c29c6b6c22fc6535e79fe3680d", 0x25}, {&(0x7f0000001980)="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", 0x54e}], 0x2}, 0x11084) 18.449677879s ago: executing program 0 (id=1820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x4}, 0xfffffffffffffdf5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[], 0x1, 0x1537, &(0x7f00000034c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") close(0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001a80)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 17.247616275s ago: executing program 7 (id=1822): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x843) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/power/wakeup_count', 0x602, 0x1d2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002ac0)=ANY=[], 0x30) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={0x0, 0x31c}}, 0x24000001) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f00000000c0)={[{@grpjquota}, {@nombcache}, {@nodiscard}, {@nouid32}, {@noacl}]}, 0x9, 0x61d, &(0x7f0000000700)="$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") 15.408412913s ago: executing program 7 (id=1823): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 14.957924358s ago: executing program 0 (id=1825): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getuid() getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]) lchown(0x0, r3, r4) renameat2(r1, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000040)='./file1\x00', 0x2) 14.734641371s ago: executing program 8 (id=1826): socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) listen(0xffffffffffffffff, 0x40007) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, 0x0) r3 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 14.644961044s ago: executing program 1 (id=1827): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 14.488806873s ago: executing program 0 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) getrlimit(0x5, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00'/10, 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="b7e536c78818c68d3f9c25d17d3bb5fc13cb2eaeaf734e627b20ac565bb518fcd686f3df4e4e6257218aef88a1c6bd20b8d7024816d06d4bc7e228c816aed4184aa7af76d8f83a11e450b67c25458233d0bb71e5c3c82760e0b80f99a308feba5f0d0eb5b9", 0x65}, {&(0x7f0000000280)="04fc3f8b082b5cfe7879825b640fa316e4e056f5f33045d07db103f36eebd45bfa8dd0bddde43fc7879843938a9ca24573e50b7b87e8115423acd3a01fffe4cc55d96f468a3775167fa6d00c7649b3", 0x4f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)="8c7fb2ab21dad77e0bb3bf2535c6db525e0c30ec54dd68ee433f0796d25d0b9b1c19887525aac0aebf116e947468572e51dbfea1e17f44b236b2aa5e2dcf4a32cf465eecfc2c6d0604d8f9cdc081f06aa1897d9b55e1e3c48a2c26e2de8f3256ba9f8c9501e0a4198e2e1ef725af54f55818a2b029c58272d31d44b02f41466197cac306e550760da58ac71374579918eeee88e2bb4dc6bb2850db8ffe588020c36d2fdcb6c0f254208af5f7b0d1f33ba193bd9ce6dd0596b069a7ac8c84b468789ca50b4dd7286e57661b", 0xcb}, {&(0x7f0000000f00)="31f2ac5856b785ea337e0820e8351d8af63e96a0eb95ce01555698be19857fc131aa1f65e65195c08c2255dafbd47892d767f5ed79153bf56e287c3e395105616bbc412ab970ff6ebfc262ba143123c90c186e46c65a0064cf821c91cb2cffe674a97f1012138ef9d5f25fe36403e8c261039d2d35dbef6ef9815d76b21ae29967821078de6396b79cdd7481cdbdd5092f67c467707b551fda61e5864309006a259e0bc611815455cf", 0xa9}, {&(0x7f0000003680)="91afc2eedc669dc4425f59302d3c39a1bd2816ea125db457eb57f7cb4d4bd1df46d48a978ba2bb7932b4cd6d0654e3de8ce7b240753b97d7baf085c3ef0fd79298180f605595a2ff59aecceaa7fcad7da8137105bc5e36df7ee21ccd4656c42a930bb499b6612cb794369799aaa295f2550391a4874836e70c7bdca14b2032c02ba3724d988e6b6cab691f3f75ff2f0b9b4d2e869d1e9f55367463eab1213967703ba3cf2930a825823b9104821cb2114fc4145f72de37d50ea8423de000a2e5ec02e9bf1965497c04464c6813644a6355d19e3e8053bf4d6ac2fe5b64f302c224003e6e35a89134a60283b05c8d73f454c458bd0e1da1ec1d16660b0542b8933c362c14048f8529520618191d2e419c6524df9de363eee400eaf7601de1a41243e78b64d25124caad06567a022d2b38148796b132908109c16b76e5962fdb246cbcd12add7d3ef58abec76456adae44b082744f5c86cf32cc5c5576213fc671838d63e71262e8fef2f339b6e634444c0c4e597a54deb20746928f17b96e10c5ce0cc384f9a8d22bdebd4cd0dcecb3ef5d128077e349f8121937edd4a8ee9cd417e82456f4f484bbe4c41e94dd5e798f1ff626d74d3251905aa0c5874318bc9da71dc569b60a9d515a8e6a73e7ff65893681c375e16e4045507cd923cf0851c37990c70c67fd91f99f6f246a17a61ebb33236efd319762a565cacc90c8cad4394e5429283f2aae6c191cfcdbb58552cba7ca3001076472e92c3ac9791dbb5b76775593d91f41d9a1fee2845fe32d598276da9f284247d3f187820f85e1c6959bb369a770121717c513c1d59b84a2f6eca5c011a19e973bd0a54caca4caf472f1a409b3a28b96278d5be34767d3d596b2d07b59b033e3422fd37d8bc558a1ae7701dabc5fcf37bd3eeff9d304535145cab654cfb393d03b6a43ee1ea2657fec0c9e2afc332ad265252749f795d1556b44e788eee1b52bd4039d009264eaa1880d9bd38fdc397ae9e6c7f13a702ad90a12a039c24db2ecf1a9cd3730b69419c0902da8cf5b044ddbebaf6fbc4e23fe14ed11a716642a0752c86d0259d68b510d8ef6d7f3982ed9bce5e0f6ce4ead7adc23fe63b39b077700bd155b59dddb586a3fcd908a496751e0773079a2dcde671eb0471694132cde8f4463fd3de952e5f07d82b448d5d0d47c79f40b336c1355bae9600c27b58db40435db7accdbdd3c353223d2d5153024c08ed6be66cad20b90d81683a697057a7a28785344bfc4a20cb4085dd92c0257aeef3529f78df283d9c2fe978beef051417eaa65df6a342e75b186877fac31d1c6c5280b52755014c39d8f137959bafa0531827dbf18d598c6ef0000000000000000", 0x3c8}], 0x3}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x3, @loopback, 0x8}, 0x1c, &(0x7f0000000900)=[{0x0}, {&(0x7f00000005c0)="8946f0ff3aa2aef4d211fc2cd5c177b38f03fc9dc89c5a900712c43785b4d66f7855093204114e7361385491afbbef8b1e017c6e0f8070944c7157b916cceaf393263d4d4dbffe97eedfe2983ab734165ff3d0", 0x53}, {&(0x7f0000000680)="c6d021563ef338cb3cd1259b97462e5bec17ad9c5820bd28d2edb7eeeba210633159b721e17f718a3cedb1a55b468730f53c2e41147104b7f175d2fa3bead86259c4815193188c3be734bfad820a6f4a7db89391da446cd69b855dabbab3b054eb69dbbb0a8b8ea941181876848cb78ecea57d0f6a43ecfaada41a99ba46dc39842be111f9acf45c5f4d44f42da3bc33818d2bc4eeb712fbdd524ab489f9a2da74655ae981e8cd09503ede1301c4707622e4c0cbeeeb0a3b090065c02f3299a651c00e206330f09a", 0xc8}], 0x3, &(0x7f00000011c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x89, 0x8, '\x00', [@generic={0x3, 0x3f, "97bbd7f727a6828ada29c501845ff881a7615bdb1f75bdd140fc773bcb929aa6ddd1f965cd75372de5f16b9f5e037d20c2f5ff522f3ff071e688b00fb79917"}, @ra={0x5, 0x2, 0x7}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x2b, 0x12, 0x2, 0xaf, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @mcast2, @mcast2, @remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0x7, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x40}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x1e0}}], 0x6, 0x400c404) sendmmsg$inet6(r6, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000040)=0x4a, 0x4) 13.371361258s ago: executing program 8 (id=1829): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000b282456f40b2873c7d27a5785bf2e286961d3be5e937647247413bf6713c96970069920a5210982867b2d76783887ba50963201fc7c2117a453013277a09a605a31569257046eee3a7225153280d1232541ff3accd53c877702c01af9209"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000000)) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 11.760261392s ago: executing program 8 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x401}, {}, 0x8001}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@private=0xa010101}, {{@in6=@local, 0xfffffffe, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x13c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@dioread_nolock}, {@nobarrier}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r7}}, {@uid_lt={'uid<', r7}}]}, 0xee, 0x4a8, &(0x7f0000000980)="$eJzs3E1sVEUcAPD/e/3mQyriBwhaxQ+i0tLyIQcvGk08aGKiB4ynWgpBCjW0JkIaRQ94NCTejUcT7yae9GLUgzHxqndDQkwvoKdn3u57y7bd7efSBff3S3Y7s2+Wmf+bnX2zM7sE0LGG8rskYltE/BERO6rZhQWGqn9uzs9N/DM/N5FElr35d1Ipd2N+bqIsWj5vazWTZRF9ebKvQb1X3okYn5qavFDkR2bPvT8yc/HSwTPnxk9Pnp48P3b8+JHD+3qPjR2tHM/WGV9a/M3jurHno+m9u199++rrEyeuvvvzN3l7txXH6+NYl2xpC4eqZ3exR/O7JzdU2R3l1/xue90DSXfzwsOb0CBWrysi8u7qqeSS6IqB2rEd8cqnbWwacJtlWZY1uj5H3XU7A/6nEuMbOlR5rc8//5a3zZl53BmuvxgRB4vM/NzEzVr83bW1g55Fn29baSgiTlz+98v8Fq1YhwAAWMH3+fznuUbzvzQeqCt3T7GHMhgR90bEzoi4LyJ2RcT9EZWyD0ace2iN9S/eIVk6/0mvrSuwVcrnfy8Ue1s3F8z/ytlfDHYVue2V+HuSU2emJg8V5+RA9PTl+dFl6vjh5d8/L9P9i47Vz//yW15/ORcs2nGte9EC3cnx2fFKIsuyjzcWflz/JGJPd6P4kyi3cZKI2B0Re5Y8O11VHWee+Xpvs2Mrx7+MZfaZViv7KuLpav9fXjj/v9VVSf3+5EBE1PYnR58/NnZ0pD+mJg+NlK+KpX757cobzerfUPwtkPf/loav/9ou8GDSHzFz8dLZyn7tzNrruPLnZ3VjesHuch5/+m3Eml//vclblXRv8diH47OzF0YjepPXlj4+duu5Zb4sn8d/YH/j8b+zrsUPR0T+It4XEY8Um7h53z0WEY9HxP5l4v/ppSfea3as2v99DeJvtirfWteLE7Vs/0d9/6890XX2x++a1T9U7EFGMQ6K+Htvlcj7/0gldaB4pPb+t4zVNnBdJw0AAADuMmnlO/BJOlxLp+nwcPU7/LtiSzo1PTP77KnpD86frH5XfjB60nKla0fdeuhosTZc5scW5Q8X68ZfdA1U8sMT01Mn2x08dLitTcZ/7q+udrcOuO1asI8G3KWMf+hcxj90LuMfOpfxD52r0fjf6A8LgLvDqq//vbe3HcDmq4z/py63uxlAG/j8D53L+IeO1PS38emGfvLfNJG0+h9smCj/74TNqGvlRLlqsum1D6z76f0rn7pI23tWOybRvaQvorulVfQ1PNTGNyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAW+i8AAP//2zzRKA==") 10.345649589s ago: executing program 8 (id=1832): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 10.266289018s ago: executing program 0 (id=1833): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.873747802s ago: executing program 1 (id=1834): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$notify(r4, 0x402, 0x80000001) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x5}, @fwd={0x1}, @ptr={0x2}]}, {0x0, [0x61, 0x5f, 0x2e, 0x2e, 0x5f, 0x0, 0x30, 0x2e, 0x30]}}, &(0x7f0000000380)=""/144, 0x47, 0x90, 0x0, 0x1}, 0x28) 8.507075277s ago: executing program 2 (id=1835): mmap(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = syz_io_uring_setup(0x504f, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004640)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 8.486257984s ago: executing program 1 (id=1836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r6, &(0x7f0000001fc0)=""/4079, 0xfef) openat(r6, &(0x7f0000000100)='./file0\x00', 0xc0000, 0x21) sched_setaffinity(r3, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') 8.315649119s ago: executing program 7 (id=1837): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='uiOn\\', &(0x7f0000000180)='0\x00#\x00\xd0\x00 \x00\xa7\x93H\x88\xf3?d@Y\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\xd8D7u\x95\x964\\\x0f\xef;\x03\xa4C\x18\xf5\xe8\x87\xb3l\x17\x84\x9d=\xa2\xc6\xf6\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd\xae<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xe4\x18\x95\x9e\x15~J\xe0\xf4\xbb', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b27, &(0x7f0000000040)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x11, 0x50, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf1, 0x13, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x83c0550b, 0x0) 8.180821024s ago: executing program 2 (id=1838): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="0600000004006496f2f7ea95972000000000e665c2ca340e2d3d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 7.193649845s ago: executing program 8 (id=1839): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000280)=ANY=[], 0x1, 0x230, &(0x7f0000000640)="$eJzs3c9qE10UAPAzbdokH9+iO1EQRlzoqqjgviIVxIBQiaC7gl01q2STZNM+hq/gc+kDSFd1UUbizDRjOmmD9I+pv9+mp/fcMzN37mQmEHKTRe7bnc/RaiWxshVbcZzERqxE6TAAgNvkOMvie5arNDcWq16wGwDwV5nz/K86mVebePwDwFJ69+HjmxedzvZOmrYijg6H3WE3/5vnX73ubD9Jf9mYVh0Nh93V0/zTdPa9wyS/Fv8V+Wd5fXqaXo+I7no8fpjnJ7mXbzvp7/XN+DT3qH0iAQAAAAAAAAAAAAAAAAAAAADAcrsfaal2fZ/Nzdl8u8jn/1XWB5pZv6cR98r1AafLA2UH1zEoAAAAAAAAAAAAAAAAAAAAWDKD0Xh/t9fb60+DZkRUWxo1feYHSbHhhTpfRfD17vP3kwNYrGqlXZ9KZk7CbNAuhllJnWS5i3aaJD+K4qs8G+36yV0kiMaNTNwlBullbbBZTvPZVDuSc8qzbBLUvwrKZTHmlq9feG082vnTcR1PrtAvD/qDUWTndp7eI5rXdC8CAAAAAAAAAAAAAAAAAIB/XeVb32e0Vm/iiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+g1G4/JX/sf7u73eXn8wGu/vtoq2aUtdcBAR/1/QZ68/KPe1Fq2bGSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC33s8AAAD//wmuGq0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xa) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, 0xfffffff5, 0x6) 7.073831025s ago: executing program 1 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000181100", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x8000) 6.952934641s ago: executing program 0 (id=1841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004ac0)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r5) ftruncate(0xffffffffffffffff, 0xc17a) read$FUSE(r6, &(0x7f0000002280)={0x2020}, 0x2020) 5.599992161s ago: executing program 1 (id=1842): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8000009d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 5.488357511s ago: executing program 2 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x401}, {}, 0x8001}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@private=0xa010101}, {{@in6=@local, 0xfffffffe, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x13c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@dioread_nolock}, {@nobarrier}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r7}}, {@uid_lt={'uid<', r7}}]}, 0xee, 0x4a8, &(0x7f0000000980)="$eJzs3E1sVEUcAPD/e/3mQyriBwhaxQ+i0tLyIQcvGk08aGKiB4ynWgpBCjW0JkIaRQ94NCTejUcT7yae9GLUgzHxqndDQkwvoKdn3u57y7bd7efSBff3S3Y7s2+Wmf+bnX2zM7sE0LGG8rskYltE/BERO6rZhQWGqn9uzs9N/DM/N5FElr35d1Ipd2N+bqIsWj5vazWTZRF9ebKvQb1X3okYn5qavFDkR2bPvT8yc/HSwTPnxk9Pnp48P3b8+JHD+3qPjR2tHM/WGV9a/M3jurHno+m9u199++rrEyeuvvvzN3l7txXH6+NYl2xpC4eqZ3exR/O7JzdU2R3l1/xue90DSXfzwsOb0CBWrysi8u7qqeSS6IqB2rEd8cqnbWwacJtlWZY1uj5H3XU7A/6nEuMbOlR5rc8//5a3zZl53BmuvxgRB4vM/NzEzVr83bW1g55Fn29baSgiTlz+98v8Fq1YhwAAWMH3+fznuUbzvzQeqCt3T7GHMhgR90bEzoi4LyJ2RcT9EZWyD0ace2iN9S/eIVk6/0mvrSuwVcrnfy8Ue1s3F8z/ytlfDHYVue2V+HuSU2emJg8V5+RA9PTl+dFl6vjh5d8/L9P9i47Vz//yW15/ORcs2nGte9EC3cnx2fFKIsuyjzcWflz/JGJPd6P4kyi3cZKI2B0Re5Y8O11VHWee+Xpvs2Mrx7+MZfaZViv7KuLpav9fXjj/v9VVSf3+5EBE1PYnR58/NnZ0pD+mJg+NlK+KpX757cobzerfUPwtkPf/loav/9ou8GDSHzFz8dLZyn7tzNrruPLnZ3VjesHuch5/+m3Eml//vclblXRv8diH47OzF0YjepPXlj4+duu5Zb4sn8d/YH/j8b+zrsUPR0T+It4XEY8Um7h53z0WEY9HxP5l4v/ppSfea3as2v99DeJvtirfWteLE7Vs/0d9/6890XX2x++a1T9U7EFGMQ6K+Htvlcj7/0gldaB4pPb+t4zVNnBdJw0AAADuMmnlO/BJOlxLp+nwcPU7/LtiSzo1PTP77KnpD86frH5XfjB60nKla0fdeuhosTZc5scW5Q8X68ZfdA1U8sMT01Mn2x08dLitTcZ/7q+udrcOuO1asI8G3KWMf+hcxj90LuMfOpfxD52r0fjf6A8LgLvDqq//vbe3HcDmq4z/py63uxlAG/j8D53L+IeO1PS38emGfvLfNJG0+h9smCj/74TNqGvlRLlqsum1D6z76f0rn7pI23tWOybRvaQvorulVfQ1PNTGNyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAW+i8AAP//2zzRKA==") 5.446748468s ago: executing program 7 (id=1844): bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000080000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = socket(0x10, 0x803, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x4800) 4.281695518s ago: executing program 7 (id=1845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 4.177845078s ago: executing program 2 (id=1846): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="37a4cb6de01a15e28e2e9633ad83cc9e921ed75cfefdc2a5c29c6b6c22fc6535e79fe3680d", 0x25}, {&(0x7f0000001980)="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", 0x54e}], 0x2}, 0x11084) 3.047441669s ago: executing program 2 (id=1847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) prlimit64(r0, 0x7, &(0x7f0000000000)={0x9, 0xfffffffffffffffd}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c00"], 0xa8}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) 1.354731091s ago: executing program 7 (id=1848): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000800)={0xc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000061b803080000", @ANYRES32=0x1, @ANYBLOB="ff27070200"/17, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r8, r7, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40012001, 0x0) 1.109325084s ago: executing program 9 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000028c0), 0x20a40, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, 0x0) socketpair(0x1e, 0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.107414612s ago: executing program 8 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0x20002078) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000b4f10000080000000800000012000000", @ANYRES32, @ANYBLOB, @ANYBLOB="04000000000000000000000002000000000000000000002300000061a72e85cc2337091d4823e8237a93290d78b58a74b8a07e759bd3e304274a35f44c9832cbf68129e512eab9c19e3c8bb5a54cc3def73ba47ed41f5009acdce47062423cf14e72d9eb0c48dbee7159e7f8e8bee0ef0fd1338c"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x14c57a7e, r10}, 0x38) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0) ioctl$TCFLSH(r11, 0x400455c8, 0x200000008) 0s ago: executing program 2 (id=1850): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108590000224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) kernel console output (not intermixed with test programs): (loop2): encrypted files will use data=ordered instead of data journaling mode [ 637.293656][ T5941] usb 1-1: Manufacturer: syz [ 637.306744][ T5941] usb 1-1: SerialNumber: syz [ 637.313402][T10462] EXT4-fs (loop2): 1 truncate cleaned up [ 637.315205][ T5941] usb 1-1: config 0 descriptor?? [ 637.370940][T10462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.387002][ T5941] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 637.450810][ T5941] usb 1-1: No valid video chain found. [ 637.565531][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'. [ 637.592268][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'. [ 637.611018][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.635728][ T885] usb 1-1: USB disconnect, device number 17 [ 637.715003][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.722262][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.786230][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.793494][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.866454][T10462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.411846][T10171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 638.489165][ T5941] usb 4-1: USB disconnect, device number 11 [ 638.530952][T10171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 638.563248][ T5941] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 638.639949][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 638.646391][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.719634][T10171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 638.814902][T10171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 640.474973][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.580359][T10171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.988037][T10171] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.342436][T10517] ceph: No mds server is up or the cluster is laggy [ 641.430179][T10528] vxfs: WRONG superblock magic 00000000 at 1 [ 641.440868][T10528] vxfs: WRONG superblock magic 00000000 at 8 [ 641.447141][T10528] vxfs: can't find superblock. [ 641.583265][ T5987] libceph: connect (1)[c::]:6789 error -101 [ 641.589472][ T5987] libceph: mon0 (1)[c::]:6789 connect error [ 641.858373][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.865636][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.921551][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.928791][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.160049][T10531] loop1: detected capacity change from 0 to 512 [ 642.198132][T10531] EXT4-fs: Ignoring removed bh option [ 642.249104][T10531] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 642.399206][T10531] EXT4-fs (loop1): 1 truncate cleaned up [ 642.462556][T10531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.955571][T10548] sit0: left allmulticast mode [ 643.050331][T10548] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 643.111488][T10548] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1283'. [ 643.174047][T10551] sch_fq: defrate 0 ignored. [ 643.895668][T10171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.195869][ T5987] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 644.393861][ T5987] usb 1-1: Using ep0 maxpacket: 8 [ 644.419875][ T5987] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 644.460373][ T5987] usb 1-1: config 0 has no interface number 0 [ 644.498894][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 644.517264][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.533478][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.542376][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.582238][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 644.585035][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 644.603139][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 644.672056][ T5987] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 644.751278][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 644.826706][ T5987] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 644.871100][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.917773][ T5987] usb 1-1: config 0 descriptor?? [ 644.963018][ T5987] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 645.652559][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 645.852715][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 645.867245][ T10] usb 4-1: config 1 has no interface number 1 [ 645.897408][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 645.933609][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 645.974812][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.024198][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.058207][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.101008][ T10] usb 4-1: Product: syz [ 646.147696][ T10] usb 4-1: Manufacturer: syz [ 646.160743][T10591] sit0: entered promiscuous mode [ 646.165897][ T10] usb 4-1: SerialNumber: syz [ 646.205457][T10591] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 646.242120][T10591] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1288'. [ 646.473007][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 646.572343][ T10] usb 4-1: USB disconnect, device number 12 [ 646.633388][ T51] Bluetooth: hci0: command tx timeout [ 646.741231][T10171] veth0_vlan: entered promiscuous mode [ 646.830503][ T9443] udevd[9443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.999996][T10171] veth1_vlan: entered promiscuous mode [ 647.270518][ T5987] usb 1-1: USB disconnect, device number 18 [ 647.352999][ T5987] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 647.452545][T10567] chnl_net:caif_netlink_parms(): no params data found [ 647.509635][ T7500] bridge_slave_1: left allmulticast mode [ 647.553598][ T7500] bridge_slave_1: left promiscuous mode [ 647.651339][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.826882][T10618] loop1: detected capacity change from 0 to 128 [ 647.856771][ T7500] bridge_slave_0: left allmulticast mode [ 648.505073][T10618] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 648.532018][ T7500] bridge_slave_0: left promiscuous mode [ 648.539626][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.549552][T10618] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 648.810991][ T51] Bluetooth: hci0: command tx timeout [ 649.472298][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 649.481291][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 650.232422][ T5941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 650.911634][ T51] Bluetooth: hci0: command tx timeout [ 651.062941][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 651.071626][ T5941] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 651.087427][ T5941] usb 3-1: config 0 has no interface number 0 [ 651.095990][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.112096][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 651.125884][T10629] loop3: detected capacity change from 0 to 40427 [ 651.128967][ T5941] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 651.167063][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 651.174853][T10629] F2FS-fs (loop3): invalid crc value [ 651.180743][ T5941] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 651.211138][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.241834][ T5941] usb 3-1: config 0 descriptor?? [ 651.278705][ T5941] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 651.372167][ T7500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.391000][ T7500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.404424][ T7500] bond0 (unregistering): Released all slaves [ 651.418150][T10629] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 651.429582][T10629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 651.520200][T10633] macsec1: entered promiscuous mode [ 651.526689][T10633] macsec1: entered allmulticast mode [ 651.534698][T10642] warning: `syz.0.1301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 651.765482][ T5860] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.847830][ T7500] hsr_slave_0: left promiscuous mode [ 651.912380][ T7500] hsr_slave_1: left promiscuous mode [ 651.919419][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.969577][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.952099][ T51] Bluetooth: hci0: command tx timeout [ 653.020602][ T885] usb 3-1: USB disconnect, device number 5 [ 653.987447][T10666] loop1: detected capacity change from 0 to 512 [ 653.999315][T10666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 654.008319][ T885] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 654.033081][T10666] EXT4-fs (loop1): orphan cleanup on readonly fs [ 654.050079][T10666] __quota_error: 16 callbacks suppressed [ 654.050129][T10666] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 654.066280][T10666] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 654.076054][T10666] EXT4-fs error (device loop1): ext4_acquire_dquot:6931: comm syz.1.1311: Failed to acquire dquot type 1 [ 654.113580][T10666] EXT4-fs (loop1): 1 truncate cleaned up [ 654.157355][T10666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.517020][T10675] loop2: detected capacity change from 0 to 16 [ 655.751353][T10675] erofs (device loop2): mounted with root inode @ nid 36. [ 656.058045][T10678] binder: 10661:10678 ioctl 400c620e 200000000240 returned -22 [ 656.213731][ T7500] team0 (unregistering): Port device team_slave_1 removed [ 656.232993][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.435319][ T7500] team0 (unregistering): Port device team_slave_0 removed [ 657.344443][T10687] loop2: detected capacity change from 0 to 128 [ 657.624425][T10687] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 657.724842][T10687] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 657.967769][T10697] vxfs: WRONG superblock magic 00000000 at 1 [ 657.977357][T10697] vxfs: WRONG superblock magic 00000000 at 8 [ 657.983531][T10697] vxfs: can't find superblock. [ 658.257332][T10695] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 658.660178][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 658.682209][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 658.866698][ T5883] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 658.876791][ T5883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 658.888927][ T5883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 658.897795][ T5883] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 658.910433][ T5883] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 659.461572][T10698] macsec1: entered promiscuous mode [ 659.466921][T10698] team0: entered promiscuous mode [ 659.472051][T10698] team_slave_0: entered promiscuous mode [ 659.477942][T10698] team_slave_1: entered promiscuous mode [ 659.484081][T10698] macsec1: entered allmulticast mode [ 659.489376][T10698] team0: entered allmulticast mode [ 659.494711][T10698] team_slave_0: entered allmulticast mode [ 659.500437][T10698] team_slave_1: entered allmulticast mode [ 659.705468][ T5862] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 660.502563][ T5941] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 660.553877][T10727] loop1: detected capacity change from 0 to 256 [ 660.790897][T10728] loop3: detected capacity change from 0 to 256 [ 660.809887][T10728] exfat: Deprecated parameter 'namecase' [ 660.817030][T10728] exfat: Unknown parameter 'audit' [ 661.002228][T10728] loop3: detected capacity change from 0 to 1024 [ 661.021659][T10728] EXT4-fs: Ignoring removed nobh option [ 661.027414][T10728] EXT4-fs: Ignoring removed bh option [ 661.035874][ T51] Bluetooth: hci6: command tx timeout [ 661.349254][T10728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.543734][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 662.551356][ T5941] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 662.572029][ T5941] usb 3-1: config 0 has no interface number 0 [ 662.578180][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.844349][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 663.112099][ T5883] Bluetooth: hci6: command tx timeout [ 663.214321][ T5941] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 663.226068][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 663.247151][ T5941] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 663.256454][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.293392][ T5941] usb 3-1: config 0 descriptor?? [ 663.321144][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.376942][T10567] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.463726][T10567] bridge_slave_0: entered allmulticast mode [ 663.560350][T10567] bridge_slave_0: entered promiscuous mode [ 663.637176][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.676374][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.677884][ T5941] usb 3-1: can't set config #0, error -71 [ 663.722687][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.730000][T10567] bridge_slave_1: entered allmulticast mode [ 663.783850][ T5941] usb 3-1: USB disconnect, device number 6 [ 663.833537][T10567] bridge_slave_1: entered promiscuous mode [ 664.255422][T10567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.298816][T10567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.511503][T10567] team0: Port device team_slave_0 added [ 664.657488][T10567] team0: Port device team_slave_1 added [ 664.825341][T10567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.886067][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.016424][T10567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.030479][T10567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.044548][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.070766][T10567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.097577][T10747] binder: 10746:10747 ioctl 400c620e 200000000240 returned -22 [ 665.192183][ T5883] Bluetooth: hci6: command tx timeout [ 666.063714][T10774] loop1: detected capacity change from 0 to 4096 [ 666.149674][T10774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.282065][ T5883] Bluetooth: hci6: command tx timeout [ 667.489203][T10567] hsr_slave_0: entered promiscuous mode [ 667.500854][T10567] hsr_slave_1: entered promiscuous mode [ 667.520259][T10567] debugfs: 'hsr0' already exists in 'hsr' [ 667.547624][T10567] Cannot create hsr debugfs directory [ 668.743186][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.053155][T10707] chnl_net:caif_netlink_parms(): no params data found [ 669.200236][T10801] loop1: detected capacity change from 0 to 128 [ 669.323328][T10801] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 669.347275][T10801] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 671.650256][ T5860] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 672.356553][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.379117][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.412429][T10707] bridge_slave_0: entered allmulticast mode [ 672.437403][T10821] netlink: 'syz.1.1343': attribute type 4 has an invalid length. [ 672.456218][T10707] bridge_slave_0: entered promiscuous mode [ 672.690753][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.778011][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.814903][T10707] bridge_slave_1: entered allmulticast mode [ 672.854640][T10707] bridge_slave_1: entered promiscuous mode [ 673.714203][ T7500] bridge_slave_1: left allmulticast mode [ 673.720273][ T7500] bridge_slave_1: left promiscuous mode [ 673.794881][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.803719][T10262] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 673.831185][ T7500] bridge_slave_0: left allmulticast mode [ 673.851916][ T7500] bridge_slave_0: left promiscuous mode [ 673.860710][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.989631][T10262] usb 1-1: Using ep0 maxpacket: 32 [ 674.000076][T10262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 674.013991][T10262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 674.025696][T10262] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 674.035228][T10262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.054602][T10262] usb 1-1: config 0 descriptor?? [ 674.063367][T10830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.094689][T10262] hub 1-1:0.0: USB hub found [ 674.216614][T10835] binder: 10827:10835 ioctl 400c620e 200000000240 returned -22 [ 674.302322][T10262] hub 1-1:0.0: 1 port detected [ 674.732503][T10262] usb 1-1: USB disconnect, device number 19 [ 674.782789][ T7500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.807040][ T7500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.840115][ T7500] bond0 (unregistering): Released all slaves [ 674.905833][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.938703][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.489889][ T7500] hsr_slave_0: left promiscuous mode [ 675.518484][ T7500] hsr_slave_1: left promiscuous mode [ 675.545169][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.572833][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.664622][ T7500] veth1_vlan: left promiscuous mode [ 675.688190][ T7500] veth0_vlan: left promiscuous mode [ 677.335655][ T7500] team0 (unregistering): Port device team_slave_1 removed [ 677.448120][ T7500] team0 (unregistering): Port device team_slave_0 removed [ 677.667557][T10864] hub 8-0:1.0: USB hub found [ 677.673928][T10864] hub 8-0:1.0: 1 port detected [ 678.288320][T10866] netlink: 'syz.2.1356': attribute type 4 has an invalid length. [ 678.478939][T10707] team0: Port device team_slave_0 added [ 678.759909][T10872] loop3: detected capacity change from 0 to 256 [ 678.779296][T10872] exfat: Deprecated parameter 'namecase' [ 678.786531][T10872] exfat: Unknown parameter 'audit' [ 678.951291][T10872] loop3: detected capacity change from 0 to 1024 [ 678.977584][T10872] EXT4-fs: Ignoring removed nobh option [ 678.983440][T10872] EXT4-fs: Ignoring removed bh option [ 679.276892][T10872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.905534][T10845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.314652][T10707] team0: Port device team_slave_1 added [ 680.750047][T10883] hub 3-0:1.0: USB hub found [ 680.807342][T10883] hub 3-0:1.0: 1 port detected [ 680.820133][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.870934][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.994263][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.008323][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.051400][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.094275][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.158850][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.183519][ T30] audit: type=1326 audit(1755066484.661:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10895 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 683.436169][ T30] audit: type=1326 audit(1755066484.671:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10895 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 683.477650][ T30] audit: type=1326 audit(1755066484.681:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10895 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 683.589639][ T30] audit: type=1326 audit(1755066484.691:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10895 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 683.645892][ T30] audit: type=1326 audit(1755066484.691:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10895 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 684.568283][T10707] hsr_slave_0: entered promiscuous mode [ 684.754158][T10707] hsr_slave_1: entered promiscuous mode [ 684.772986][T10707] debugfs: 'hsr0' already exists in 'hsr' [ 684.778785][T10707] Cannot create hsr debugfs directory [ 684.961241][T10918] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 685.378320][T10567] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 685.481326][T10567] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 685.595678][T10567] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 685.694720][T10567] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 687.119928][T10940] veth0_to_team: entered promiscuous mode [ 687.144135][T10940] veth0_to_team: entered allmulticast mode [ 687.780770][T10567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.963904][T10567] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.018068][ T7500] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.025327][ T7500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.108542][ T7500] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.115902][ T7500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.710220][T10707] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 689.994630][T10707] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 691.578170][T10707] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 691.686548][T10707] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 692.415135][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 692.461800][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.629801][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.642118][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.661963][T10567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.672072][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.716174][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.723492][ T8733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.762218][ T24] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 692.782082][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.787094][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.797394][ T8733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.841030][ T24] usb 1-1: config 0 descriptor?? [ 693.086170][T11010] loop2: detected capacity change from 0 to 1024 [ 693.143355][T11010] EXT4-fs: Ignoring removed nobh option [ 693.214423][T11010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 693.259490][ T24] hid-led 0003:1D34:0004.0008: item fetching failed at offset 3/5 [ 693.290030][T11010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 693.313142][ T24] hid-led 0003:1D34:0004.0008: probe with driver hid-led failed with error -22 [ 693.460928][ T24] usb 1-1: USB disconnect, device number 20 [ 693.930534][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.051792][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.365217][T10567] veth0_vlan: entered promiscuous mode [ 694.419141][T10567] veth1_vlan: entered promiscuous mode [ 694.677367][T10567] veth0_macvtap: entered promiscuous mode [ 694.947596][T10567] veth1_macvtap: entered promiscuous mode [ 695.072464][T10567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.134623][T10567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.210879][ T6048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.523139][ T6048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.557044][ T6048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.619242][ T6048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.434753][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.485297][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.700393][ T8734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.752660][ T8734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.901327][T10707] veth0_vlan: entered promiscuous mode [ 696.937420][T10707] veth1_vlan: entered promiscuous mode [ 697.032967][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 697.033676][ T5883] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 697.141251][T10707] veth0_macvtap: entered promiscuous mode [ 697.148331][T11064] loop3: detected capacity change from 0 to 256 [ 697.194121][T11064] exfat: Bad value for 'gid' [ 697.219247][T11064] exfat: Bad value for 'gid' [ 697.251124][T10707] veth1_macvtap: entered promiscuous mode [ 697.389848][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.518633][T11072] loop7: detected capacity change from 0 to 256 [ 697.751097][T11072] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 698.501894][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.664772][ T6400] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.712095][ T6400] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.750264][ T30] audit: type=1326 audit(1755066500.271:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 698.823459][ T6400] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.840831][ T6400] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.862516][ T30] audit: type=1326 audit(1755066500.271:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 698.938473][ T30] audit: type=1326 audit(1755066500.271:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 699.008813][ T30] audit: type=1326 audit(1755066500.271:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 699.065044][ T30] audit: type=1326 audit(1755066500.271:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 699.490557][T11081] binder: 11054:11081 ioctl 400c620e 200000000240 returned -22 [ 700.089494][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.096001][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.800220][ T30] audit: type=1326 audit(1755066500.301:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 701.010295][ T30] audit: type=1326 audit(1755066500.301:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 701.081213][ T30] audit: type=1326 audit(1755066500.311:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 701.166571][ T30] audit: type=1326 audit(1755066500.311:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 701.217781][ T30] audit: type=1326 audit(1755066500.311:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.3.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f45a358ebe9 code=0x7ffc0000 [ 701.655618][ T8733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.711436][ T8733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.434410][ T8733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.520404][ T8733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.742408][T11156] loop3: detected capacity change from 0 to 1024 [ 708.859798][T11156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.935518][T11156] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.498022][T11176] binder: 11173:11176 ioctl 400c620e 200000000240 returned -22 [ 710.639412][T11165] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 710.663248][ T5941] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 710.873116][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 710.912167][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 710.954492][ T5941] usb 7-1: New USB device found, idVendor=0567, idProduct=3007, bcdDevice= 0.00 [ 710.996992][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.083439][ T5941] usb 7-1: config 0 descriptor?? [ 711.161100][T11190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 711.487130][T11203] macsec2: entered promiscuous mode [ 712.217127][ T5941] hid-generic 0003:0567:3007.0009: unknown main item tag 0x0 [ 712.231773][ T5941] hid-generic 0003:0567:3007.0009: item fetching failed at offset 3/5 [ 712.248738][ T5941] hid-generic 0003:0567:3007.0009: probe with driver hid-generic failed with error -22 [ 712.484689][ T5941] usb 7-1: USB disconnect, device number 2 [ 713.720040][T11221] hub 9-0:1.0: USB hub found [ 713.755037][T11221] hub 9-0:1.0: 1 port detected [ 714.749137][T11231] binder: 11229:11231 ioctl 400c620e 200000000240 returned -22 [ 718.138762][T10878] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 718.350515][T10878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 718.766032][T10878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.822138][T10878] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 718.902256][T10878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.995283][T10878] usb 8-1: config 0 descriptor?? [ 719.050818][T10878] hub 8-1:0.0: USB hub found [ 719.242248][T10878] hub 8-1:0.0: 1 port detected [ 719.453340][T10837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 720.252314][T10878] usb 8-1: USB disconnect, device number 2 [ 720.374860][T10837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 720.387032][T10837] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 720.412043][T10837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 720.443339][T10837] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 720.484675][T10837] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 720.510956][T10837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.519545][T10837] usb 7-1: Product: syz [ 720.524021][T10837] usb 7-1: Manufacturer: syz [ 720.528638][T10837] usb 7-1: SerialNumber: syz [ 720.543509][T10837] usb 7-1: config 0 descriptor?? [ 720.598792][T10837] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 722.510735][T11295] binder: 11288:11295 ioctl 400c620e 200000000240 returned -22 [ 722.931665][T11300] vxfs: WRONG superblock magic 00000000 at 1 [ 722.932026][T11300] vxfs: WRONG superblock magic 00000000 at 8 [ 722.932056][T11300] vxfs: can't find superblock. [ 723.105985][T11290] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 723.473601][T10837] scsi host1: usb-storage 7-1:0.0 [ 724.512120][T10837] usb 7-1: USB disconnect, device number 3 [ 725.081543][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 725.081570][ T30] audit: type=1326 audit(1755066526.591:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 725.619130][ T30] audit: type=1326 audit(1755066526.591:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 725.692327][ T30] audit: type=1326 audit(1755066526.601:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 725.776413][ T30] audit: type=1326 audit(1755066526.601:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 725.882194][ T30] audit: type=1326 audit(1755066526.641:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 725.904591][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.188986][ T30] audit: type=1326 audit(1755066526.641:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 726.228026][ T30] audit: type=1326 audit(1755066526.641:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 726.298075][ T30] audit: type=1326 audit(1755066526.641:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 726.320468][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.470221][ T30] audit: type=1326 audit(1755066526.661:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 726.592772][ T30] audit: type=1326 audit(1755066526.661:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.6.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 726.771165][T11331] loop2: detected capacity change from 0 to 256 [ 726.793585][T11331] exfat: Bad value for 'gid' [ 726.828839][T11331] exfat: Bad value for 'gid' [ 727.549350][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 727.560528][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 727.568940][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 727.578987][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 727.598771][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 729.572415][T11371] overlayfs: failed to resolve './file0': -2 [ 730.116406][T11372] binder: 11354:11372 ioctl 400c620e 200000000240 returned -22 [ 730.179153][ T51] Bluetooth: hci4: command tx timeout [ 731.954357][T11337] chnl_net:caif_netlink_parms(): no params data found [ 732.232466][ T51] Bluetooth: hci4: command tx timeout [ 733.365251][T11407] loop7: detected capacity change from 0 to 512 [ 733.465392][T11407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 733.515720][T11407] EXT4-fs (loop7): orphan cleanup on readonly fs [ 733.531755][T11407] __quota_error: 18 callbacks suppressed [ 733.531813][T11407] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 733.547981][T11407] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 733.557546][T11407] EXT4-fs error (device loop7): ext4_acquire_dquot:6931: comm syz.7.1470: Failed to acquire dquot type 1 [ 733.610640][T11407] EXT4-fs (loop7): 1 truncate cleaned up [ 733.654037][T11407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 734.327661][ T51] Bluetooth: hci4: command tx timeout [ 735.235516][T11416] loop6: detected capacity change from 0 to 1024 [ 735.250079][T11416] EXT4-fs: Ignoring removed nobh option [ 738.022418][ T51] Bluetooth: hci4: command tx timeout [ 738.144990][T11416] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 738.156240][T11416] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 738.156332][T11416] EXT4-fs: failed to create workqueue [ 738.171438][T11416] EXT4-fs (loop6): mount failed [ 738.429457][T10567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.452350][T11337] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.459545][T11337] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.606984][T11337] bridge_slave_0: entered allmulticast mode [ 738.692546][T11337] bridge_slave_0: entered promiscuous mode [ 738.747281][T11337] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.814408][T11337] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.889947][T11337] bridge_slave_1: entered allmulticast mode [ 738.954574][T11337] bridge_slave_1: entered promiscuous mode [ 740.665564][ T30] audit: type=1326 audit(1755066542.181:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de058ebe9 code=0x7ffc0000 [ 740.852124][ T30] audit: type=1326 audit(1755066542.181:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de058ebe9 code=0x7ffc0000 [ 740.921407][ T30] audit: type=1326 audit(1755066542.181:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2de058ebe9 code=0x7ffc0000 [ 741.233088][ T30] audit: type=1326 audit(1755066542.181:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de058ebe9 code=0x7ffc0000 [ 741.255931][ T30] audit: type=1326 audit(1755066542.181:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de058ebe9 code=0x7ffc0000 [ 741.387815][T11195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.479680][T11443] binder: 11437:11443 ioctl 400c620e 200000000240 returned -22 [ 742.081527][T11444] netlink: 'syz.0.1478': attribute type 4 has an invalid length. [ 742.275940][T11337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.372719][T11337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.046704][T11337] team0: Port device team_slave_0 added [ 743.090703][T11337] team0: Port device team_slave_1 added [ 743.668904][T11337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.712563][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.798874][T11337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.121663][T11337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.168093][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.302595][T11337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.844731][T11477] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 745.117421][T11479] ceph: No mds server is up or the cluster is laggy [ 745.153261][T10878] libceph: connect (1)[c::]:6789 error -101 [ 745.165269][T10878] libceph: mon0 (1)[c::]:6789 connect error [ 745.204236][T11482] vxfs: WRONG superblock magic 00000000 at 1 [ 745.212508][T11482] vxfs: WRONG superblock magic 00000000 at 8 [ 745.218561][T11482] vxfs: can't find superblock. [ 745.480550][T10878] libceph: connect (1)[c::]:6789 error -101 [ 745.548040][T10878] libceph: mon0 (1)[c::]:6789 connect error [ 745.767552][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.032283][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1488'. [ 746.544309][T11495] hub 8-0:1.0: USB hub found [ 746.552945][T11495] hub 8-0:1.0: 1 port detected [ 746.970977][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 746.981170][ T5883] Bluetooth: hci5: command 0x1003 tx timeout [ 747.338934][T11501] netlink: 'syz.6.1491': attribute type 4 has an invalid length. [ 748.644521][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.777594][T11337] hsr_slave_0: entered promiscuous mode [ 748.804996][T11337] hsr_slave_1: entered promiscuous mode [ 748.835752][T11337] debugfs: 'hsr0' already exists in 'hsr' [ 748.876356][T11337] Cannot create hsr debugfs directory [ 749.128037][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.607686][T10262] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 750.768787][T11534] hub 8-0:1.0: USB hub found [ 750.776504][T11534] hub 8-0:1.0: 1 port detected [ 751.522423][T10262] usb 1-1: Using ep0 maxpacket: 32 [ 751.579566][T10262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 751.603919][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.602119][T10262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 752.884991][T11548] vxfs: WRONG superblock magic 00000000 at 1 [ 752.885675][T11548] vxfs: WRONG superblock magic 00000000 at 8 [ 752.885735][T11548] vxfs: can't find superblock. [ 752.922148][T11543] loop7: detected capacity change from 0 to 256 [ 753.151372][T11543] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 753.264766][T11542] ceph: No mds server is up or the cluster is laggy [ 753.496035][T10262] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 753.586494][T10262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.594993][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 753.601094][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 753.767784][T11554] loop1: detected capacity change from 0 to 256 [ 753.819961][T11554] exfat: Bad value for 'gid' [ 754.057144][T11554] exfat: Bad value for 'gid' [ 755.157166][T10262] usb 1-1: config 0 descriptor?? [ 756.113280][T10262] usb 1-1: can't set config #0, error -71 [ 756.130796][T10262] usb 1-1: USB disconnect, device number 21 [ 756.329963][ T30] audit: type=1326 audit(1755066557.831:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.6.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 756.602777][ T30] audit: type=1326 audit(1755066557.851:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.6.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 756.625147][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.806155][ T30] audit: type=1326 audit(1755066557.851:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.6.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 756.958318][T11570] loop7: detected capacity change from 0 to 1024 [ 757.057753][ T30] audit: type=1326 audit(1755066557.901:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.6.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff1eb98ebe9 code=0x7ffc0000 [ 757.308798][T11570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 757.317727][T11570] System zones: 0-1, 3-36 [ 757.410756][T11570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.201076][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1507'. [ 759.180282][T10567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.958503][T11592] nbd: device at index 6 is going down [ 761.149024][T11598] overlayfs: failed to resolve './file0': -2 [ 761.520283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 761.527055][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.657576][T11606] overlayfs: failed to resolve './file0': -2 [ 762.481708][ T12] bond0 (unregistering): Released all slaves [ 762.822593][T11611] hub 8-0:1.0: USB hub found [ 762.830307][T11611] hub 8-0:1.0: 1 port detected [ 763.545449][T11600] 9pnet_virtio: no channels available for device syz [ 765.665641][T11337] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 765.711791][T11619] loop1: detected capacity change from 0 to 8192 [ 766.049305][ T5860] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 766.105609][ T5860] FAT-fs (loop1): Filesystem has been set read-only [ 766.157653][T11337] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 766.678679][T11635] ip6gretap1: entered allmulticast mode [ 766.688957][T11637] bridge0: port 3(syz_tun) entered blocking state [ 766.696976][T11637] bridge0: port 3(syz_tun) entered disabled state [ 766.705249][T11637] syz_tun: entered allmulticast mode [ 766.713172][T11637] syz_tun: entered promiscuous mode [ 766.719417][T11637] bridge0: port 3(syz_tun) entered blocking state [ 766.726579][T11637] bridge0: port 3(syz_tun) entered forwarding state [ 766.767512][T11337] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 766.849384][T11337] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 767.031303][ T12] hsr_slave_0: left promiscuous mode [ 767.194439][ T12] hsr_slave_1: left promiscuous mode [ 767.291841][ T12] veth1_macvtap: left promiscuous mode [ 767.381560][ T12] veth0_macvtap: left promiscuous mode [ 767.418489][ T12] veth1_vlan: left promiscuous mode [ 767.437819][T11644] loop7: detected capacity change from 0 to 40427 [ 767.449655][ T12] veth0_vlan: left promiscuous mode [ 767.566874][T11644] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 767.592553][T11644] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 767.633960][T11651] loop6: detected capacity change from 0 to 128 [ 767.789321][T11651] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 767.805627][T11651] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 768.364036][T11660] hub 8-0:1.0: USB hub found [ 768.372128][T11660] hub 8-0:1.0: 1 port detected [ 768.833144][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 769.083586][T10567] syz-executor: attempt to access beyond end of device [ 769.083586][T10567] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 769.135470][T10707] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.165167][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 769.165223][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.165246][T10567] Call Trace: [ 769.165258][T10567] [ 769.165271][T10567] dump_stack_lvl+0x16c/0x1f0 [ 769.165328][T10567] f2fs_handle_critical_error+0x624/0x9f0 [ 769.165381][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.165428][T10567] ? f2fs_build_fault_attr+0x53/0x1f0 [ 769.165478][T10567] f2fs_write_end_io+0x958/0xcf0 [ 769.165535][T10567] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 769.165594][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.165650][T10567] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 769.165701][T10567] bio_endio+0x70d/0x850 [ 769.165765][T10567] submit_bio_noacct+0x306/0x1eb0 [ 769.165818][T10567] __submit_merged_bio+0x33c/0x770 [ 769.165874][T10567] __submit_merged_write_cond+0x319/0x3f0 [ 769.165937][T10567] f2fs_write_cache_pages+0x2067/0x2570 [ 769.166022][T10567] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 769.166086][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.166129][T10567] ? __lock_acquire+0x62e/0x1ce0 [ 769.166197][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.166242][T10567] ? __lock_acquire+0x62e/0x1ce0 [ 769.166382][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.166434][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.166487][T10567] f2fs_write_data_pages+0x4ad/0xd90 [ 769.166553][T10567] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 769.166610][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.166666][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.166724][T10567] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 769.166787][T10567] do_writepages+0x27a/0x600 [ 769.166842][T10567] ? __pfx_do_writepages+0x10/0x10 [ 769.166887][T10567] ? do_raw_spin_unlock+0x172/0x230 [ 769.166929][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.166974][T10567] ? _raw_spin_unlock+0x28/0x50 [ 769.167021][T10567] filemap_fdatawrite_wbc+0x104/0x160 [ 769.167074][T10567] __filemap_fdatawrite_range+0xb9/0x100 [ 769.167136][T10567] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 769.167255][T10567] ? find_held_lock+0x2b/0x80 [ 769.167303][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.167347][T10567] ? do_raw_spin_unlock+0x172/0x230 [ 769.167388][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.167440][T10567] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 769.167520][T10567] block_operations+0x2b0/0xfe0 [ 769.167587][T10567] ? __pfx___schedule+0x10/0x10 [ 769.167630][T10567] ? __pfx_block_operations+0x10/0x10 [ 769.167756][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.167803][T10567] ? down_write+0x14d/0x200 [ 769.167858][T10567] ? __pfx_down_write+0x10/0x10 [ 769.167916][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.167962][T10567] ? rcu_is_watching+0x12/0xc0 [ 769.168017][T10567] f2fs_write_checkpoint+0x2b8/0x4c60 [ 769.168089][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.168135][T10567] ? kfree+0x2b4/0x4d0 [ 769.168181][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.168231][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.168277][T10567] ? rcu_is_watching+0x12/0xc0 [ 769.168323][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.168370][T10567] ? kthread_stop+0x273/0x630 [ 769.168412][T10567] kill_f2fs_super+0x3c2/0x470 [ 769.168449][T10567] ? __pfx_kill_f2fs_super+0x10/0x10 [ 769.168483][T10567] ? lockdep_hardirqs_on+0x7c/0x110 [ 769.168552][T10567] deactivate_locked_super+0xc1/0x1a0 [ 769.168624][T10567] deactivate_super+0xde/0x100 [ 769.168683][T10567] cleanup_mnt+0x225/0x450 [ 769.168753][T10567] task_work_run+0x150/0x240 [ 769.168797][T10567] ? __pfx_task_work_run+0x10/0x10 [ 769.168837][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 769.168886][T10567] ? __pfx___x64_sys_umount+0x10/0x10 [ 769.168935][T10567] exit_to_user_mode_loop+0xeb/0x110 [ 769.168977][T10567] do_syscall_64+0x3f6/0x4c0 [ 769.169034][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.169073][T10567] RIP: 0033:0x7f959d18ff17 [ 769.169104][T10567] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 769.169142][T10567] RSP: 002b:00007ffebe261f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 769.169179][T10567] RAX: 0000000000000000 RBX: 00007f959d211c05 RCX: 00007f959d18ff17 [ 769.169204][T10567] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebe261fe0 [ 769.169228][T10567] RBP: 00007ffebe261fe0 R08: 0000000000000000 R09: 0000000000000000 [ 769.169252][T10567] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebe263070 [ 769.169278][T10567] R13: 00007f959d211c05 R14: 00000000000bbbc4 R15: 00007ffebe2630b0 [ 769.169328][T10567] [ 769.245296][T10567] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 769.329078][T11665] overlayfs: failed to resolve './file0': -2 [ 771.010716][T11666] overlayfs: failed to resolve './file0': -2 [ 774.432107][ T5941] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 774.610742][T11696] loop7: detected capacity change from 0 to 256 [ 774.730250][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.751949][T11696] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 774.941318][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.982305][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 774.998951][ T5941] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 775.011079][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.100989][ T5941] usb 1-1: config 0 descriptor?? [ 775.636631][ T5941] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 775.688965][ T5941] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 775.998381][ T5941] usb 1-1: USB disconnect, device number 22 [ 778.078741][T11709] loop7: detected capacity change from 0 to 256 [ 779.290069][ T30] audit: type=1326 audit(1755066580.811:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 780.337998][ T30] audit: type=1326 audit(1755066580.851:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 780.529390][T11337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.553838][T11337] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.792115][ T30] audit: type=1326 audit(1755066580.851:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 780.878066][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.885283][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.900574][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.907827][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.956025][T11728] nbd: device at index 1 is going down [ 783.757901][T11739] loop7: detected capacity change from 0 to 256 [ 784.072697][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 784.587709][T11739] exfat: Bad value for 'gid' [ 784.646509][T11739] exfat: Bad value for 'gid' [ 786.757052][T11763] overlay: ./file0 is not a directory [ 787.112605][T11765] capability: warning: `syz.0.1550' uses deprecated v2 capabilities in a way that may be insecure [ 787.823414][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1555'. [ 789.816318][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 789.896462][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 789.911313][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 790.172668][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 790.183232][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.503447][T11797] loop7: detected capacity change from 0 to 128 [ 792.552425][ T51] Bluetooth: hci5: command tx timeout [ 792.568934][T11802] loop1: detected capacity change from 0 to 256 [ 792.724753][T11805] fuse: Bad value for 'fd' [ 793.127858][T11802] exfat: Bad value for 'gid' [ 793.189499][T11797] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 793.262854][T11802] exfat: Bad value for 'gid' [ 793.451662][T11797] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 793.934581][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1564'. [ 793.943986][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1564'. [ 795.062060][ T51] Bluetooth: hci5: command tx timeout [ 796.128335][T11812] team_slave_0: entered promiscuous mode [ 796.134433][T11812] team_slave_1: entered promiscuous mode [ 796.140532][T11812] macsec1: entered promiscuous mode [ 796.145839][T11812] team0: entered promiscuous mode [ 796.152515][T11812] macsec1: entered allmulticast mode [ 796.157865][T11812] team0: entered allmulticast mode [ 796.163727][T11812] team_slave_0: entered allmulticast mode [ 796.169470][T11812] team_slave_1: entered allmulticast mode [ 797.116451][ T51] Bluetooth: hci5: command tx timeout [ 797.615806][T11779] chnl_net:caif_netlink_parms(): no params data found [ 798.022333][ T6400] bridge_slave_1: left allmulticast mode [ 798.028046][ T6400] bridge_slave_1: left promiscuous mode [ 798.082454][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.752824][ T6400] bridge_slave_0: left allmulticast mode [ 798.758529][ T6400] bridge_slave_0: left promiscuous mode [ 798.824303][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.193528][ T51] Bluetooth: hci5: command tx timeout [ 799.296913][T10567] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 801.216948][T11867] loop1: detected capacity change from 0 to 256 [ 801.345545][T11867] exfat: Bad value for 'gid' [ 801.422428][T11867] exfat: Bad value for 'gid' [ 802.252363][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.310520][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.374887][ T6400] bond0 (unregistering): Released all slaves [ 802.683114][T11779] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.714104][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.745373][T11779] bridge_slave_0: entered allmulticast mode [ 802.785484][T11779] bridge_slave_0: entered promiscuous mode [ 802.828419][T11779] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.860540][T11779] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.891650][T11779] bridge_slave_1: entered allmulticast mode [ 802.921404][T11779] bridge_slave_1: entered promiscuous mode [ 803.512402][T10876] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 803.606632][ T6400] hsr_slave_0: left promiscuous mode [ 803.648544][ T6400] hsr_slave_1: left promiscuous mode [ 803.742734][T11890] fuse: Bad value for 'fd' [ 803.943511][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.250312][T11898] vxfs: WRONG superblock magic 00000000 at 1 [ 804.260226][T11898] vxfs: WRONG superblock magic 00000000 at 8 [ 804.266788][T11898] vxfs: can't find superblock. [ 804.380935][T11895] ceph: No mds server is up or the cluster is laggy [ 804.414455][ T885] libceph: connect (1)[c::]:6789 error -101 [ 804.797888][ T30] audit: type=1326 audit(1755066606.311:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.7.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 804.962673][ T885] libceph: mon0 (1)[c::]:6789 connect error [ 805.101952][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.208216][ T30] audit: type=1326 audit(1755066606.311:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.7.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 805.230729][ T30] audit: type=1326 audit(1755066606.571:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.7.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f959d18d69f code=0x7ffc0000 [ 805.253015][ T30] audit: type=1326 audit(1755066606.571:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.7.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 805.277961][ T30] audit: type=1326 audit(1755066606.571:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.7.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 805.342098][T10876] usb 7-1: device descriptor read/all, error -71 [ 805.453069][T11900] loop1: detected capacity change from 0 to 2048 [ 805.518402][T11900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.560854][ T30] audit: type=1326 audit(1755066607.061:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.2.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 806.538660][ T30] audit: type=1326 audit(1755066607.061:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.2.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 806.539692][T11900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.561183][ T30] audit: type=1326 audit(1755066607.061:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.2.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 806.561265][ T30] audit: type=1326 audit(1755066607.061:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.2.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 806.561337][ T30] audit: type=1326 audit(1755066607.061:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.2.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 809.404484][ T6400] team0 (unregistering): Port device team_slave_1 removed [ 809.498327][ T6400] team0 (unregistering): Port device team_slave_0 removed [ 811.994274][T11779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.011425][T11779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.104374][T11779] team0: Port device team_slave_0 added [ 812.402200][T11943] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1604'. [ 812.437198][T11943] loop1: detected capacity change from 0 to 2048 [ 813.248249][T11943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.612520][T11779] team0: Port device team_slave_1 added [ 815.076973][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.408707][T11961] vxfs: WRONG superblock magic 00000000 at 1 [ 815.417113][T11961] vxfs: WRONG superblock magic 00000000 at 8 [ 815.423485][T11961] vxfs: can't find superblock. [ 815.493428][T11957] ceph: No mds server is up or the cluster is laggy [ 815.514200][T10876] libceph: connect (1)[c::]:6789 error -101 [ 815.645898][T11954] random: crng reseeded on system resumption [ 815.663736][T10876] libceph: mon0 (1)[c::]:6789 connect error [ 815.862088][ T5941] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 816.186138][T11779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.223206][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.274979][T11779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.290026][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 816.302143][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.563798][T11779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.570820][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.392527][ T5941] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 817.406964][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.651490][T11779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.733401][ T5941] usb 7-1: config 0 descriptor?? [ 817.771927][ T5941] hub 7-1:0.0: USB hub found [ 817.986002][ T5941] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 818.026004][ T5941] usbhid 7-1:0.0: can't add hid device: -71 [ 818.039404][T11779] hsr_slave_0: entered promiscuous mode [ 818.053537][ T5941] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 818.059932][T11779] hsr_slave_1: entered promiscuous mode [ 818.100193][T11779] debugfs: 'hsr0' already exists in 'hsr' [ 818.115595][ T5941] usb 7-1: USB disconnect, device number 6 [ 818.116334][T11779] Cannot create hsr debugfs directory [ 818.142930][T10262] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 818.314866][T10262] usb 2-1: Using ep0 maxpacket: 32 [ 818.370068][T10262] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 818.392175][T10262] usb 2-1: config 0 has no interface number 0 [ 818.400145][T10262] usb 2-1: config 0 interface 184 has no altsetting 0 [ 818.424639][T10262] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 818.445340][T10262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.470779][T10262] usb 2-1: Product: syz [ 818.511343][T10262] usb 2-1: Manufacturer: syz [ 818.517848][T11982] veth13: entered promiscuous mode [ 818.521514][T10262] usb 2-1: SerialNumber: syz [ 818.545053][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 818.545211][T10262] usb 2-1: config 0 descriptor?? [ 818.586644][T10262] smsc75xx v1.0.0 [ 818.591299][T10262] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 818.618550][T10262] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 819.110144][T11977] loop7: detected capacity change from 0 to 40427 [ 819.131156][T11990] nbd: device at index 2 is going down [ 822.167393][T12005] ip6gretap1: entered allmulticast mode [ 822.263289][T10262] usb 2-1: USB disconnect, device number 16 [ 823.392617][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.399281][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.064951][T12012] ceph: No mds server is up or the cluster is laggy [ 824.106921][T10876] libceph: connect (1)[c::]:6789 error -101 [ 824.109972][T10876] libceph: mon0 (1)[c::]:6789 connect error [ 824.197851][T12016] vxfs: WRONG superblock magic 00000000 at 1 [ 824.206289][T12016] vxfs: WRONG superblock magic 00000000 at 8 [ 824.212833][T12016] vxfs: can't find superblock. [ 824.409651][ T885] libceph: connect (1)[c::]:6789 error -101 [ 824.458771][ T885] libceph: mon0 (1)[c::]:6789 connect error [ 825.021056][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 827.395205][T12033] loop1: detected capacity change from 0 to 4096 [ 827.440342][T11779] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 827.468074][T12033] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 827.566681][T11779] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 827.627037][T11779] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 827.697611][T11779] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 827.766471][T12033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.204727][T12042] loop6: detected capacity change from 0 to 40427 [ 828.356013][T12042] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 828.377840][T12042] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 828.671405][T12059] loop7: detected capacity change from 0 to 2048 [ 828.727403][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.806586][T12059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.310001][T12059] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.391598][T11779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.443899][T11779] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.544390][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.551635][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.739482][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.746749][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.786372][T10707] syz-executor: attempt to access beyond end of device [ 829.786372][T10707] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 829.811319][T10707] CPU: 1 UID: 0 PID: 10707 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 829.811375][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.811398][T10707] Call Trace: [ 829.811410][T10707] [ 829.811424][T10707] dump_stack_lvl+0x16c/0x1f0 [ 829.811482][T10707] f2fs_handle_critical_error+0x624/0x9f0 [ 829.811536][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.811584][T10707] ? f2fs_build_fault_attr+0x53/0x1f0 [ 829.811638][T10707] f2fs_write_end_io+0x958/0xcf0 [ 829.811696][T10707] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 829.811756][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.811819][T10707] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 829.811870][T10707] bio_endio+0x70d/0x850 [ 829.811932][T10707] submit_bio_noacct+0x306/0x1eb0 [ 829.811991][T10707] __submit_merged_bio+0x33c/0x770 [ 829.812052][T10707] __submit_merged_write_cond+0x319/0x3f0 [ 829.812118][T10707] f2fs_write_cache_pages+0x2067/0x2570 [ 829.812209][T10707] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 829.812274][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.812319][T10707] ? __lock_acquire+0x62e/0x1ce0 [ 829.812393][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.812438][T10707] ? __lock_acquire+0x62e/0x1ce0 [ 829.812604][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.812660][T10707] f2fs_write_data_pages+0x4ad/0xd90 [ 829.812730][T10707] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 829.812786][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.812850][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.812902][T10707] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 829.812967][T10707] do_writepages+0x27a/0x600 [ 829.813024][T10707] ? __pfx_do_writepages+0x10/0x10 [ 829.813070][T10707] ? do_raw_spin_unlock+0x172/0x230 [ 829.813112][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.813157][T10707] ? _raw_spin_unlock+0x28/0x50 [ 829.813205][T10707] filemap_fdatawrite_wbc+0x104/0x160 [ 829.813260][T10707] __filemap_fdatawrite_range+0xb9/0x100 [ 829.813324][T10707] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 829.813456][T10707] ? find_held_lock+0x2b/0x80 [ 829.813505][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.813553][T10707] ? do_raw_spin_unlock+0x172/0x230 [ 829.813594][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.813647][T10707] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 829.813733][T10707] block_operations+0x2b0/0xfe0 [ 829.813800][T10707] ? __pfx___schedule+0x10/0x10 [ 829.813852][T10707] ? __pfx_block_operations+0x10/0x10 [ 829.813977][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.814022][T10707] ? down_write+0x14d/0x200 [ 829.814072][T10707] ? __pfx_down_write+0x10/0x10 [ 829.814129][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.814173][T10707] ? rcu_is_watching+0x12/0xc0 [ 829.814226][T10707] f2fs_write_checkpoint+0x2b8/0x4c60 [ 829.814296][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.814341][T10707] ? kfree+0x2b4/0x4d0 [ 829.814385][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.814436][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.814479][T10707] ? rcu_is_watching+0x12/0xc0 [ 829.814525][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.814570][T10707] ? kthread_stop+0x273/0x630 [ 829.814612][T10707] kill_f2fs_super+0x3c2/0x470 [ 829.814646][T10707] ? __pfx_kill_f2fs_super+0x10/0x10 [ 829.814680][T10707] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.814751][T10707] deactivate_locked_super+0xc1/0x1a0 [ 829.814816][T10707] deactivate_super+0xde/0x100 [ 829.814875][T10707] cleanup_mnt+0x225/0x450 [ 829.814936][T10707] task_work_run+0x150/0x240 [ 829.814980][T10707] ? __pfx_task_work_run+0x10/0x10 [ 829.815017][T10707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 829.815066][T10707] ? __pfx___x64_sys_umount+0x10/0x10 [ 829.815115][T10707] exit_to_user_mode_loop+0xeb/0x110 [ 829.815157][T10707] do_syscall_64+0x3f6/0x4c0 [ 829.815215][T10707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.815253][T10707] RIP: 0033:0x7ff1eb98ff17 [ 829.815282][T10707] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 829.815319][T10707] RSP: 002b:00007ffc1e8814c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 829.815355][T10707] RAX: 0000000000000000 RBX: 00007ff1eba11c05 RCX: 00007ff1eb98ff17 [ 829.815380][T10707] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1e881580 [ 829.815402][T10707] RBP: 00007ffc1e881580 R08: 0000000000000000 R09: 0000000000000000 [ 829.815426][T10707] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1e882610 [ 829.815450][T10707] R13: 00007ff1eba11c05 R14: 00000000000ca74c R15: 00007ffc1e882650 [ 829.815505][T10707] [ 830.268720][T10567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.284434][T10707] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 830.535933][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 830.601882][T12072] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 831.159851][T12077] loop7: detected capacity change from 0 to 256 [ 831.561511][T12077] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 831.757502][T11779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.753441][T11779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.813477][T12089] nbd: device at index 0 is going down [ 836.999373][T11779] veth0_vlan: entered promiscuous mode [ 837.465821][T11779] veth1_vlan: entered promiscuous mode [ 838.406927][T11779] veth0_macvtap: entered promiscuous mode [ 838.462954][T11779] veth1_macvtap: entered promiscuous mode [ 838.509895][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 838.509922][ T30] audit: type=1326 audit(1755066640.031:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 838.601323][T11779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.669088][ T30] audit: type=1326 audit(1755066640.071:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 838.695963][T11779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.776560][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.778695][ T30] audit: type=1326 audit(1755066640.081:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 838.880584][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.978511][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.997294][ T30] audit: type=1326 audit(1755066640.081:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 839.035875][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.398088][ T30] audit: type=1326 audit(1755066640.081:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 839.558723][ T30] audit: type=1326 audit(1755066640.091:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 839.636430][ T30] audit: type=1326 audit(1755066640.091:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 839.730445][ T30] audit: type=1326 audit(1755066640.111:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 839.813814][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.838853][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.859431][ T30] audit: type=1326 audit(1755066640.111:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 839.969128][ T30] audit: type=1326 audit(1755066640.111:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f532658d550 code=0x7ffc0000 [ 840.204419][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.487248][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.248884][T12157] hub 8-0:1.0: USB hub found [ 842.256435][T12157] hub 8-0:1.0: 1 port detected [ 843.642263][T10837] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 845.565631][T10837] usb 1-1: Using ep0 maxpacket: 32 [ 845.594526][T10837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.640607][T10837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.656607][T10837] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 845.712800][T10837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.763341][T10837] usb 1-1: config 0 descriptor?? [ 846.296283][T12175] loop7: detected capacity change from 0 to 40427 [ 846.718131][T12182] ip6gretap1: entered allmulticast mode [ 846.833666][T10837] usbhid 1-1:0.0: can't add hid device: -71 [ 846.847177][T10837] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 846.866794][T10837] usb 1-1: USB disconnect, device number 23 [ 846.988613][T12175] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 847.012476][T12175] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 848.676573][T10567] syz-executor: attempt to access beyond end of device [ 848.676573][T10567] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 850.177786][T10567] CPU: 1 UID: 0 PID: 10567 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 850.177842][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 850.177866][T10567] Call Trace: [ 850.177879][T10567] [ 850.177893][T10567] dump_stack_lvl+0x16c/0x1f0 [ 850.177950][T10567] f2fs_handle_critical_error+0x624/0x9f0 [ 850.178002][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.178048][T10567] ? f2fs_build_fault_attr+0x53/0x1f0 [ 850.178099][T10567] f2fs_write_end_io+0x958/0xcf0 [ 850.178156][T10567] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 850.178213][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.178269][T10567] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 850.178319][T10567] bio_endio+0x70d/0x850 [ 850.178378][T10567] submit_bio_noacct+0x306/0x1eb0 [ 850.178432][T10567] __submit_merged_bio+0x33c/0x770 [ 850.178489][T10567] __submit_merged_write_cond+0x319/0x3f0 [ 850.178555][T10567] f2fs_write_cache_pages+0x2067/0x2570 [ 850.178649][T10567] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 850.178716][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.178761][T10567] ? __lock_acquire+0x62e/0x1ce0 [ 850.178831][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.178883][T10567] ? __lock_acquire+0x62e/0x1ce0 [ 850.179026][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.179082][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.179136][T10567] f2fs_write_data_pages+0x4ad/0xd90 [ 850.179204][T10567] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 850.179260][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.179318][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.179369][T10567] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 850.179432][T10567] do_writepages+0x27a/0x600 [ 850.179488][T10567] ? __pfx_do_writepages+0x10/0x10 [ 850.179534][T10567] ? do_raw_spin_unlock+0x172/0x230 [ 850.179577][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.179627][T10567] ? _raw_spin_unlock+0x28/0x50 [ 850.179675][T10567] filemap_fdatawrite_wbc+0x104/0x160 [ 850.179728][T10567] __filemap_fdatawrite_range+0xb9/0x100 [ 850.179791][T10567] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 850.179912][T10567] ? find_held_lock+0x2b/0x80 [ 850.179962][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.180008][T10567] ? do_raw_spin_unlock+0x172/0x230 [ 850.180050][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.180103][T10567] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 850.180186][T10567] block_operations+0x2b0/0xfe0 [ 850.180253][T10567] ? __pfx___schedule+0x10/0x10 [ 850.180299][T10567] ? __pfx_block_operations+0x10/0x10 [ 850.180419][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.180465][T10567] ? down_write+0x14d/0x200 [ 850.180517][T10567] ? __pfx_down_write+0x10/0x10 [ 850.180574][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.180625][T10567] ? rcu_is_watching+0x12/0xc0 [ 850.180679][T10567] f2fs_write_checkpoint+0x2b8/0x4c60 [ 850.180749][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.180794][T10567] ? kfree+0x2b4/0x4d0 [ 850.180839][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.180889][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.180935][T10567] ? rcu_is_watching+0x12/0xc0 [ 850.180980][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.181025][T10567] ? kthread_stop+0x273/0x630 [ 850.181066][T10567] kill_f2fs_super+0x3c2/0x470 [ 850.181102][T10567] ? __pfx_kill_f2fs_super+0x10/0x10 [ 850.181136][T10567] ? lockdep_hardirqs_on+0x7c/0x110 [ 850.181204][T10567] deactivate_locked_super+0xc1/0x1a0 [ 850.181262][T10567] deactivate_super+0xde/0x100 [ 850.181321][T10567] cleanup_mnt+0x225/0x450 [ 850.181383][T10567] task_work_run+0x150/0x240 [ 850.181427][T10567] ? __pfx_task_work_run+0x10/0x10 [ 850.181466][T10567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.181515][T10567] ? __pfx___x64_sys_umount+0x10/0x10 [ 850.181561][T10567] exit_to_user_mode_loop+0xeb/0x110 [ 850.181620][T10567] do_syscall_64+0x3f6/0x4c0 [ 850.181676][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.181714][T10567] RIP: 0033:0x7f959d18ff17 [ 850.181744][T10567] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 850.181782][T10567] RSP: 002b:00007ffebe261f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 850.181817][T10567] RAX: 0000000000000000 RBX: 00007f959d211c05 RCX: 00007f959d18ff17 [ 850.181843][T10567] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebe261fe0 [ 850.181866][T10567] RBP: 00007ffebe261fe0 R08: 0000000000000000 R09: 0000000000000000 [ 850.181889][T10567] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebe263070 [ 850.181913][T10567] R13: 00007f959d211c05 R14: 00000000000cee53 R15: 00007ffebe2630b0 [ 850.181964][T10567] [ 850.785273][T10567] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 851.714158][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 851.727715][T12209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 851.739406][T12209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 851.748762][T12209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 851.796088][T12209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 851.861548][T12213] hub 8-0:1.0: USB hub found [ 851.869699][T12213] hub 8-0:1.0: 1 port detected [ 854.072262][T12209] Bluetooth: hci4: command tx timeout [ 856.188506][T12209] Bluetooth: hci4: command tx timeout [ 856.494474][ T6639] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.370248][T12246] loop8: detected capacity change from 0 to 512 [ 858.377724][T12246] ext3: Unknown parameter 'context' [ 858.602656][T12209] Bluetooth: hci4: command tx timeout [ 859.192062][ T6639] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.367729][T12259] loop8: detected capacity change from 0 to 256 [ 860.430435][T12259] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 860.722352][T12209] Bluetooth: hci4: command tx timeout [ 862.518442][T12270] binder: 12268:12270 ioctl 400c620e 200000000240 returned -22 [ 863.194495][ T6639] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.663199][ T6639] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.968635][T12204] chnl_net:caif_netlink_parms(): no params data found [ 869.150413][T12328] loop8: detected capacity change from 0 to 256 [ 871.342535][T12204] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.402510][T12204] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.409894][T12204] bridge_slave_0: entered allmulticast mode [ 871.500597][T12204] bridge_slave_0: entered promiscuous mode [ 871.629765][T12204] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.678448][T12204] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.716122][T12204] bridge_slave_1: entered allmulticast mode [ 871.771224][T12204] bridge_slave_1: entered promiscuous mode [ 872.144572][T10876] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 872.292257][T10876] usb 2-1: device descriptor read/64, error -71 [ 872.625967][T10876] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 872.913109][T10876] usb 2-1: device descriptor read/64, error -71 [ 872.937667][T12204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.005299][T12204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.022638][T10876] usb usb2-port1: attempt power cycle [ 873.403235][ T6639] bridge_slave_1: left allmulticast mode [ 873.408934][ T6639] bridge_slave_1: left promiscuous mode [ 873.436103][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.685436][T10876] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 874.402924][T10876] usb 2-1: device descriptor read/8, error -71 [ 874.535269][T12351] hub 8-0:1.0: USB hub found [ 874.540268][T12351] hub 8-0:1.0: 1 port detected [ 874.754210][ T6639] bridge_slave_0: left allmulticast mode [ 874.880956][ T6639] bridge_slave_0: left promiscuous mode [ 874.902252][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.466812][T12362] loop1: detected capacity change from 0 to 512 [ 875.484307][T12362] ext3: Unknown parameter 'context' [ 879.927305][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 879.927331][ T30] audit: type=1326 audit(1755066681.451:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.8.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b38ebe9 code=0x7ffc0000 [ 880.008611][ T30] audit: type=1326 audit(1755066681.451:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.8.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b38ebe9 code=0x7ffc0000 [ 880.080440][ T30] audit: type=1326 audit(1755066681.451:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.8.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5b38ebe9 code=0x7ffc0000 [ 880.160863][ T30] audit: type=1326 audit(1755066681.451:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.8.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b38ebe9 code=0x7ffc0000 [ 880.279452][ T30] audit: type=1326 audit(1755066681.451:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.8.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b38ebe9 code=0x7ffc0000 [ 880.502583][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.530879][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.562847][ T6639] bond0 (unregistering): Released all slaves [ 880.621752][T12204] team0: Port device team_slave_0 added [ 881.021426][T12383] tipc: Started in network mode [ 881.026520][T12383] tipc: Node identity bafb66d461e2, cluster identity 4711 [ 881.033932][T12383] tipc: Enabled bearer , priority 0 [ 881.148791][T12380] tipc: Disabling bearer [ 881.224025][T12204] team0: Port device team_slave_1 added [ 881.553972][T12396] loop1: detected capacity change from 0 to 256 [ 882.805621][T12396] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 885.620966][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.627381][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.914149][T10837] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 886.152392][T10837] usb 3-1: device descriptor read/64, error -71 [ 886.281546][T12414] loop8: detected capacity change from 0 to 256 [ 886.320256][T12414] vfat: Unknown parameter 'shor†name' [ 886.397323][T12204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.407325][T10837] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 886.424068][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.509742][T12204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.602436][T10837] usb 3-1: device descriptor read/64, error -71 [ 886.627843][T12204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.699596][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.752272][T10837] usb usb3-port1: attempt power cycle [ 886.947512][T12414] loop8: detected capacity change from 0 to 128 [ 886.957115][T12204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.884380][T10837] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 888.067040][T10837] usb 3-1: device descriptor read/8, error -71 [ 888.179306][T12429] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1728'. [ 888.494047][ T6639] hsr_slave_0: left promiscuous mode [ 888.793222][T10837] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 890.292179][ T6639] hsr_slave_1: left promiscuous mode [ 890.448771][T10837] usb 3-1: device descriptor read/8, error -71 [ 890.487284][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.512161][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.563211][T10837] usb usb3-port1: unable to enumerate USB device [ 890.584501][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.591966][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.034732][T12444] loop1: detected capacity change from 0 to 40427 [ 891.258019][T12444] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 891.286938][T12444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 892.566517][ T6639] veth1_macvtap: left promiscuous mode [ 892.572215][ T6639] veth0_macvtap: left promiscuous mode [ 892.577899][ T6639] veth1_vlan: left promiscuous mode [ 892.786239][ T6639] veth0_vlan: left promiscuous mode [ 894.747771][ T5860] syz-executor: attempt to access beyond end of device [ 894.747771][ T5860] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 894.770499][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 894.770555][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 894.770577][ T5860] Call Trace: [ 894.770588][ T5860] [ 894.770602][ T5860] dump_stack_lvl+0x16c/0x1f0 [ 894.770658][ T5860] f2fs_handle_critical_error+0x624/0x9f0 [ 894.770719][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.770763][ T5860] ? f2fs_build_fault_attr+0x53/0x1f0 [ 894.770816][ T5860] f2fs_write_end_io+0x958/0xcf0 [ 894.770872][ T5860] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 894.770928][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.770983][ T5860] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 894.771033][ T5860] bio_endio+0x70d/0x850 [ 894.771092][ T5860] submit_bio_noacct+0x306/0x1eb0 [ 894.771145][ T5860] __submit_merged_bio+0x33c/0x770 [ 894.771202][ T5860] __submit_merged_write_cond+0x319/0x3f0 [ 894.771265][ T5860] f2fs_write_cache_pages+0x2067/0x2570 [ 894.771357][ T5860] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 894.771423][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.771468][ T5860] ? __lock_acquire+0x62e/0x1ce0 [ 894.771531][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.771575][ T5860] ? rcu_is_watching+0x12/0xc0 [ 894.771621][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.771666][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.771718][ T5860] ? arch_scale_cpu_capacity+0x15/0xb0 [ 894.771758][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.771900][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.771952][ T5860] f2fs_write_data_pages+0x4ad/0xd90 [ 894.772018][ T5860] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 894.772074][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.772130][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.772179][ T5860] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 894.772241][ T5860] do_writepages+0x27a/0x600 [ 894.772298][ T5860] ? __pfx_do_writepages+0x10/0x10 [ 894.772343][ T5860] ? do_raw_spin_unlock+0x172/0x230 [ 894.772385][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.772428][ T5860] ? _raw_spin_unlock+0x28/0x50 [ 894.772474][ T5860] filemap_fdatawrite_wbc+0x104/0x160 [ 894.772528][ T5860] __filemap_fdatawrite_range+0xb9/0x100 [ 894.772590][ T5860] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 894.772719][ T5860] ? find_held_lock+0x2b/0x80 [ 894.772767][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.772812][ T5860] ? do_raw_spin_unlock+0x172/0x230 [ 894.772853][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.772903][ T5860] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 894.772984][ T5860] block_operations+0x2b0/0xfe0 [ 894.773040][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.773083][ T5860] ? trace_sched_exit_tp+0xd1/0x120 [ 894.773136][ T5860] ? __pfx_block_operations+0x10/0x10 [ 894.773251][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.773296][ T5860] ? down_write+0x14d/0x200 [ 894.773347][ T5860] ? __pfx_down_write+0x10/0x10 [ 894.773402][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.773446][ T5860] ? rcu_is_watching+0x12/0xc0 [ 894.773497][ T5860] f2fs_write_checkpoint+0x2b8/0x4c60 [ 894.773560][ T5860] ? __pfx_try_to_wake_up+0x10/0x10 [ 894.773607][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.773651][ T5860] ? kfree+0x2b4/0x4d0 [ 894.773704][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.773753][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.773797][ T5860] ? rcu_is_watching+0x12/0xc0 [ 894.773843][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.773886][ T5860] ? kthread_stop+0x273/0x630 [ 894.773926][ T5860] kill_f2fs_super+0x3c2/0x470 [ 894.773961][ T5860] ? __pfx_kill_f2fs_super+0x10/0x10 [ 894.774003][ T5860] ? lockdep_hardirqs_on+0x7c/0x110 [ 894.774074][ T5860] deactivate_locked_super+0xc1/0x1a0 [ 894.774132][ T5860] deactivate_super+0xde/0x100 [ 894.774195][ T5860] cleanup_mnt+0x225/0x450 [ 894.774256][ T5860] task_work_run+0x150/0x240 [ 894.774299][ T5860] ? __pfx_task_work_run+0x10/0x10 [ 894.774336][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.774384][ T5860] ? __pfx___x64_sys_umount+0x10/0x10 [ 894.774430][ T5860] exit_to_user_mode_loop+0xeb/0x110 [ 894.774470][ T5860] do_syscall_64+0x3f6/0x4c0 [ 894.774522][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.774553][ T5860] RIP: 0033:0x7f2de058ff17 [ 894.774579][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 894.774615][ T5860] RSP: 002b:00007ffc38f90308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 894.774651][ T5860] RAX: 0000000000000000 RBX: 00007f2de0611c05 RCX: 00007f2de058ff17 [ 894.774683][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc38f903c0 [ 894.774706][ T5860] RBP: 00007ffc38f903c0 R08: 0000000000000000 R09: 0000000000000000 [ 894.774729][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc38f91450 [ 894.774753][ T5860] R13: 00007f2de0611c05 R14: 00000000000da145 R15: 00007ffc38f91490 [ 894.774802][ T5860] [ 895.276430][ T5860] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 895.469480][T12479] loop7: detected capacity change from 0 to 256 [ 897.851744][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 898.003227][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 898.028850][T12492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1746'. [ 898.192284][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 898.499293][ T24] usb 8-1: device descriptor read/64, error -71 [ 898.674894][T12500] Mount JFS Failure: -22 [ 898.679420][T12500] jfs_mount failed w/return code = -22 [ 899.562134][ T24] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 899.628313][T12204] hsr_slave_0: entered promiscuous mode [ 899.635244][T12204] hsr_slave_1: entered promiscuous mode [ 899.641543][T12204] debugfs: 'hsr0' already exists in 'hsr' [ 899.648075][T12204] Cannot create hsr debugfs directory [ 899.792974][ T24] usb 8-1: device descriptor read/64, error -71 [ 899.908402][ T24] usb usb8-port1: attempt power cycle [ 900.589177][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 901.772145][ T24] usb 8-1: device descriptor read/8, error -71 [ 901.786865][T12517] loop1: detected capacity change from 0 to 1024 [ 901.940281][T12517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.040370][T12517] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 902.952423][ T30] audit: type=1800 audit(1755066704.431:581): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1754" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 903.164053][T12204] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 903.436770][T12204] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 903.551083][T12204] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 903.660057][T12204] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 904.991489][T12526] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 905.224016][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.367026][T10837] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 905.569739][T12204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.589237][T12557] loop7: detected capacity change from 0 to 512 [ 905.713884][T12557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.716086][T12204] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.770856][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.778042][ T6639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.821529][T12557] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.934198][ T30] audit: type=1800 audit(1755066707.451:582): pid=12557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1765" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 906.794806][T12577] loop8: detected capacity change from 0 to 512 [ 906.814243][T12577] ext3: Unknown parameter 'context' [ 906.968564][T10567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.029805][T12585] ip6gretap1: entered allmulticast mode [ 908.216851][T10878] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 908.762245][T10878] usb 8-1: Using ep0 maxpacket: 32 [ 908.769481][T10878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.802197][T10878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.837150][T10878] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 908.995962][T10878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.058059][T10878] usb 8-1: config 0 descriptor?? [ 909.531528][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 909.552291][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 909.560618][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 909.572451][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 909.581154][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 909.607647][T10878] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 909.812884][T10878] usb 8-1: USB disconnect, device number 7 [ 909.850035][T12581] loop7: detected capacity change from 0 to 256 [ 911.412491][ T5870] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 911.614897][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.621090][T12598] chnl_net:caif_netlink_parms(): no params data found [ 911.646260][T12623] loop1: detected capacity change from 0 to 256 [ 911.659689][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.663258][T12623] msdos: Unknown parameter '' [ 911.676582][ T51] Bluetooth: hci4: command tx timeout [ 911.715135][ T5870] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 911.806178][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.835922][ T5870] usb 9-1: config 0 descriptor?? [ 911.855901][ T12] bridge_slave_1: left allmulticast mode [ 911.863045][ T12] bridge_slave_1: left promiscuous mode [ 911.868954][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.889701][ T12] bridge_slave_0: left allmulticast mode [ 911.897730][ T12] bridge_slave_0: left promiscuous mode [ 911.906971][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.472274][ T5870] usb 9-1: language id specifier not provided by device, defaulting to English [ 913.175563][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'. [ 913.184670][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'. [ 913.597979][ T5870] input: HID 256c:006d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000C/input/input8 [ 913.752152][ T51] Bluetooth: hci4: command tx timeout [ 913.771433][ T5870] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 913.852885][ T5870] usb 9-1: USB disconnect, device number 3 [ 914.032631][T12641] hub 8-0:1.0: USB hub found [ 914.037612][T12641] hub 8-0:1.0: 1 port detected [ 914.659172][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.731877][T12646] loop8: detected capacity change from 0 to 4096 [ 914.747382][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.764978][ T30] audit: type=1326 audit(1755066716.281:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 914.811155][ T30] audit: type=1326 audit(1755066716.281:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 914.849962][ T30] audit: type=1326 audit(1755066716.281:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 914.884988][ T30] audit: type=1326 audit(1755066716.281:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 914.920440][ T30] audit: type=1326 audit(1755066716.291:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 914.969983][T12646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.021845][ T30] audit: type=1326 audit(1755066716.291:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 915.048064][T12648] fuse: Bad value for 'fd' [ 915.059751][ T30] audit: type=1326 audit(1755066716.291:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 915.083808][ T30] audit: type=1326 audit(1755066716.291:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 915.196492][ T30] audit: type=1326 audit(1755066716.291:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 915.219332][ T12] bond0 (unregistering): Released all slaves [ 915.245968][ T30] audit: type=1326 audit(1755066716.291:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959d18ebe9 code=0x7ffc0000 [ 915.501546][T12598] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.530370][T12598] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.537948][T12598] bridge_slave_0: entered allmulticast mode [ 915.546543][T12598] bridge_slave_0: entered promiscuous mode [ 916.142183][T12209] Bluetooth: hci4: command tx timeout [ 916.431904][ T12] hsr_slave_0: left promiscuous mode [ 916.446254][T11779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.458610][ T12] hsr_slave_1: left promiscuous mode [ 916.475387][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.512971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.532315][ T5870] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 917.854259][T12209] Bluetooth: hci5: command 0x0406 tx timeout [ 918.155244][ T5870] usb 1-1: device descriptor read/64, error -71 [ 918.172197][T12212] Bluetooth: hci4: command tx timeout [ 918.402127][ T5870] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 918.562193][ T5870] usb 1-1: device descriptor read/64, error -71 [ 918.692544][ T5870] usb usb1-port1: attempt power cycle [ 920.042162][ T5870] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 920.210179][ T5870] usb 1-1: device descriptor read/8, error -71 [ 921.679874][ T12] team0 (unregistering): Port device team_slave_1 removed [ 921.816219][ T12] team0 (unregistering): Port device team_slave_0 removed [ 924.508144][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 924.508171][ T30] audit: type=1326 audit(1755066725.751:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 924.581675][ T30] audit: type=1326 audit(1755066725.751:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 924.607767][ T30] audit: type=1326 audit(1755066725.751:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 924.689070][ T30] audit: type=1326 audit(1755066725.751:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 924.759488][ T30] audit: type=1326 audit(1755066725.751:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 924.837106][ T30] audit: type=1326 audit(1755066725.751:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 924.919683][ T30] audit: type=1326 audit(1755066725.751:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 925.008220][ T30] audit: type=1326 audit(1755066725.751:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 925.184926][ T30] audit: type=1326 audit(1755066725.751:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 925.209132][ T30] audit: type=1326 audit(1755066725.751:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532658ebe9 code=0x7ffc0000 [ 927.983716][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 928.132839][ T24] usb 9-1: device descriptor read/64, error -71 [ 928.300797][T12598] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.308913][T12598] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.317584][T12598] bridge_slave_1: entered allmulticast mode [ 928.330260][T12598] bridge_slave_1: entered promiscuous mode [ 928.532308][ T24] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 928.705143][ T24] usb 9-1: device descriptor read/64, error -71 [ 928.782046][T12598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.921794][ T24] usb usb9-port1: attempt power cycle [ 929.153101][T12598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.652440][ T24] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 929.703298][ T24] usb 9-1: device descriptor read/8, error -71 [ 929.733850][T12598] team0: Port device team_slave_0 added [ 929.756458][T12598] team0: Port device team_slave_1 added [ 929.962109][ T24] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 930.000909][ T24] usb 9-1: device descriptor read/8, error -71 [ 930.017750][T12598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.038999][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.092741][T12598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.122534][ T24] usb usb9-port1: unable to enumerate USB device [ 930.135750][T12598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.158710][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.213905][T12598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.300212][T12752] loop7: detected capacity change from 0 to 1024 [ 930.324524][T12752] ext4: Unknown parameter 'nouser_xattr' [ 930.393885][T12598] hsr_slave_0: entered promiscuous mode [ 930.514637][T12598] hsr_slave_1: entered promiscuous mode [ 930.555740][T12598] debugfs: 'hsr0' already exists in 'hsr' [ 930.561647][T12598] Cannot create hsr debugfs directory [ 930.568906][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 930.575739][T12755] ceph: No mds server is up or the cluster is laggy [ 930.602559][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 931.602987][T12758] vxfs: WRONG superblock magic 00000000 at 1 [ 931.609443][T12758] vxfs: WRONG superblock magic 00000000 at 8 [ 931.930641][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 931.937663][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 931.952217][T12758] vxfs: can't find superblock. [ 932.894030][T12771] loop7: detected capacity change from 0 to 1024 [ 932.902428][T12771] ext2: Unknown parameter 'noacl' [ 933.239214][ T24] libceph: connect (1)[c::]:6789 error -101 [ 933.245469][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 934.285004][T12780] hub 8-0:1.0: USB hub found [ 934.303502][T12780] hub 8-0:1.0: 1 port detected [ 934.845350][T12787] Mount JFS Failure: -22 [ 934.849702][T12787] jfs_mount failed w/return code = -22 [ 935.370643][T12598] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 935.718939][T12598] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 935.836510][T12598] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 935.910448][T12598] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 937.913163][T12804] loop8: detected capacity change from 0 to 512 [ 937.930154][T12804] ext3: Unknown parameter 'context' [ 938.766977][T12598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.075390][T12598] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.112019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.119452][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.127531][T10878] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 939.152953][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.160180][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.504528][T10878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.522795][T10878] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 939.531842][T10878] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 939.562239][T10878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.462486][T10878] usb 1-1: config 0 descriptor?? [ 941.234417][T12836] bridge0: port 3(syz_tun) entered blocking state [ 941.242369][T12836] bridge0: port 3(syz_tun) entered disabled state [ 941.280417][T12836] bridge0: port 3(syz_tun) entered blocking state [ 941.287024][T12836] bridge0: port 3(syz_tun) entered forwarding state [ 941.970353][ T885] usb 1-1: USB disconnect, device number 28 [ 942.293830][T12598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.352105][ T5870] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 942.433309][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 942.442353][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 943.152572][ T5870] usb 9-1: Using ep0 maxpacket: 32 [ 943.374006][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.441376][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.517675][ T5870] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 943.552825][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.582831][ T5870] usb 9-1: config 0 descriptor?? [ 943.747136][T12859] netlink: 'syz.7.1844': attribute type 1 has an invalid length. [ 943.755225][T12859] netlink: 'syz.7.1844': attribute type 2 has an invalid length. [ 943.764389][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1844'. [ 943.805344][T12859] netlink: 'syz.7.1844': attribute type 1 has an invalid length. [ 943.822085][T12859] netlink: 'syz.7.1844': attribute type 2 has an invalid length. [ 943.855458][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1844'. [ 944.584750][ T5870] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 944.834288][ T5870] usb 9-1: USB disconnect, device number 8 [ 944.846547][T12838] loop8: detected capacity change from 0 to 256 [ 945.290414][T12598] veth0_vlan: entered promiscuous mode [ 945.380207][T12598] veth1_vlan: entered promiscuous mode [ 945.480581][T12598] veth0_macvtap: entered promiscuous mode [ 945.520653][T12598] veth1_macvtap: entered promiscuous mode [ 945.590609][T12598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.637684][T12598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.696707][ T1124] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.697139][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 945.727785][ T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.752303][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 945.759964][T12875] ceph: No mds server is up or the cluster is laggy [ 945.767267][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.813980][ T1124] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.847842][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.847964][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 945.875081][T12875] vxfs: WRONG superblock magic 00000000 at 1 [ 945.875370][T12875] vxfs: WRONG superblock magic 00000000 at 8 [ 945.875399][T12875] vxfs: can't find superblock. [ 946.200150][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.200187][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.537853][T12884] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1847'. [ 947.322745][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.405482][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.445325][T12899] [ 949.447696][T12899] ====================================================== [ 949.454719][T12899] WARNING: possible circular locking dependency detected [ 949.461743][T12899] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 949.468864][T12899] ------------------------------------------------------ [ 949.475884][T12899] syz.2.1850/12899 is trying to acquire lock: [ 949.481957][T12899] ffff88801c6f7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 949.492204][T12899] [ 949.492204][T12899] but task is already holding lock: [ 949.499604][T12899] ffff8880261b9448 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 949.510896][T12899] [ 949.510896][T12899] which lock already depends on the new lock. [ 949.510896][T12899] [ 949.521305][T12899] [ 949.521305][T12899] the existing dependency chain (in reverse order) is: [ 949.530324][T12899] [ 949.530324][T12899] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 949.538970][T12899] blk_alloc_queue+0x619/0x760 [ 949.544273][T12899] blk_mq_alloc_queue+0x172/0x280 [ 949.549845][T12899] __blk_mq_alloc_disk+0x29/0x120 [ 949.555415][T12899] loop_add+0x490/0xb70 [ 949.560102][T12899] loop_init+0x164/0x270 [ 949.564876][T12899] do_one_initcall+0x123/0x6e0 [ 949.570178][T12899] kernel_init_freeable+0x5c2/0x910 [ 949.575907][T12899] kernel_init+0x1c/0x2b0 [ 949.580790][T12899] ret_from_fork+0x5d7/0x6f0 [ 949.585907][T12899] ret_from_fork_asm+0x1a/0x30 [ 949.591209][T12899] [ 949.591209][T12899] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 949.598441][T12899] fs_reclaim_acquire+0x102/0x150 [ 949.603998][T12899] kmem_cache_alloc_noprof+0x53/0x3b0 [ 949.609921][T12899] __kernfs_iattrs+0x124/0x3e0 [ 949.615215][T12899] __kernfs_setattr+0x4d/0x3c0 [ 949.620554][T12899] kernfs_iop_setattr+0xda/0x120 [ 949.626036][T12899] notify_change+0x6a9/0x1230 [ 949.631258][T12899] do_truncate+0x1d7/0x230 [ 949.636224][T12899] path_openat+0x2678/0x2cb0 [ 949.641364][T12899] do_filp_open+0x20b/0x470 [ 949.646391][T12899] do_sys_openat2+0x11b/0x1d0 [ 949.651607][T12899] __x64_sys_openat+0x174/0x210 [ 949.657001][T12899] do_syscall_64+0xcd/0x4c0 [ 949.662060][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.668502][T12899] [ 949.668502][T12899] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 949.677048][T12899] __lock_acquire+0x12a6/0x1ce0 [ 949.682454][T12899] lock_acquire+0x179/0x350 [ 949.687505][T12899] down_read+0x9b/0x480 [ 949.692205][T12899] kernfs_iop_getattr+0x9c/0xf0 [ 949.697592][T12899] vfs_getattr_nosec+0x2ac/0x430 [ 949.703068][T12899] vfs_getattr+0x4a/0x60 [ 949.707842][T12899] loop_query_min_dio_size.isra.0+0x117/0x250 [ 949.714437][T12899] lo_ioctl+0x179b/0x20b0 [ 949.719294][T12899] blkdev_ioctl+0x277/0x6d0 [ 949.724327][T12899] __x64_sys_ioctl+0x18e/0x210 [ 949.729628][T12899] do_syscall_64+0xcd/0x4c0 [ 949.734671][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.741102][T12899] [ 949.741102][T12899] other info that might help us debug this: [ 949.741102][T12899] [ 949.751324][T12899] Chain exists of: [ 949.751324][T12899] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 949.751324][T12899] [ 949.765796][T12899] Possible unsafe locking scenario: [ 949.765796][T12899] [ 949.773234][T12899] CPU0 CPU1 [ 949.778593][T12899] ---- ---- [ 949.783952][T12899] lock(&q->q_usage_counter(io)#24); [ 949.789342][T12899] lock(fs_reclaim); [ 949.795848][T12899] lock(&q->q_usage_counter(io)#24); [ 949.803769][T12899] rlock(&root->kernfs_iattr_rwsem); [ 949.809179][T12899] [ 949.809179][T12899] *** DEADLOCK *** [ 949.809179][T12899] [ 949.817308][T12899] 3 locks held by syz.2.1850/12899: [ 949.822498][T12899] #0: ffff888142f9c400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 949.832754][T12899] #1: ffff8880261b9448 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 949.844479][T12899] #2: ffff8880261b9480 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 949.856466][T12899] [ 949.856466][T12899] stack backtrace: [ 949.862350][T12899] CPU: 1 UID: 0 PID: 12899 Comm: syz.2.1850 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 949.862402][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 949.862427][T12899] Call Trace: [ 949.862440][T12899] [ 949.862454][T12899] dump_stack_lvl+0x116/0x1f0 [ 949.862508][T12899] print_circular_bug+0x275/0x350 [ 949.862568][T12899] check_noncircular+0x14c/0x170 [ 949.862628][T12899] __lock_acquire+0x12a6/0x1ce0 [ 949.862692][T12899] lock_acquire+0x179/0x350 [ 949.862748][T12899] ? kernfs_iop_getattr+0x9c/0xf0 [ 949.862794][T12899] ? __pfx___might_resched+0x10/0x10 [ 949.862844][T12899] down_read+0x9b/0x480 [ 949.862894][T12899] ? kernfs_iop_getattr+0x9c/0xf0 [ 949.862930][T12899] ? find_held_lock+0x2b/0x80 [ 949.862971][T12899] ? __pfx_down_read+0x10/0x10 [ 949.863022][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.863073][T12899] kernfs_iop_getattr+0x9c/0xf0 [ 949.863112][T12899] vfs_getattr_nosec+0x2ac/0x430 [ 949.863152][T12899] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 949.863194][T12899] vfs_getattr+0x4a/0x60 [ 949.863232][T12899] loop_query_min_dio_size.isra.0+0x117/0x250 [ 949.863273][T12899] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 949.863311][T12899] ? mark_held_locks+0x49/0x80 [ 949.863380][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.863422][T12899] ? blk_freeze_queue_start+0xec/0x140 [ 949.863463][T12899] lo_ioctl+0x179b/0x20b0 [ 949.863504][T12899] ? __pfx_lo_ioctl+0x10/0x10 [ 949.863541][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.863585][T12899] ? kasan_quarantine_put+0x10a/0x240 [ 949.863653][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.863696][T12899] ? lockdep_hardirqs_on+0x7c/0x110 [ 949.863740][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.863790][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.863833][T12899] ? blk_get_meta_cap+0x482/0x700 [ 949.863871][T12899] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 949.863915][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.863958][T12899] ? blkdev_common_ioctl+0x1d6/0x2470 [ 949.863995][T12899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 949.864037][T12899] ? futex_wake+0x1ad/0x530 [ 949.864075][T12899] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 949.864116][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.864158][T12899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 949.864198][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.864240][T12899] ? do_vfs_ioctl+0x128/0x14f0 [ 949.864287][T12899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 949.864339][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.864381][T12899] ? find_held_lock+0x2b/0x80 [ 949.864423][T12899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.864467][T12899] ? __pfx_lo_ioctl+0x10/0x10 [ 949.864505][T12899] blkdev_ioctl+0x277/0x6d0 [ 949.864542][T12899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 949.864581][T12899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 949.864619][T12899] __x64_sys_ioctl+0x18e/0x210 [ 949.864667][T12899] do_syscall_64+0xcd/0x4c0 [ 949.864715][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.864751][T12899] RIP: 0033:0x7f532658ebe9 [ 949.864784][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.864819][T12899] RSP: 002b:00007f5327436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 949.864852][T12899] RAX: ffffffffffffffda RBX: 00007f53267b5fa0 RCX: 00007f532658ebe9 [ 949.864875][T12899] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000003 [ 949.864897][T12899] RBP: 00007f5326611e19 R08: 0000000000000000 R09: 0000000000000000 [ 949.864919][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.864941][T12899] R13: 00007f53267b6038 R14: 00007f53267b5fa0 R15: 00007ffdd4034c88 [ 949.864976][T12899] [ 949.865050][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.236419][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 951.266635][ T5860] bridge0: port 3(syz_tun) entered disabled state [ 951.284714][ T5860] bridge0: port 3(syz_tun) entered disabled state [ 951.304044][T10567] bridge0: port 3(syz_tun) entered disabled state [ 951.315831][T10567] syz_tun (unregistering): left allmulticast mode [ 951.322751][T10567] syz_tun (unregistering): left promiscuous mode [ 951.329186][T10567] bridge0: port 3(syz_tun) entered disabled state [ 951.394911][ T1124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.488230][ T1124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.587566][ T1124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.649450][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.747982][ T1124] bridge_slave_1: left allmulticast mode [ 951.754047][ T1124] bridge_slave_1: left promiscuous mode [ 951.759714][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.768896][ T1124] bridge_slave_0: left allmulticast mode [ 951.775086][ T1124] bridge_slave_0: left promiscuous mode [ 951.780724][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.896914][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.906419][ T1124] bond_slave_0: left promiscuous mode [ 951.912905][ T1124] bond_slave_0: left allmulticast mode [ 951.919840][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.928871][ T1124] bond_slave_1: left promiscuous mode [ 951.934376][ T1124] bond_slave_1: left allmulticast mode [ 951.940550][ T1124] bond0 (unregistering): Released all slaves [ 952.027169][ T1124] tipc: Left network mode [ 952.181298][ T1124] hsr_slave_0: left promiscuous mode [ 952.187130][ T1124] hsr_slave_1: left promiscuous mode [ 952.194000][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.201439][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.210031][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.219138][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.230261][ T1124] veth1_macvtap: left promiscuous mode [ 952.236239][ T1124] veth0_macvtap: left promiscuous mode [ 952.241815][ T1124] veth1_vlan: left promiscuous mode [ 952.248609][ T1124] veth0_vlan: left promiscuous mode [ 952.448488][ T1124] team_slave_1 (unregistering): left promiscuous mode [ 952.457912][ T1124] team_slave_1 (unregistering): left allmulticast mode [ 952.465800][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 952.489656][ T1124] team_slave_0 (unregistering): left promiscuous mode [ 952.496588][ T1124] team_slave_0 (unregistering): left allmulticast mode [ 952.506347][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 952.890892][ T1124] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.938855][ T1124] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.997923][ T1124] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.038130][ T1124] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.109327][ T1124] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.157880][ T1124] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.218089][ T1124] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.267294][ T1124] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.330134][ T1124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.397073][ T1124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.448902][ T1124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.498905][ T1124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.826242][ T1124] bridge_slave_1: left allmulticast mode [ 953.831901][ T1124] bridge_slave_1: left promiscuous mode [ 953.837780][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.848552][ T1124] bridge_slave_0: left allmulticast mode [ 953.854312][ T1124] bridge_slave_0: left promiscuous mode [ 953.860198][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.870144][ T1124] bridge_slave_1: left allmulticast mode [ 953.875974][ T1124] bridge_slave_1: left promiscuous mode [ 953.881609][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.890140][ T1124] bridge_slave_0: left allmulticast mode [ 953.896113][ T1124] bridge_slave_0: left promiscuous mode [ 953.901762][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.911576][ T1124] bridge_slave_1: left allmulticast mode [ 953.917351][ T1124] bridge_slave_1: left promiscuous mode [ 953.923187][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.931596][ T1124] bridge_slave_0: left allmulticast mode [ 953.937444][ T1124] bridge_slave_0: left promiscuous mode [ 953.944056][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.106745][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.117562][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.127336][ T1124] bond0 (unregistering): Released all slaves [ 954.209487][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.219476][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.229253][ T1124] bond0 (unregistering): Released all slaves [ 954.367230][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.376353][ T1124] bond_slave_0: left promiscuous mode [ 954.381817][ T1124] bond_slave_0: left allmulticast mode [ 954.389043][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.400550][ T1124] bond_slave_1: left promiscuous mode [ 954.406398][ T1124] bond_slave_1: left allmulticast mode [ 954.412974][ T1124] bond0 (unregistering): Released all slaves [ 954.559291][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.569492][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.579493][ T1124] bond0 (unregistering): Released all slaves [ 954.683207][ T1124] tipc: Left network mode [ 955.165878][ T1124] hsr_slave_0: left promiscuous mode [ 955.171650][ T1124] hsr_slave_1: left promiscuous mode [ 955.178235][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.185765][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.194898][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.202764][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.213529][ T1124] hsr_slave_0: left promiscuous mode [ 955.219262][ T1124] hsr_slave_1: left promiscuous mode [ 955.225137][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.232603][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.240188][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.247643][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.258487][ T1124] hsr_slave_0: left promiscuous mode [ 955.264356][ T1124] hsr_slave_1: left promiscuous mode [ 955.270060][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.278991][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.286427][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.297173][ T1124] hsr_slave_0: left promiscuous mode [ 955.303213][ T1124] hsr_slave_1: left promiscuous mode [ 955.308964][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.316579][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.335040][ T1124] veth1_macvtap: left promiscuous mode [ 955.340533][ T1124] veth0_macvtap: left promiscuous mode [ 955.346222][ T1124] veth1_vlan: left promiscuous mode [ 955.351506][ T1124] veth0_vlan: left promiscuous mode [ 955.358155][ T1124] team0: left allmulticast mode [ 955.363045][ T1124] team_slave_0: left allmulticast mode [ 955.368527][ T1124] team_slave_1: left allmulticast mode [ 955.374092][ T1124] team0: left promiscuous mode [ 955.379146][ T1124] team_slave_0: left promiscuous mode [ 955.384577][ T1124] team_slave_1: left promiscuous mode [ 955.390047][ T1124] veth1_macvtap: left promiscuous mode [ 955.395672][ T1124] veth0_macvtap: left promiscuous mode [ 955.401274][ T1124] veth1_vlan: left promiscuous mode [ 955.406682][ T1124] veth0_vlan: left promiscuous mode [ 955.413961][ T1124] veth1_macvtap: left promiscuous mode [ 955.419443][ T1124] veth0_macvtap: left promiscuous mode [ 955.425094][ T1124] veth1_vlan: left promiscuous mode [ 955.430356][ T1124] veth0_vlan: left promiscuous mode [ 955.436689][ T1124] team0: left allmulticast mode [ 955.441535][ T1124] team_slave_0: left allmulticast mode [ 955.447340][ T1124] team_slave_1: left allmulticast mode [ 955.455068][ T1124] team0: left promiscuous mode [ 955.459823][ T1124] team_slave_0: left promiscuous mode [ 955.465513][ T1124] team_slave_1: left promiscuous mode [ 955.715864][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 955.728794][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 955.908562][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 955.929607][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 956.146693][ T1124] team_slave_1 (unregistering): left promiscuous mode [ 956.153567][ T1124] team_slave_1 (unregistering): left allmulticast mode [ 956.161029][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 956.187931][ T1124] team_slave_0 (unregistering): left promiscuous mode [ 956.194884][ T1124] team_slave_0 (unregistering): left allmulticast mode [ 956.204388][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 956.571592][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 956.599755][ T1124] team0 (unregistering): Port device team_slave_0 removed