last executing test programs: 5m18.880985785s ago: executing program 32 (id=949): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipe\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='tcp 2', 0x5) 5m17.584995517s ago: executing program 33 (id=1138): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 3m41.087588377s ago: executing program 4 (id=1950): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 3m40.784999424s ago: executing program 4 (id=1951): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x85) lseek(r2, 0x104, 0x1) getdents64(r2, 0x0, 0x4f) 3m40.360054645s ago: executing program 4 (id=1954): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x11, &(0x7f0000000500)=@string={0x11, 0x3, "01701b634e445fb823855e09a95949"}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m39.525520646s ago: executing program 4 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='0\n', 0x2) 3m24.277930851s ago: executing program 34 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='0\n', 0x2) 3m17.341047743s ago: executing program 6 (id=2166): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x1, 0x4) 3m17.151314997s ago: executing program 6 (id=2169): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x3) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x521f) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000080800) 3m16.908997144s ago: executing program 6 (id=2172): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4205, r0, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 3m15.913374308s ago: executing program 6 (id=2181): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3m15.515570428s ago: executing program 6 (id=2182): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0xfff5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) 3m15.205048346s ago: executing program 6 (id=2183): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x101000, 0x0) statfs(&(0x7f0000000140)='./mnt\x00', &(0x7f0000000200)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x1000000) 3m14.530663152s ago: executing program 35 (id=2183): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x101000, 0x0) statfs(&(0x7f0000000140)='./mnt\x00', &(0x7f0000000200)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x1000000) 1m39.2961533s ago: executing program 7 (id=2965): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x80000, 0x1, 0x15a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f21, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1m38.677695996s ago: executing program 7 (id=2974): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x1) 1m37.939844414s ago: executing program 7 (id=2980): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 1m37.687609371s ago: executing program 7 (id=2984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000007c0)="8c", 0x1}], 0x2}}], 0x1, 0x4024000) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 1m36.050199951s ago: executing program 7 (id=3001): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xc73e, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x83c], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x138a, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x661cb7fb, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4001, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000e80)={0x1, 0x628c, 0x3, 0xce, 0x7, 0x2, 0x8000000000000000, 0x1, 0x1, 0x3}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000480)=0xfffffffffffffffb) 1m35.790751477s ago: executing program 36 (id=3001): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xc73e, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x83c], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x138a, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x661cb7fb, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4001, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000e80)={0x1, 0x628c, 0x3, 0xce, 0x7, 0x2, 0x8000000000000000, 0x1, 0x1, 0x3}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000480)=0xfffffffffffffffb) 1m2.763577752s ago: executing program 8 (id=3275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x0, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) 1m2.495827078s ago: executing program 8 (id=3277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r0, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) 1m1.466131054s ago: executing program 8 (id=3293): r0 = gettid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r1, &(0x7f0000000b80)="eb67b6617c0ac0e0f32319996c82fb8df152e186a59b9ccf0dfdf4a5808a4286285890d91d56577b18c8d1da033f2d602e1ec2e43ab041cb5d7a2bb3b956971e96b983a2d73676f32945e25a174f25b95b9731c8e7686ad58fae8c22f7e0762b60efd870a45e7740a02b199cf4b82b3222c5ff2cd7ced4422b2df6e34ee52a1de48cab715abc351029d781", 0xffffffaa) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) close(r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1m1.19921557s ago: executing program 8 (id=3296): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 1m0.899889658s ago: executing program 8 (id=3301): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmmsg(r0, &(0x7f0000009f00)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1}, 0x20200000}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 1m0.336970221s ago: executing program 8 (id=3310): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}]) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 59.839646304s ago: executing program 37 (id=3310): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}]) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 41.135332355s ago: executing program 1 (id=3434): r0 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/46, 0x2e) getdents64(r2, 0xfffffffffffffffe, 0x29) 40.963158019s ago: executing program 1 (id=3436): setresuid(0xee00, 0xee00, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=[@hopopts={{0x18, 0x29, 0x36, {0x32}}}], 0x18}, 0x34004894) 40.661066107s ago: executing program 1 (id=3439): r0 = fanotify_init(0x20, 0x800) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\fc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00'/115, 0x1) r2 = memfd_create(&(0x7f0000000000)='[-$\x00', 0x2) r3 = dup(r2) fanotify_mark(r0, 0x1, 0x40001039, r3, 0x0) ftruncate(r3, 0xaa0b) sendfile(r1, r3, 0x0, 0x4) 40.443174662s ago: executing program 1 (id=3441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 40.179113418s ago: executing program 1 (id=3444): r0 = socket$packet(0x11, 0x2, 0x300) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) 39.504935965s ago: executing program 1 (id=3449): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 38.810300162s ago: executing program 38 (id=3449): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 33.493646403s ago: executing program 9 (id=3485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) remap_file_pages(&(0x7f00006ef000/0x2000)=nil, 0x2000, 0x2000000, 0x0, 0x40000) 33.272089719s ago: executing program 9 (id=3488): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 31.173106911s ago: executing program 9 (id=3492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r1, &(0x7f0000000940)=[{&(0x7f0000000600)=""/238, 0xee}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 30.923137357s ago: executing program 9 (id=3494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 30.043872819s ago: executing program 9 (id=3505): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 29.641593778s ago: executing program 9 (id=3507): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 14.390003395s ago: executing program 39 (id=3507): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 13.77779886s ago: executing program 5 (id=3623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000000bc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x7}}, {@mpls_uc={0x8847, {[], @llc={@llc={0xfe, 0xf7, "98", "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"}}}}}}, 0x0) 12.645331008s ago: executing program 5 (id=3628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000300)}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005"], 0x4a) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 12.267106617s ago: executing program 5 (id=3631): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x200) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000500)={&(0x7f0000000640)={0x50, 0x0, 0x465a, {0x7, 0x28, 0x4, 0x508818, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b0b39e0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8460e000000a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.917215526s ago: executing program 5 (id=3633): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 11.665920882s ago: executing program 5 (id=3636): syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040), 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 10.882058671s ago: executing program 5 (id=3642): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x3e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 10.419383563s ago: executing program 40 (id=3642): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x3e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 4.361386842s ago: executing program 2 (id=3686): munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) 3.096682613s ago: executing program 3 (id=3691): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) select(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 2.731055652s ago: executing program 3 (id=3692): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x62207}}, 0x20}, 0x1, 0x4000, 0x0, 0x44000}, 0x20000000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00562653ef2b152c7200"/19, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.502911947s ago: executing program 3 (id=3694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x5, 0xfd, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb3, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0300", @ANYBLOB], 0x50) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)={0x0, 0x23, 0x92, {0x92, 0x2, "0166d74b52700000005c229aeab968c19753af658dc00516abe019df0f801092727e1d590ffcc8c62c1f19dc4429c5812c1da43751b1d1c2dc1e10a8882e03d110edb204bc54d0316ced577f8715524115b6e5eed02f0945a3cc3b6e04ee35f3c4346f71a2a87e16d8674e04bf6542418dd412070bb621ea0fc6fb3716b32be6eb886b11815ac2487bb11d117131bd5f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.056176029s ago: executing program 2 (id=3698): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x3, 0x2, "b88f"}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 1.851107754s ago: executing program 3 (id=3699): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.797740035s ago: executing program 0 (id=3700): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000100)={[{@nodelalloc}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x8}}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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") mount$nfs(&(0x7f0000000100)='\xc8\x84\"', &(0x7f0000000140)='./file0\x00', 0x0, 0x3003, 0x0) 1.782778736s ago: executing program 2 (id=3701): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x908a, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 1.59996078s ago: executing program 4 (id=3620): socket(0x10, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x4, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xfffd, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000140)=[{0x2, 0xce9a, 0x800}, {0x3}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 1.466089193s ago: executing program 0 (id=3702): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76813f64323723e7eecdf40cf82223eb3d258f66ec9c37865c6c1a4640ce1b22bb03000000001d34c09f39c3538ae95bc7f52363c460b257ff3e24852548deb01efd54f11ed2c40d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2580e009dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) 1.250814158s ago: executing program 0 (id=3703): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xffffffff, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 987.712195ms ago: executing program 0 (id=3704): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) 849.091388ms ago: executing program 2 (id=3705): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@uni_xlateno}, {@utf8}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@numtail}, {@rodir}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x3, 0x28a, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x1000) unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 774.42257ms ago: executing program 0 (id=3706): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x800) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, 0x0) 500.759707ms ago: executing program 4 (id=3707): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 469.267258ms ago: executing program 3 (id=3708): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 317.916831ms ago: executing program 2 (id=3709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 75.432278ms ago: executing program 3 (id=3710): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 30.067969ms ago: executing program 0 (id=3711): r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r1}, 0x38) 0s ago: executing program 2 (id=3712): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000000)) kernel console output (not intermixed with test programs): , changing to 10 [ 355.270508][ T8290] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.295429][ T8290] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.328765][ T8290] usb 6-1: config 0 interface 0 has no altsetting 0 [ 355.346137][ T8290] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 355.380952][ T8290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.440037][ T8290] usb 6-1: config 0 descriptor?? [ 355.878210][ T8290] input: HID 17ef:6047 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:17EF:6047.000A/input/input10 [ 355.932105][ T4324] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 355.987573][ T8290] lenovo 0003:17EF:6047.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 356.141044][ T4324] usb 8-1: Using ep0 maxpacket: 16 [ 356.152051][ T4324] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.180475][ T4324] usb 8-1: config 0 has no interface number 0 [ 356.214026][ T4324] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 356.252590][ T4324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.281278][ T4324] usb 8-1: Product: syz [ 356.285517][ T4324] usb 8-1: Manufacturer: syz [ 356.290170][ T4324] usb 8-1: SerialNumber: syz [ 356.333441][ T4324] usb 8-1: config 0 descriptor?? [ 356.374021][ T4324] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 356.545408][T11977] overlayfs: failed to clone upperpath [ 356.676608][ T4771] usb 6-1: USB disconnect, device number 8 [ 357.795909][ T4324] gspca_spca1528: reg_w err -71 [ 357.800915][ T4324] spca1528: probe of 8-1:0.1 failed with error -71 [ 357.831263][ T4324] usb 8-1: USB disconnect, device number 2 [ 358.579953][ T9997] svc: failed to register nfsdv3 RPC service (errno 101). [ 358.627639][ T9997] svc: failed to register nfsaclv3 RPC service (errno 512). [ 359.396845][T12045] lo speed is unknown, defaulting to 1000 [ 359.429449][T12045] lo speed is unknown, defaulting to 1000 [ 359.471572][T12045] lo speed is unknown, defaulting to 1000 [ 359.545609][T12045] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 359.634316][T12045] lo speed is unknown, defaulting to 1000 [ 359.658516][T12045] lo speed is unknown, defaulting to 1000 [ 359.691089][T12045] lo speed is unknown, defaulting to 1000 [ 359.733643][T12045] lo speed is unknown, defaulting to 1000 [ 359.786357][T12045] lo speed is unknown, defaulting to 1000 [ 359.813260][T12045] lo speed is unknown, defaulting to 1000 [ 359.834106][T12045] lo speed is unknown, defaulting to 1000 [ 360.294333][T12065] overlayfs: failed to clone upperpath [ 360.734477][T12077] device bridge_slave_0 entered promiscuous mode [ 360.927866][T12081] FAULT_INJECTION: forcing a failure. [ 360.927866][T12081] name failslab, interval 1, probability 0, space 0, times 0 [ 360.977303][T12081] CPU: 0 PID: 12081 Comm: syz.5.2589 Not tainted syzkaller #0 [ 360.984860][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.994966][T12081] Call Trace: [ 360.998295][T12081] [ 361.001296][T12081] dump_stack_lvl+0x188/0x24e [ 361.006057][T12081] ? show_regs_print_info+0x12/0x12 [ 361.011307][T12081] ? load_image+0x410/0x410 [ 361.015914][T12081] ? __might_sleep+0xd0/0xd0 [ 361.020560][T12081] ? __lock_acquire+0x7ea0/0x7ea0 [ 361.025662][T12081] should_fail_ex+0x390/0x4c0 [ 361.030409][T12081] should_failslab+0x5/0x20 [ 361.035012][T12081] slab_pre_alloc_hook+0x59/0x300 [ 361.040094][T12081] ? lockdep_hardirqs_on+0x94/0x140 [ 361.045713][T12081] kmem_cache_alloc+0x56/0x2f0 [ 361.050534][T12081] ? mas_alloc_nodes+0x2ec/0x880 [ 361.055533][T12081] mas_alloc_nodes+0x2ec/0x880 [ 361.060357][T12081] ? percpu_ref_put+0x12/0x100 [ 361.065190][T12081] mas_preallocate+0x162/0x3b0 [ 361.070097][T12081] vma_link+0xdf/0x2c0 [ 361.074231][T12081] ? insert_vm_struct+0x3f0/0x3f0 [ 361.079333][T12081] ? anon_vma_name+0xf7/0x170 [ 361.084081][T12081] ? vm_area_dup+0x11f/0x1a0 [ 361.088760][T12081] copy_vma+0x64b/0x7e0 [ 361.093014][T12081] ? vma_link+0x2c0/0x2c0 [ 361.097424][T12081] ? ksm_madvise+0xab/0x340 [ 361.101983][T12081] move_vma+0x4b6/0xca0 [ 361.106175][T12081] ? mas_alloc_nodes+0x880/0x880 [ 361.111150][T12081] ? vma_expandable+0xf0/0xf0 [ 361.115862][T12081] ? arch_get_unmapped_area+0x640/0x640 [ 361.121442][T12081] ? cap_mmap_addr+0x153/0x2c0 [ 361.126238][T12081] ? bpf_lsm_mmap_addr+0x5/0x10 [ 361.131123][T12081] ? security_mmap_addr+0x6e/0x90 [ 361.136189][T12081] ? get_unmapped_area+0x2f0/0x360 [ 361.141348][T12081] mremap_to+0x513/0x5c0 [ 361.145716][T12081] __se_sys_mremap+0x691/0x1120 [ 361.150624][T12081] ? __ia32_sys_get_robust_list+0x100/0x100 [ 361.156562][T12081] ? __x64_sys_mremap+0xc0/0xc0 [ 361.161458][T12081] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 361.167499][T12081] ? lock_chain_count+0x20/0x20 [ 361.172418][T12081] ? lockdep_hardirqs_on+0x94/0x140 [ 361.177660][T12081] ? __x64_sys_mremap+0x1c/0xc0 [ 361.182551][T12081] do_syscall_64+0x4c/0xa0 [ 361.187007][T12081] ? clear_bhb_loop+0x60/0xb0 [ 361.191711][T12081] ? clear_bhb_loop+0x60/0xb0 [ 361.196451][T12081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.202377][T12081] RIP: 0033:0x7faf4219e199 [ 361.206843][T12081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.226486][T12081] RSP: 002b:00007faf430f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 361.234957][T12081] RAX: ffffffffffffffda RBX: 00007faf42425fa0 RCX: 00007faf4219e199 [ 361.242974][T12081] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 000020000040b000 [ 361.250983][T12081] RBP: 00007faf422358e0 R08: 00002000004b3000 R09: 0000000000000000 [ 361.258995][T12081] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 361.267052][T12081] R13: 00007faf42426038 R14: 00007faf42425fa0 R15: 00007ffe4c176588 [ 361.275099][T12081] [ 361.325051][T12098] siw: device registration error -23 [ 361.536409][T12104] device syzkaller1 entered promiscuous mode [ 363.331285][T12151] netlink: 'syz.7.2603': attribute type 1 has an invalid length. [ 363.450765][T12151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.861217][T12169] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 363.982837][ T4324] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 364.175207][ T4324] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 364.220061][ T4324] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 364.279629][ T4324] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 364.328103][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.407766][ T4324] usb 6-1: Product: syz [ 364.412111][ T4324] usb 6-1: Manufacturer: syz [ 364.448289][ T4324] usb 6-1: SerialNumber: syz [ 364.735033][ T4324] disable ehci-hcd to run US-144 [ 364.763506][ T4324] disable ehci-hcd to run US-144 [ 364.773319][ T4771] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 364.823846][ T4324] usb 6-1: USB disconnect, device number 9 [ 364.973377][ T4771] usb 9-1: Using ep0 maxpacket: 32 [ 364.980585][ T4771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.030133][ T4771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.101992][ T4771] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 365.133632][ T4771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.141170][T12191] udevd[12191]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.202366][ T4771] usb 9-1: config 0 descriptor?? [ 365.519617][T12222] netlink: 'syz.7.2628': attribute type 1 has an invalid length. [ 365.539042][T12222] netlink: 'syz.7.2628': attribute type 4 has an invalid length. [ 365.561760][T12222] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2628'. [ 365.629005][T12223] Bluetooth: MGMT ver 1.22 [ 365.642797][ T4771] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 365.656560][T12223] Bluetooth: MGMT ver 1.22 [ 365.699447][T12223] Bluetooth: MGMT ver 1.22 [ 365.953014][ T4771] usb 9-1: USB disconnect, device number 4 [ 366.122246][T12234] fido_id[12234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 366.441204][T12247] xt_hashlimit: size too large, truncated to 1048576 [ 368.633310][T12320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.437117][T12328] loop7: detected capacity change from 0 to 512 [ 369.477836][T12328] EXT4-fs: Ignoring removed nobh option [ 369.514178][T12328] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 369.601384][T12328] EXT4-fs (loop7): 1 truncate cleaned up [ 369.641796][T12328] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 369.825745][T12327] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 370.011236][T12346] overlayfs: failed to clone upperpath [ 370.023470][T10492] EXT4-fs (loop7): unmounting filesystem. [ 370.245507][T12353] IPVS: fo: FWM 3 0x00000003 - no destination available [ 370.259177][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 370.266413][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 372.267718][T12408] netlink: 'syz.8.2675': attribute type 4 has an invalid length. [ 372.323622][T12409] loop7: detected capacity change from 0 to 1024 [ 372.366140][T12409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 372.428263][T12409] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 372.717621][T12372] overlayfs: failed to clone upperpath [ 372.727617][T10492] EXT4-fs (loop7): unmounting filesystem. [ 372.954831][ T4320] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 373.164857][ T4320] usb 9-1: Using ep0 maxpacket: 32 [ 373.179652][ T4320] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 373.211346][ T4320] usb 9-1: config 0 has no interface number 0 [ 373.233764][ T4320] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.268898][ T4320] usb 9-1: config 0 interface 85 has no altsetting 0 [ 373.296269][ T4320] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 373.344598][ T4320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.370163][ T4320] usb 9-1: Product: syz [ 373.385073][ T4320] usb 9-1: Manufacturer: syz [ 373.389766][ T4320] usb 9-1: SerialNumber: syz [ 373.436017][ T4320] usb 9-1: config 0 descriptor?? [ 373.630467][T12457] loop7: detected capacity change from 0 to 16 [ 373.663796][T12457] erofs: (device loop7): mounted with root inode @ nid 36. [ 374.087986][ T4320] appletouch 9-1:0.85: Geyser mode initialized. [ 374.108320][ T4320] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input11 [ 374.503816][T12417] loop8: detected capacity change from 0 to 128 [ 374.583252][ T8290] usb 9-1: USB disconnect, device number 5 [ 374.628581][ T8290] appletouch 9-1:0.85: input: appletouch disconnected [ 375.033042][T12464] loop7: detected capacity change from 0 to 40427 [ 375.058778][T12464] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 375.090492][T12464] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 375.148459][T12464] F2FS-fs (loop7): invalid crc value [ 375.192683][T12497] netlink: 'syz.0.2700': attribute type 3 has an invalid length. [ 375.198461][T12464] F2FS-fs (loop7): Found nat_bits in checkpoint [ 375.239346][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 375.429380][T12464] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 375.442429][T12464] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 375.516168][T12509] kernel read not supported for file /file0 (pid: 12509 comm: syz.0.2703) [ 375.526859][ T27] audit: type=1800 audit(1791254364.299:1367): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2703" name="file0" dev="mqueue" ino=61493 res=0 errno=0 [ 375.957594][T12518] loop8: detected capacity change from 0 to 1024 [ 376.394653][ T4770] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 376.588119][ T4770] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.614623][ T4770] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 376.634656][ T4770] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 376.663023][ T4770] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 376.678224][ T4770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.116666][ T4770] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 377.129078][ T4770] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 377.137342][ T4770] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 377.147255][ T4770] cxacru: probe of 6-1:1.0 failed with error -71 [ 377.158602][ T4770] usb 6-1: USB disconnect, device number 10 [ 378.988939][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.995360][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.409516][T12632] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 381.916732][T12707] loop8: detected capacity change from 0 to 512 [ 382.472450][T12713] loop5: detected capacity change from 0 to 512 [ 382.513203][T12713] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 382.537584][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2754'. [ 382.561765][T12713] EXT4-fs (loop5): 1 truncate cleaned up [ 382.573373][T12713] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 382.951402][ T4324] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 383.019694][ T4324] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.352752][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 383.381725][T12742] netlink: 'syz.0.2759': attribute type 12 has an invalid length. [ 383.403806][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 383.430435][T12742] netlink: 'syz.0.2759': attribute type 12 has an invalid length. [ 383.588761][ T9769] EXT4-fs (loop5): unmounting filesystem. [ 383.804824][ T27] audit: type=1326 audit(1791254372.549:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 383.944595][ T27] audit: type=1326 audit(1791254372.559:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.127166][ T27] audit: type=1326 audit(1791254372.559:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.153755][ T27] audit: type=1326 audit(1791254372.559:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.235872][ T27] audit: type=1326 audit(1791254372.559:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.561738][ T27] audit: type=1326 audit(1791254372.569:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.644722][ T27] audit: type=1326 audit(1791254372.609:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.735467][ T27] audit: type=1326 audit(1791254372.609:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.812472][ T27] audit: type=1326 audit(1791254372.609:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 384.912206][ T27] audit: type=1326 audit(1791254372.639:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 385.192450][T12784] loop5: detected capacity change from 0 to 164 [ 385.555407][ T8290] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 385.754596][ T8290] usb 8-1: Using ep0 maxpacket: 8 [ 385.761596][ T8290] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.793328][ T8290] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.813590][ T8290] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.828442][ T8290] usb 8-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 385.838674][ T8290] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.850220][ T8290] usb 8-1: config 0 descriptor?? [ 386.220396][T12809] loop5: detected capacity change from 0 to 128 [ 386.282005][T12809] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 386.404656][T12809] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 386.446957][T12809] ext2 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.464293][T12809] EXT4-fs (loop5): shut down requested (0) [ 386.674729][ T8290] sony 0003:054C:042F.000D: can't set operational mode: step 1 [ 386.692591][ T8290] sony 0003:054C:042F.000D: Failed to set controller into operational mode [ 386.726558][ T8290] sony 0003:054C:042F.000D: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.7-1/input0 [ 386.750847][ T9769] EXT4-fs (loop5): unmounting filesystem. [ 386.784788][ T8290] sony 0003:054C:042F.000D: failed to claim input [ 386.844586][ T8290] usb 8-1: USB disconnect, device number 3 [ 387.192934][T12832] fido_id[12832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 387.834689][ T14] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 387.902713][T12865] netlink: 'syz.7.2799': attribute type 1 has an invalid length. [ 387.922125][T12865] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2799'. [ 388.036953][ T14] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.048370][ T14] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 388.063966][ T14] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 388.096017][ T14] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 388.106101][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.532539][ T14] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 388.563502][ T14] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 388.597293][ T14] cxacru: probe of 9-1:1.0 failed with error -71 [ 388.648436][ T14] usb 9-1: USB disconnect, device number 6 [ 388.911479][ T27] kauditd_printk_skb: 292 callbacks suppressed [ 388.911496][ T27] audit: type=1326 audit(1791254377.679:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.7.2801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1eba35e9ce code=0x7ffc0000 [ 389.014174][ T27] audit: type=1326 audit(1791254377.779:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.7.2801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1eba39e199 code=0x7ffc0000 [ 389.397949][T12898] lo speed is unknown, defaulting to 1000 [ 390.532745][T12898] netlink: 'syz.8.2808': attribute type 4 has an invalid length. [ 390.604355][T12918] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 392.312465][T12960] loop8: detected capacity change from 0 to 512 [ 392.387532][T12960] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 392.440906][T12960] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.600528][T12968] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 392.707084][T10731] EXT4-fs (loop8): unmounting filesystem. [ 393.234810][T12983] ip_tables: iptables: counters copy to user failed while replacing table [ 393.264891][T12985] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 393.264891][T12985] Q&|x777777777777777777 [ 394.330180][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2853'. [ 395.331528][T13051] loop7: detected capacity change from 0 to 512 [ 395.375883][T13051] EXT4-fs: Ignoring removed orlov option [ 395.477254][T13051] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 395.520652][T13051] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.646994][T13051] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 395.658519][T13059] binder: 13058:13059 ioctl c0306201 200000000640 returned -14 [ 395.726975][T13051] EXT4-fs: Cannot change journaled quota options when quota turned on [ 395.864323][T10492] EXT4-fs (loop7): unmounting filesystem. [ 396.075248][T13068] loop7: detected capacity change from 0 to 1024 [ 396.100700][T13068] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.152514][T13068] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 396.472297][T10492] EXT4-fs (loop7): unmounting filesystem. [ 399.592285][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2865'. [ 399.633299][T13089] lo speed is unknown, defaulting to 1000 [ 400.056145][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2881'. [ 400.098254][T13111] device bridge_slave_1 left promiscuous mode [ 400.134538][T13111] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.190718][T13111] device bridge_slave_0 left promiscuous mode [ 400.219363][T13111] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.300584][T13117] loop5: detected capacity change from 0 to 512 [ 400.377046][T13117] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 400.412286][T13117] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.2883: corrupted in-inode xattr [ 400.490805][T13117] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.2883: couldn't read orphan inode 15 (err -117) [ 400.505886][T13117] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 400.594276][ T9769] EXT4-fs (loop5): unmounting filesystem. [ 400.994747][ T14] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 401.007352][T13136] FAULT_INJECTION: forcing a failure. [ 401.007352][T13136] name failslab, interval 1, probability 0, space 0, times 0 [ 401.020237][T13136] CPU: 1 PID: 13136 Comm: syz.7.2891 Not tainted syzkaller #0 [ 401.027755][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.037866][T13136] Call Trace: [ 401.041183][T13136] [ 401.044158][T13136] dump_stack_lvl+0x188/0x24e [ 401.048899][T13136] ? show_regs_print_info+0x12/0x12 [ 401.054153][T13136] ? load_image+0x410/0x410 [ 401.058724][T13136] ? __might_sleep+0xd0/0xd0 [ 401.063366][T13136] ? __lock_acquire+0x7ea0/0x7ea0 [ 401.068481][T13136] should_fail_ex+0x390/0x4c0 [ 401.073228][T13136] should_failslab+0x5/0x20 [ 401.077779][T13136] slab_pre_alloc_hook+0x59/0x300 [ 401.082864][T13136] ? mqueue_init_fs_context+0x53/0x360 [ 401.088384][T13136] __kmem_cache_alloc_node+0x4f/0x270 [ 401.093824][T13136] ? mqueue_init_fs_context+0x53/0x360 [ 401.099341][T13136] kmalloc_trace+0x26/0xe0 [ 401.103839][T13136] mqueue_init_fs_context+0x53/0x360 [ 401.109273][T13136] alloc_fs_context+0x628/0x7d0 [ 401.114190][T13136] mq_init_ns+0x106/0x510 [ 401.118574][T13136] copy_ipcs+0x2de/0x500 [ 401.122853][T13136] create_new_namespaces+0x212/0x700 [ 401.128212][T13136] unshare_nsproxy_namespaces+0x116/0x160 [ 401.133971][T13136] ksys_unshare+0x4f6/0x8e0 [ 401.138511][T13136] ? sighand_ctor+0x40/0x40 [ 401.143043][T13136] ? lock_chain_count+0x20/0x20 [ 401.147933][T13136] ? syscall_enter_from_user_mode+0x21/0x80 [ 401.153885][T13136] __x64_sys_unshare+0x34/0x40 [ 401.158679][T13136] do_syscall_64+0x4c/0xa0 [ 401.163146][T13136] ? clear_bhb_loop+0x60/0xb0 [ 401.167906][T13136] ? clear_bhb_loop+0x60/0xb0 [ 401.172639][T13136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.178577][T13136] RIP: 0033:0x7f1eba39e199 [ 401.183028][T13136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.202677][T13136] RSP: 002b:00007f1ebb1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 401.211134][T13136] RAX: ffffffffffffffda RBX: 00007f1eba625fa0 RCX: 00007f1eba39e199 [ 401.219137][T13136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 401.227181][T13136] RBP: 00007f1eba4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 401.235197][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.243210][T13136] R13: 00007f1eba626038 R14: 00007f1eba625fa0 R15: 00007ffd87213fb8 [ 401.251233][T13136] [ 401.286577][ T14] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 401.304778][ T14] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 401.336462][ T14] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 401.355603][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.370456][ T14] usb 9-1: Product: syz [ 401.380122][ T14] usb 9-1: Manufacturer: syz [ 401.388261][ T14] usb 9-1: SerialNumber: syz [ 401.544953][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 401.635055][ T14] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 401.800886][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2897'. [ 402.046549][ T14] usb 9-1: USB disconnect, device number 7 [ 402.076035][ T14] usblp0: removed [ 402.086055][ T6734] tipc: Subscription rejected, illegal request [ 402.459147][T13169] loop5: detected capacity change from 0 to 1024 [ 402.587264][T13169] syz.5.2904: attempt to access beyond end of device [ 402.587264][T13169] loop5: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 402.642017][T13169] Buffer I/O error on dev loop5, logical block 2889, lost async page write [ 402.740755][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 402.787809][ T6734] hfsplus: bad catalog file entry [ 404.063794][T13227] netlink: 'syz.8.2930': attribute type 1 has an invalid length. [ 404.135401][T13227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.169668][T13230] bond1: (slave gretap1): making interface the new active one [ 404.180903][T13230] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 404.206433][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 405.584815][T13277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 405.638826][T13277] overlayfs: failed to clone lowerpath [ 406.840907][T13313] loop8: detected capacity change from 0 to 512 [ 406.891465][T13313] EXT4-fs: Ignoring removed orlov option [ 407.033086][T13313] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 407.095371][T13313] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.195790][T13330] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2957'. [ 407.316479][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2958'. [ 407.327433][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2958'. [ 407.419897][T10731] EXT4-fs (loop8): unmounting filesystem. [ 407.916481][T13360] overlayfs: failed to clone upperpath [ 408.021575][T13366] loop5: detected capacity change from 0 to 1024 [ 408.024119][T13369] sctp: [Deprecated]: syz.8.2970 (pid 13369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.024119][T13369] Use struct sctp_sack_info instead [ 408.136981][T13366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 408.175868][T13366] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.247516][T13366] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 3) [ 408.272974][T13377] loop8: detected capacity change from 0 to 512 [ 408.352157][T13366] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 408.377892][T13366] EXT4-fs (loop5): This should not happen!! Data will be lost [ 408.377892][T13366] [ 408.393816][T13377] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 408.393830][T13379] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.428852][T13377] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.443821][T13364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.459274][T13379] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.476286][T13364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.501177][T13379] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.541183][T13379] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.637372][T13364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.689614][T13379] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.724800][T13364] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.2969: lblock 3 mapped to illegal pblock 3 (length 1) [ 408.755655][T10731] EXT4-fs (loop8): unmounting filesystem. [ 408.879689][T13393] loop8: detected capacity change from 0 to 1024 [ 408.993681][T13395] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.017159][T13366] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 409.092481][T13366] EXT4-fs (loop5): This should not happen!! Data will be lost [ 409.092481][T13366] [ 409.144734][T13366] EXT4-fs (loop5): Total free blocks count 0 [ 409.160242][T13366] EXT4-fs (loop5): Free/Dirty block details [ 409.204541][T13366] EXT4-fs (loop5): free_blocks=0 [ 409.219955][T13366] EXT4-fs (loop5): dirty_blocks=64 [ 409.250200][T13366] EXT4-fs (loop5): Block reservation details [ 410.298921][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2994'. [ 410.341743][T13430] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.350728][T13430] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.359570][T13430] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.368406][T13430] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.498334][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2994'. [ 411.559184][T13469] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 411.659672][T13471] bond0: (slave gretap2): making interface the new active one [ 411.725103][T13471] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 411.940002][ T4290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 411.955530][ T4290] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 411.966774][ T4290] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 411.975614][ T4290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 411.985658][ T4290] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 411.993833][ T4290] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 412.182770][T13473] lo speed is unknown, defaulting to 1000 [ 412.656236][T13473] chnl_net:caif_netlink_parms(): no params data found [ 412.918933][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.965258][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.006840][T13473] device bridge_slave_0 entered promiscuous mode [ 413.029717][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.047276][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.066059][T13473] device bridge_slave_1 entered promiscuous mode [ 413.124432][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.157470][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.301628][T13473] team0: Port device team_slave_0 added [ 413.309501][ T6727] wlan1: Trigger new scan to find an IBSS to join [ 413.339487][T13473] team0: Port device team_slave_1 added [ 413.396742][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.403774][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.446709][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.481566][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.514696][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.614427][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.678150][T13473] device hsr_slave_0 entered promiscuous mode [ 413.727683][T13473] device hsr_slave_1 entered promiscuous mode [ 413.754656][T13473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.762295][T13473] Cannot create hsr debugfs directory [ 413.832853][T13512] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3018'. [ 413.980383][T13517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3020'. [ 414.008973][T13517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3020'. [ 414.043105][T13517] device gretap0 entered promiscuous mode [ 414.077846][T13517] device gretap0 left promiscuous mode [ 414.104911][ T4290] Bluetooth: hci6: command 0x0409 tx timeout [ 414.144049][T13519] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3020'. [ 414.165836][T13519] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3020'. [ 414.251660][T13519] device gretap0 entered promiscuous mode [ 414.282722][T13519] device gretap0 left promiscuous mode [ 414.457921][T13527] overlayfs: failed to clone upperpath [ 414.810895][T13473] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 414.868465][T13473] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 414.890256][T13473] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 414.907870][T13473] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 414.984412][T13548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3034'. [ 415.011417][T13548] device vlan0 entered promiscuous mode [ 415.028706][T13548] device eth0 entered promiscuous mode [ 415.098262][T13550] loop5: detected capacity change from 0 to 4096 [ 415.140865][T13550] EXT4-fs: inline encryption not supported [ 415.168439][T13550] ext2: Bad value for 'resgid' [ 415.256263][T13473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.305845][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.322621][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.372486][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.417703][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.458382][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.509035][ T6751] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.516320][ T6751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.571077][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.610941][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.668754][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.734879][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.742140][ T6751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.823207][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.868171][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.897407][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.920942][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.966862][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.158923][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.169291][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.179432][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.191051][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.195438][ T4290] Bluetooth: hci6: command 0x041b tx timeout [ 416.231892][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.265486][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.303367][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.220915][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3058'. [ 417.238980][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3058'. [ 417.275015][T13625] loop8: detected capacity change from 0 to 512 [ 417.284119][T13623] device gretap0 entered promiscuous mode [ 417.304896][ T6732] wlan1: Trigger new scan to find an IBSS to join [ 417.316047][T13625] EXT4-fs: inline encryption not supported [ 417.344275][T13625] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 417.355159][T13623] device gretap0 left promiscuous mode [ 417.390394][T13625] EXT4-fs (loop8): orphan cleanup on readonly fs [ 417.402551][T13626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3058'. [ 417.412606][ T6732] wlan1: Creating new IBSS network, BSSID 0e:5f:45:89:34:97 [ 417.435539][T13626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3058'. [ 417.448131][T13625] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.3057: inode #15: comm syz.8.3057: iget: illegal inode # [ 417.473056][T13625] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.3057: couldn't read orphan inode 15 (err -117) [ 417.488454][T13625] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 417.518184][T13626] device gretap0 entered promiscuous mode [ 417.595820][T13626] device gretap0 left promiscuous mode [ 417.653497][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.680111][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.710170][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.733050][T10731] EXT4-fs (loop8): unmounting filesystem. [ 418.032203][T13645] loop5: detected capacity change from 0 to 512 [ 418.265392][ T4290] Bluetooth: hci6: command 0x040f tx timeout [ 419.495907][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.565914][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.614374][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.644415][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.679231][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.709964][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.729464][T13473] device veth0_vlan entered promiscuous mode [ 419.850496][T13473] device veth1_vlan entered promiscuous mode [ 419.982979][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 420.008134][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 420.065221][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.085226][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.118346][T13473] device veth0_macvtap entered promiscuous mode [ 420.160979][T13473] device veth1_macvtap entered promiscuous mode [ 420.268552][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.317282][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.354751][ T4290] Bluetooth: hci6: command 0x0419 tx timeout [ 420.368284][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.453589][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.492004][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.517562][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.542571][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.573043][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.600600][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.637501][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 420.659526][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 420.676359][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.693723][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.723405][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.770609][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.799621][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.822396][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.843560][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.867363][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.909255][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.964596][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.021379][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.052497][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.071308][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.111360][T13751] netlink: 'syz.8.3087': attribute type 1 has an invalid length. [ 421.182432][T13751] device bond2 entered promiscuous mode [ 421.247416][T13762] xt_hashlimit: size too large, truncated to 1048576 [ 421.255538][T13751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.297518][T13473] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.320981][T13473] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.360938][T13473] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.390963][T13473] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.409230][T13767] overlayfs: failed to clone upperpath [ 421.440504][T13758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.458354][T13758] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 421.490401][T13758] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 421.526587][T13758] bond2: (slave ip6gre1): making interface the new active one [ 421.534141][T13758] device ip6gre1 entered promiscuous mode [ 421.567113][T13758] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 421.608474][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 421.816360][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.836883][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.872926][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.949646][ T6732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.968960][ T6732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.008143][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.220839][ C1] Unknown status report in ack skb [ 423.693568][ C1] Unknown status report in ack skb [ 423.998850][T13824] loop8: detected capacity change from 0 to 512 [ 424.095659][T13821] loop5: detected capacity change from 0 to 40427 [ 424.106996][T13821] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 424.114877][T13821] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 424.200578][T13821] F2FS-fs (loop5): Found nat_bits in checkpoint [ 424.265142][T13821] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 424.272306][T13821] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 424.762567][T13839] syz.5.3125: attempt to access beyond end of device [ 424.762567][T13839] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 425.413582][T13853] loop8: detected capacity change from 0 to 512 [ 426.659752][T13872] loop5: detected capacity change from 0 to 128 [ 426.684627][ T4275] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 426.914930][ T4275] usb 9-1: Using ep0 maxpacket: 8 [ 426.925662][ T4275] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.954831][ T4275] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.970128][ T4275] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.983346][ T4275] usb 9-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 426.993307][ T4275] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.015785][ T4275] usb 9-1: config 0 descriptor?? [ 427.767237][T13901] loop9: detected capacity change from 0 to 40427 [ 427.783972][T13901] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 427.791862][T13901] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 427.888615][T13901] F2FS-fs (loop9): Found nat_bits in checkpoint [ 427.950287][T13901] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 427.957637][T13901] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 427.984855][ T4275] sony 0003:054C:042F.000E: can't set operational mode: step 1 [ 428.006179][ T4275] sony 0003:054C:042F.000E: Failed to set controller into operational mode [ 428.034265][ T4275] sony 0003:054C:042F.000E: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.8-1/input0 [ 428.379578][ T4275] sony 0003:054C:042F.000E: failed to claim input [ 428.458650][ T4275] usb 9-1: USB disconnect, device number 8 [ 428.532708][T13911] syz.9.3132: attempt to access beyond end of device [ 428.532708][T13911] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 428.883055][ T3934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.922301][ T3934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.971555][T13914] fido_id[13914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 428.993274][ T3934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.016756][ T3934] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.078227][ T3934] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.114623][ T3934] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.153767][ T3934] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.197447][ T3934] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.250565][T13976] netlink: 'syz.9.3152': attribute type 1 has an invalid length. [ 431.630093][T13991] loop9: detected capacity change from 0 to 256 [ 431.702292][T13991] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 432.126048][T14001] netlink: 'syz.8.3162': attribute type 8 has an invalid length. [ 432.144622][T14001] __nla_validate_parse: 1 callbacks suppressed [ 432.144639][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3162'. [ 432.229781][T14001] netlink: 'syz.8.3162': attribute type 8 has an invalid length. [ 432.254690][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3162'. [ 432.306609][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3162'. [ 432.356607][T14001] netlink: 'syz.8.3162': attribute type 8 has an invalid length. [ 432.395754][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3162'. [ 432.434035][T14001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.469358][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3162'. [ 432.500861][T14001] netlink: 'syz.8.3162': attribute type 8 has an invalid length. [ 432.545245][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3162'. [ 432.593657][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3162'. [ 432.913442][T14029] loop9: detected capacity change from 0 to 512 [ 433.006196][T14029] EXT4-fs (loop9): orphan cleanup on readonly fs [ 433.025184][T14029] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #11: comm syz.9.3172: ea_inode with extended attributes [ 433.040765][T14029] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.3172: error while reading EA inode 11 err=-117 [ 433.055212][T14029] EXT4-fs (loop9): 1 orphan inode deleted [ 433.061015][T14029] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 433.141371][T13473] EXT4-fs (loop9): unmounting filesystem. [ 433.214600][ T8288] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 433.595288][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 433.743973][ T8288] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.758509][ T8288] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.768536][ T8288] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.774454][T14059] device-mapper: dirty region log: region count exceeds limit of 4294967295 [ 433.778389][ T8288] usb 9-1: Product: syz [ 433.793377][ T8288] usb 9-1: Manufacturer: syz [ 433.803916][ T8288] usb 9-1: SerialNumber: syz [ 433.824209][T14059] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL) [ 433.876915][T14059] device-mapper: ioctl: error adding target to table [ 434.056738][T14064] overlayfs: failed to clone upperpath [ 434.299380][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 434.366163][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 434.386329][T14079] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 434.859645][ T8288] cdc_ncm 9-1:1.0: bind() failure [ 434.870815][ T8288] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 434.925226][ T8288] cdc_ncm 9-1:1.1: bind() failure [ 434.974840][ T8288] usb 9-1: USB disconnect, device number 9 [ 435.351778][T14124] device gretap0 entered promiscuous mode [ 435.372898][T14124] device gretap0 left promiscuous mode [ 437.035841][T14173] loop8: detected capacity change from 0 to 1024 [ 437.057375][T14173] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 437.084125][T14173] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 437.131331][T14173] EXT4-fs (loop8): journal inode is deleted [ 438.104823][ T6729] rpcbind: server 127.0.0.1 not responding, timed out [ 438.482807][T14224] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 438.515513][T14224] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 438.940469][T14217] loop8: detected capacity change from 0 to 32768 [ 439.029802][T14217] XFS (loop8): Mounting V5 Filesystem [ 439.101356][T14217] XFS (loop8): Ending clean mount [ 439.139598][ T27] audit: type=1800 audit(1791254427.909:1671): pid=14217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3234" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 439.444846][ T4275] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 439.510658][T10731] XFS (loop8): Unmounting Filesystem [ 439.659620][ T4275] usb 6-1: Using ep0 maxpacket: 32 [ 439.678972][ T4275] usb 6-1: unable to get BOS descriptor or descriptor too short [ 439.700988][ T4275] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 439.751073][ T4275] usb 6-1: can't read configurations, error -71 [ 440.346126][ T4303] tipc: Subscription rejected, illegal request [ 440.370713][T14265] loop8: detected capacity change from 0 to 256 [ 440.429104][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.435733][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.225018][ T4290] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 441.235147][ T4290] Bluetooth: hci5: Injecting HCI hardware error event [ 441.249274][ T4280] Bluetooth: hci5: hardware error 0x00 [ 441.444775][ T26] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 441.634687][ T26] usb 10-1: Using ep0 maxpacket: 32 [ 441.642698][ T26] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 441.681288][ T26] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 441.716343][ T26] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 441.745174][ T26] usb 10-1: Product: syz [ 441.766519][ T26] usb 10-1: Manufacturer: syz [ 441.804546][ T26] usb 10-1: SerialNumber: syz [ 441.825417][ T26] usb 10-1: config 0 descriptor?? [ 441.847661][T14291] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 441.866347][ T26] hub 10-1:0.0: bad descriptor, ignoring hub [ 441.884985][ T26] hub: probe of 10-1:0.0 failed with error -5 [ 442.554850][T14291] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 442.785466][T14291] usb 10-1: device firmware changed [ 442.814530][ T4320] usb 10-1: USB disconnect, device number 2 [ 443.034601][ T4320] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 443.234586][ T4320] usb 10-1: Using ep0 maxpacket: 32 [ 443.242024][ T4320] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 443.283001][ T4320] usb 10-1: string descriptor 0 read error: -22 [ 443.304230][ T4320] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 443.313999][ T4280] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 443.334647][ T4320] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 443.354740][ T4320] usb 10-1: config 0 descriptor?? [ 443.360914][T14314] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 443.372924][ T4320] hub 10-1:0.0: bad descriptor, ignoring hub [ 443.380073][ T4320] hub: probe of 10-1:0.0 failed with error -5 [ 443.706536][T14353] __nla_validate_parse: 1 callbacks suppressed [ 443.706555][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3271'. [ 443.723132][T14355] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 443.755177][T14355] overlayfs: failed to clone lowerpath [ 443.764746][T14353] netlink: 'syz.8.3271': attribute type 1 has an invalid length. [ 443.772560][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3271'. [ 443.849493][T14356] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3271'. [ 443.859060][ T4320] usb 10-1: USB disconnect, device number 3 [ 443.883574][T14356] netlink: 'syz.8.3271': attribute type 1 has an invalid length. [ 443.934671][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3271'. [ 444.221953][T14370] device gre4 entered promiscuous mode [ 445.293757][T14412] loop5: detected capacity change from 0 to 512 [ 445.450515][T14412] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 445.515088][T14412] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.698748][ T9769] EXT4-fs (loop5): unmounting filesystem. [ 445.909475][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3300'. [ 445.940923][T14439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.140016][T14439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.852811][ T4301] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 446.903926][ T4301] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.120232][ T4301] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.165446][ T4301] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.351097][ T4301] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.381752][ T4301] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.596818][ T4301] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.659127][ T4301] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.959498][ T4301] netdevsim netdevsim8 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.071597][ T4301] netdevsim netdevsim8 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.186627][ T4301] netdevsim netdevsim8 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.233451][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.247026][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.256674][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.264876][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.276444][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 448.283981][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.382833][ T4301] netdevsim netdevsim8 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.456456][T14516] lo speed is unknown, defaulting to 1000 [ 449.305517][ T4301] bond2: (slave ip6gre1): Releasing backup interface [ 449.312300][ T4301] device ip6gre1 left promiscuous mode [ 449.328694][ T4301] bond2: Destroying bond [ 449.998845][ T4301] bond2 (unregistering): Released all slaves [ 450.068015][T14548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3336'. [ 450.083114][T14548] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 450.101578][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 450.151690][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3336'. [ 450.173435][T14553] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 450.201576][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 450.269798][ T6727] wlan1: Trigger new scan to find an IBSS to join [ 450.344901][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 450.599650][T14516] chnl_net:caif_netlink_parms(): no params data found [ 450.819640][T14516] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.827294][T14516] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.835785][T14516] device bridge_slave_0 entered promiscuous mode [ 450.844922][T14516] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.852130][T14516] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.861929][T14516] device bridge_slave_1 entered promiscuous mode [ 450.874603][ T26] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 450.952819][T14516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.968363][T14516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.079155][ T26] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.090299][ T26] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.113840][ T4301] bond1: (slave gretap1): Releasing active interface [ 451.133521][ T26] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.153342][ T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.194717][ T26] usb 10-1: SerialNumber: syz [ 451.434214][ T26] usb 10-1: 0:2 : does not exist [ 451.451317][T14516] team0: Port device team_slave_0 added [ 451.465893][ T26] usb 10-1: unit 4 not found! [ 451.518098][ T26] usb 10-1: USB disconnect, device number 4 [ 451.651921][T14516] team0: Port device team_slave_1 added [ 451.920841][T14516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.935787][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.024116][T14516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.067752][T14516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.107587][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.202416][T14516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.378589][T14630] ptp ptp0: new virtual clock ptp1 [ 452.384724][T14630] ptp ptp0: guarantee physical clock free running [ 452.400170][T14637] ptp ptp0: delete virtual clock ptp1 [ 452.434607][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 452.515050][T14637] ptp ptp0: only physical clock in use now [ 452.582001][T14622] lo speed is unknown, defaulting to 1000 [ 452.619446][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3349'. [ 452.678349][T14641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 452.714675][T14643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.725687][T14643] bond4: (slave bond5): Enslaving as an active interface with an up link [ 452.815764][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'. [ 453.115566][T14644] bond4 (unregistering): (slave bond5): Releasing backup interface [ 453.143939][T14644] bond4 (unregistering): Released all slaves [ 453.181890][T14629] device syzkaller1 entered promiscuous mode [ 453.327117][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 453.386055][ T4301] device hsr_slave_0 left promiscuous mode [ 453.397667][ T4301] device hsr_slave_1 left promiscuous mode [ 453.405289][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.412771][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.430071][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.441823][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.508054][ T4301] device veth1_macvtap left promiscuous mode [ 453.514306][ T4301] device veth0_macvtap left promiscuous mode [ 453.521305][ T4301] device veth1_vlan left promiscuous mode [ 453.527381][ T4301] device veth0_vlan left promiscuous mode [ 453.913823][ T4301] bond1 (unregistering): Released all slaves [ 454.085168][T14664] overlayfs: failed to clone upperpath [ 454.274128][ T6752] wlan1: Trigger new scan to find an IBSS to join [ 454.414847][ T6752] wlan1: Creating new IBSS network, BSSID 7a:a7:0a:63:b2:64 [ 454.514621][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 454.624786][T14681] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 455.110364][ T4301] team0 (unregistering): Port device team_slave_1 removed [ 455.181158][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.249277][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.887964][ T4301] bond0 (unregistering): Released all slaves [ 455.953810][T14516] device hsr_slave_0 entered promiscuous mode [ 455.961483][T14516] device hsr_slave_1 entered promiscuous mode [ 455.968791][T14516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.977966][T14516] Cannot create hsr debugfs directory [ 456.054708][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 456.594847][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 456.902320][T14716] loop9: detected capacity change from 0 to 8 [ 456.936210][T14516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.980191][T14716] SQUASHFS error: Failed to read block 0x62b: -5 [ 456.999067][T14716] SQUASHFS error: Unable to read metadata cache entry [629] [ 457.016340][T14716] SQUASHFS error: Unable to read inode 0x11f [ 457.231088][T14516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.563546][T14734] loop5: detected capacity change from 0 to 256 [ 457.577402][T14516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.905784][T14516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.175753][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 458.326048][T14756] loop9: detected capacity change from 0 to 512 [ 458.389320][T14756] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 458.423611][T14756] EXT4-fs (loop9): 1 truncate cleaned up [ 458.459381][T14756] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 458.592237][T14516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.669469][T14516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.691693][T14516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.734691][T14516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 459.189849][T14516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.389120][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.408843][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.428067][T14516] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.465881][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.483335][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.551063][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.558333][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.615229][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.640440][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.698287][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.721729][T13473] EXT4-fs (loop9): unmounting filesystem. [ 459.730410][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.737681][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.771508][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.837434][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.875545][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.936167][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.962897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.998131][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.070941][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.120532][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.175868][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.215053][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.223951][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.129107][T14840] overlayfs: failed to clone upperpath [ 461.316757][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.328210][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.363594][T14516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.507739][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 461.537757][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.647383][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 461.666757][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.690091][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.745650][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.771929][T14516] device veth0_vlan entered promiscuous mode [ 461.845484][T14516] device veth1_vlan entered promiscuous mode [ 461.925464][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.965163][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.995428][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 462.019236][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.063565][T14516] device veth0_macvtap entered promiscuous mode [ 462.084710][ T1171] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 462.097584][T14516] device veth1_macvtap entered promiscuous mode [ 462.140496][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.163596][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.189722][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.230151][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.260300][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.284709][ T1171] usb 6-1: Using ep0 maxpacket: 32 [ 462.292250][ T1171] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 462.310508][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.321975][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057ef2c00: rx timeout, send abort [ 462.341720][ T1171] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 462.361429][ T1171] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 462.368479][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.381590][ T1171] usb 6-1: Product: syz [ 462.390497][ T1171] usb 6-1: Manufacturer: syz [ 462.406407][ T1171] usb 6-1: SerialNumber: syz [ 462.413975][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.444446][ T1171] usb 6-1: config 0 descriptor?? [ 462.463015][T14516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.471435][T14857] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 462.484417][ T1171] hub 6-1:0.0: bad descriptor, ignoring hub [ 462.493056][ T1171] hub: probe of 6-1:0.0 failed with error -5 [ 462.502453][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 462.534225][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 462.582368][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.609769][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.632849][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.657555][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.675823][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.733739][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.775340][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.822073][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056f24400: rx timeout, send abort [ 462.830659][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057ef2c00: abort rx timeout. Force session deactivation [ 462.855923][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.896185][T14516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.910286][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.936283][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.960498][T14516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.985350][T14516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.994440][T14516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.006161][T14516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.071378][ T4275] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 463.200412][ T6732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.214619][ T6732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.229169][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.277124][ T4275] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 463.293865][ T6751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.312004][ T4275] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.330496][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056f24400: abort rx timeout. Force session deactivation [ 463.342039][ T6751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.381176][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 463.403215][ T4275] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.440864][ T4275] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 463.508987][ T4275] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 463.534821][T14857] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 463.554833][ T4275] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 463.563091][ T4275] usb 10-1: Manufacturer: syz [ 463.625790][ T4275] usb 10-1: config 0 descriptor?? [ 463.724403][T14857] usb 6-1: device firmware changed [ 463.734695][ T1171] usb 6-1: USB disconnect, device number 13 [ 463.934679][ T1171] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 464.043410][ T4275] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 464.057048][ T4275] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 464.096830][ T4275] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 464.134855][ T1171] usb 6-1: Using ep0 maxpacket: 32 [ 464.144163][ T1171] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 464.195638][ T1171] usb 6-1: string descriptor 0 read error: -22 [ 464.214234][ T1171] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 464.242659][ T1171] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 464.286616][ T1171] usb 6-1: config 0 descriptor?? [ 464.309348][T14878] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.328276][ T1171] hub 6-1:0.0: bad descriptor, ignoring hub [ 464.344748][ T1171] hub: probe of 6-1:0.0 failed with error -5 [ 464.487206][T14913] lo speed is unknown, defaulting to 1000 [ 464.714967][ T4770] usb 6-1: USB disconnect, device number 14 [ 465.248293][T14913] netlink: 'syz.0.3425': attribute type 4 has an invalid length. [ 465.374040][T14935] loop5: detected capacity change from 0 to 256 [ 466.226988][ T4323] usb 10-1: USB disconnect, device number 5 [ 467.004771][ T1171] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 467.195896][ T1171] usb 6-1: not running at top speed; connect to a high speed hub [ 467.209990][ T1171] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 467.242665][ T1171] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 467.272877][ T1171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.305018][ T1171] usb 6-1: Product: syz [ 467.309349][ T1171] usb 6-1: Manufacturer: syz [ 467.355264][ T1171] usb 6-1: SerialNumber: syz [ 467.396690][ T1171] oti6858 6-1:1.0: oti6858 converter detected [ 467.465263][ T1171] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 467.706883][ T6732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.789311][T14993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3448'. [ 467.822612][T14998] lo speed is unknown, defaulting to 1000 [ 467.939318][ T6732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.221656][ T6732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.499039][T15016] overlayfs: failed to clone upperpath [ 468.695738][ T6732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.009525][ T6732] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.104078][ T6732] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.134155][ T27] audit: type=1326 audit(1791254457.899:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.196558][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.212367][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.225103][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.233440][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.244949][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 469.252169][ T27] audit: type=1326 audit(1791254457.929:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.252580][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.340932][ T27] audit: type=1326 audit(1791254457.929:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.397173][ T27] audit: type=1326 audit(1791254457.929:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.413082][ T6732] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.474997][ T27] audit: type=1326 audit(1791254457.929:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.566313][ T27] audit: type=1326 audit(1791254457.929:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.568596][ T6732] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.612498][ T27] audit: type=1326 audit(1791254457.929:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.637633][ T27] audit: type=1326 audit(1791254457.929:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.672816][ T4323] usb 6-1: USB disconnect, device number 15 [ 469.696805][ T4323] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 469.744596][ T27] audit: type=1326 audit(1791254457.949:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 469.755837][ T4323] oti6858 6-1:1.0: device disconnected [ 469.843639][T15029] lo speed is unknown, defaulting to 1000 [ 469.889907][ T27] audit: type=1326 audit(1791254457.949:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.0.3458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a60b9e199 code=0x7ffc0000 [ 470.067867][T15043] loop9: detected capacity change from 0 to 128 [ 470.273249][T15041] device syzkaller1 entered promiscuous mode [ 470.444055][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'. [ 471.191678][T15029] chnl_net:caif_netlink_parms(): no params data found [ 471.384775][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 472.102795][T15029] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.141859][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.181066][T15029] device bridge_slave_0 entered promiscuous mode [ 472.487729][T15029] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.498580][T15029] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.533059][T15029] device bridge_slave_1 entered promiscuous mode [ 472.775989][T15029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.815176][T15029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.868023][T15113] netlink: 'syz.0.3478': attribute type 39 has an invalid length. [ 473.142059][ T6732] device hsr_slave_0 left promiscuous mode [ 473.210411][ T6732] device hsr_slave_1 left promiscuous mode [ 473.221250][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.241000][ T6732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.252820][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.294658][ T6732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.306120][ T6732] device bridge_slave_1 left promiscuous mode [ 473.312407][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.347281][ T6732] device bridge_slave_0 left promiscuous mode [ 473.361962][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.474700][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 473.555863][ T6732] device veth1_macvtap left promiscuous mode [ 473.562004][ T6732] device veth0_macvtap left promiscuous mode [ 473.590282][ T6732] device veth1_vlan left promiscuous mode [ 473.618931][ T6732] device veth0_vlan left promiscuous mode [ 474.785126][ T6732] team0 (unregistering): Port device team_slave_1 removed [ 474.853046][ T6732] team0 (unregistering): Port device team_slave_0 removed [ 474.916517][ T6732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.982265][ T6732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.483201][ T6732] bond0 (unregistering): Released all slaves [ 475.544710][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 475.587508][T15029] team0: Port device team_slave_0 added [ 475.596100][T15029] team0: Port device team_slave_1 added [ 475.634885][T15155] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 475.707333][T15155] device bond1 entered promiscuous mode [ 475.713207][T15155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.739608][T15158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.746960][T15158] bond1: (slave gre4): The slave device specified does not support setting the MAC address [ 475.757614][T15158] bond1: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 475.770646][T15158] bond1: (slave gre4): making interface the new active one [ 475.779006][T15158] device gre4 entered promiscuous mode [ 475.786876][T15158] bond1: (slave gre4): Enslaving as an active interface with an up link [ 475.802165][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 475.884942][T15029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.892134][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.957563][T15029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.028972][T15029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.047888][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.173720][T15029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.278857][T15181] IPv4: Oversized IP packet from 127.202.26.0 [ 476.450953][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3497'. [ 476.503829][T15029] device hsr_slave_0 entered promiscuous mode [ 476.514057][T15029] device hsr_slave_1 entered promiscuous mode [ 476.564289][T15029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.592454][T15029] Cannot create hsr debugfs directory [ 477.395666][T15029] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.624730][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 477.849346][T15029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.178198][T15029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.237553][T15235] IPVS: Error connecting to the multicast addr [ 478.466824][T15029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.832727][T15029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.873061][T15029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.915265][T15029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.976679][T15029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.233229][T15029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.293829][T15029] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.314919][T15240] loop5: detected capacity change from 0 to 40427 [ 479.326544][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.350556][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.362169][T15240] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 479.405273][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.419193][T15240] F2FS-fs (loop5): invalid crc value [ 479.436394][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.461781][T15240] F2FS-fs (loop5): invalid crc value [ 479.484778][T15240] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 479.500808][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.508125][ T6752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.553468][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.610405][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.653850][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.705644][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.712845][ T6752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.779265][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.830239][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.870541][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.916048][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.965655][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.015396][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.075214][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.097196][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.135463][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.173642][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.219623][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.253036][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.552677][T15272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 480.577702][T15272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.592301][T15272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.609635][T15272] device bridge_slave_0 left promiscuous mode [ 480.630820][T15272] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.679974][T15272] device bridge_slave_1 left promiscuous mode [ 480.692698][T15272] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.720591][T15272] bond0: (slave bond_slave_0): Releasing backup interface [ 480.746590][T15272] bond0: (slave bond_slave_1): Releasing backup interface [ 480.869537][T15272] team0: Port device team_slave_0 removed [ 480.898726][T15272] team0: Port device team_slave_1 removed [ 480.912440][T15272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.929508][T15272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.949127][T15272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.967085][T15272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.035304][T15272] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 481.559546][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 481.559563][ T27] audit: type=1326 audit(1791254470.329:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.631820][ T27] audit: type=1326 audit(1791254470.329:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.675423][T15296] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3526'. [ 481.685014][ T27] audit: type=1326 audit(1791254470.339:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.685061][ T27] audit: type=1326 audit(1791254470.339:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.685100][ T27] audit: type=1326 audit(1791254470.339:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.685145][ T27] audit: type=1326 audit(1791254470.339:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.804585][T15296] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3526'. [ 481.843380][ T27] audit: type=1326 audit(1791254470.339:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.884862][ T27] audit: type=1326 audit(1791254470.359:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 481.932096][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.945773][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.959246][T15029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.965735][ T27] audit: type=1326 audit(1791254470.359:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 482.023609][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.048541][ T27] audit: type=1326 audit(1791254470.359:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.5.3526" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4219e199 code=0x7ffc0000 [ 482.076709][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.163231][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.176028][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.212008][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.240066][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.270466][T15029] device veth0_vlan entered promiscuous mode [ 482.317881][T15029] device veth1_vlan entered promiscuous mode [ 482.384223][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 482.399551][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 482.472021][T15029] device veth0_macvtap entered promiscuous mode [ 482.489366][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.511315][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.526810][T15029] device veth1_macvtap entered promiscuous mode [ 482.543845][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.553150][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.610645][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.665821][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.704611][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.744620][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.765621][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.784592][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.815760][T15029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.823588][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.839184][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.875538][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.893634][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.915950][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.934925][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.011796][T15029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.038877][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.074972][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.115201][T15029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.123999][T15029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.172460][T15029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.213418][T15029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.500986][ T6729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.520266][ T6729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.561248][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.613044][ T6752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.663271][ T6752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.684339][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.095253][T15368] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3546'. [ 484.105964][T15368] netlink: zone id is out of range [ 484.114906][ T4770] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 484.125536][T15368] netlink: zone id is out of range [ 484.130710][T15368] netlink: zone id is out of range [ 484.155748][T15368] netlink: zone id is out of range [ 484.172262][T15368] netlink: zone id is out of range [ 484.194079][T15368] netlink: zone id is out of range [ 484.212399][T15368] netlink: zone id is out of range [ 484.237369][T15368] netlink: zone id is out of range [ 484.248954][T15368] netlink: zone id is out of range [ 484.275188][T15368] netlink: zone id is out of range [ 484.316843][ T4770] usb 6-1: not running at top speed; connect to a high speed hub [ 484.341067][ T4770] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 484.368225][ T4770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.408534][ T4770] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 484.430625][ T4770] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 484.649134][T15382] lo speed is unknown, defaulting to 1000 [ 486.683252][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 486.733557][T15420] loop2: detected capacity change from 0 to 32768 [ 486.772922][T15420] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3558 (15420) [ 486.895859][T15420] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 486.927221][ T26] usb 6-1: USB disconnect, device number 16 [ 486.939623][T15420] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 486.976112][ T26] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 486.996236][T15420] BTRFS info (device loop2): using free space tree [ 487.052906][ T26] cyberjack 6-1:1.0: device disconnected [ 487.165131][T15420] BTRFS info (device loop2): enabling ssd optimizations [ 487.280091][T15420] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 487.319776][T15471] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3567'. [ 487.362501][T15471] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3567'. [ 487.381883][T15471] 0{X: renamed from gretap0 [ 487.399628][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): 30{X: link becomes ready [ 487.658292][T15481] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 487.658292][T15481] Q&|x6 [ 488.600827][T15512] netlink: 'syz.5.3581': attribute type 1 has an invalid length. [ 488.618260][T15512] netlink: 'syz.5.3581': attribute type 4 has an invalid length. [ 488.642952][T15512] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3581'. [ 489.128929][T15539] net_ratelimit: 299 callbacks suppressed [ 489.128947][T15539] ip_tables: iptables: counters copy to user failed while replacing table [ 489.147798][T15539] tipc: Started in network mode [ 489.153450][T15539] tipc: Node identity ac1414aa, cluster identity 4711 [ 489.162213][T15539] tipc: Enabled bearer , priority 10 [ 489.808170][ T27] kauditd_printk_skb: 220 callbacks suppressed [ 489.808187][ T27] audit: type=1326 audit(1791254478.579:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 489.898067][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 489.941312][ T27] audit: type=1326 audit(1791254478.579:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.071862][ T27] audit: type=1326 audit(1791254478.579:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.185118][ T27] audit: type=1326 audit(1791254478.579:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.262099][ T27] audit: type=1326 audit(1791254478.579:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.286390][ T4770] tipc: Node number set to 2886997162 [ 490.351220][ T27] audit: type=1326 audit(1791254478.589:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.445535][ T27] audit: type=1326 audit(1791254478.589:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.523677][ T27] audit: type=1326 audit(1791254478.589:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.3596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.637210][ T27] audit: type=1326 audit(1791254479.409:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.3.3604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 490.674814][ T27] audit: type=1326 audit(1791254479.439:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.3.3604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce18d9e199 code=0x7ffc0000 [ 491.682941][T15625] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 491.723356][T15625] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 492.401569][T15646] loop5: detected capacity change from 0 to 32768 [ 492.411533][T15646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3617 (15646) [ 492.439884][T15646] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 492.450190][T15646] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 492.458958][T15646] BTRFS info (device loop5): force clearing of disk cache [ 492.467078][T15646] BTRFS info (device loop5): enabling auto defrag [ 492.473645][T15646] BTRFS info (device loop5): max_inline at 0 [ 492.479764][T15646] BTRFS info (device loop5): enabling disk space caching [ 492.486903][T15646] BTRFS info (device loop5): disk space caching is enabled [ 492.601621][T15646] BTRFS info (device loop5): enabling ssd optimizations [ 492.612527][T15646] BTRFS info (device loop5): rebuilding free space tree [ 492.665227][T15646] BTRFS info (device loop5): disabling free space tree [ 492.672352][T15646] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 492.683323][T15646] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 493.126353][ T9769] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 493.699062][ T4290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 493.727620][ T4290] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 493.737577][ T4290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 493.746974][ T4290] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 493.754929][ T4290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 493.763810][ T4290] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 493.925376][T15687] lo speed is unknown, defaulting to 1000 [ 494.442460][T15687] chnl_net:caif_netlink_parms(): no params data found [ 494.772275][T15687] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.784905][T15687] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.795396][T15687] device bridge_slave_0 entered promiscuous mode [ 494.804752][T15687] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.812020][T15687] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.820801][T15687] device bridge_slave_1 entered promiscuous mode [ 494.860176][T15687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.873259][T15687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.978409][T15687] team0: Port device team_slave_0 added [ 495.058133][T15687] team0: Port device team_slave_1 added [ 495.154866][T15687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.161899][T15687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.254886][T15687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.286785][T15687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.299492][T15687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.374576][T15687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.549474][T15687] device hsr_slave_0 entered promiscuous mode [ 495.647841][T15687] device hsr_slave_1 entered promiscuous mode [ 495.669832][T15687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.690607][T15687] Cannot create hsr debugfs directory [ 495.865141][ T4285] Bluetooth: hci7: command 0x0409 tx timeout [ 496.294289][T15687] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.314786][T15687] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.480403][T15687] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.504705][T15687] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.707164][T15687] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.740965][T15687] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.931546][T15687] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.955436][T15687] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.172531][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.224931][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 497.253216][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 497.273064][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 497.293419][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 497.320117][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 497.348754][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 497.388796][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.396714][T15783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.412467][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.428310][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.437518][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.448731][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.463847][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 497.474019][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.533357][T15783] team0: Port device xfrm0 removed [ 497.681498][T15786] team0: Mode changed to "loadbalance" [ 497.726871][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.862567][T15790] lo speed is unknown, defaulting to 1000 [ 497.944648][ T4280] Bluetooth: hci7: command 0x041b tx timeout [ 498.097840][T15687] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.146990][T15687] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.226772][T15687] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.260316][T15687] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.511767][T15790] chnl_net:caif_netlink_parms(): no params data found [ 498.578731][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 498.591895][T15823] netlink: 'syz.3.3662': attribute type 30 has an invalid length. [ 498.692096][T15687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.761424][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.770898][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.833812][T15687] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.999081][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.026225][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.074880][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.082134][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.119825][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.130432][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.140112][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.147300][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.156678][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.175545][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.183264][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.203838][T15790] device bridge_slave_0 entered promiscuous mode [ 499.219152][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.242372][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 499.269425][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 499.293907][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 499.335701][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.347691][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.357065][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.372585][T15843] device bridge_slave_0 left promiscuous mode [ 499.379309][T15843] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.395407][T15843] device bridge_slave_1 left promiscuous mode [ 499.401921][T15843] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.426360][T15843] bond0: (slave bond_slave_0): Releasing backup interface [ 499.456563][T15843] bond0: (slave bond_slave_1): Releasing backup interface [ 499.549811][T15843] team0: Port device team_slave_0 removed [ 499.557789][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 499.579594][T15843] team0: Port device team_slave_1 removed [ 499.586548][T15843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.594213][T15843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.618184][T15843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.636666][T15843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.676289][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.683476][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.723172][T15790] device bridge_slave_1 entered promiscuous mode [ 499.757673][T15844] team0: Mode changed to "loadbalance" [ 499.805199][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.838802][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 499.858068][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 499.877881][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 499.900635][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.958814][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 499.976685][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.028203][T15687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.035777][ T4280] Bluetooth: hci7: command 0x040f tx timeout [ 500.075487][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.088375][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.174328][T15790] team0: Port device team_slave_0 added [ 500.203790][T15790] team0: Port device team_slave_1 added [ 500.306696][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.329694][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.408601][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.454300][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.480207][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.587226][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.746586][T15790] device hsr_slave_0 entered promiscuous mode [ 500.800147][T15790] device hsr_slave_1 entered promiscuous mode [ 500.815221][T15790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.822854][T15790] Cannot create hsr debugfs directory [ 501.126019][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.139267][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.177834][T15687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.624856][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 501.867331][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.873777][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.978013][T15790] netdevsim netdevsim6 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.104806][ T4280] Bluetooth: hci7: command 0x0419 tx timeout [ 502.418728][T15790] netdevsim netdevsim6 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.749932][T15790] netdevsim netdevsim6 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.886960][T15933] netlink: 'syz.0.3688': attribute type 39 has an invalid length. [ 503.126604][T15790] netdevsim netdevsim6 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.273584][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 503.293230][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.371186][T15687] device veth0_vlan entered promiscuous mode [ 503.395571][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.417941][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.441878][T15687] device veth1_vlan entered promiscuous mode [ 503.499339][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.517692][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.545965][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.676665][T15687] device veth0_macvtap entered promiscuous mode [ 503.704582][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 503.728705][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.748422][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 503.800954][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.838629][T15687] device veth1_macvtap entered promiscuous mode [ 503.873706][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.898594][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.981635][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.022744][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.074524][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.123807][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.164412][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.198139][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.265757][T15687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.305596][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.354173][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 504.396159][T15790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 504.428797][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.456888][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.474761][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.494185][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.513837][T15687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.540743][T15790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 504.566048][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.596009][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.630281][T15687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.654571][T15687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.678980][T15687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.704542][T15687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.736048][T15790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 504.790980][T15790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 504.958219][ T6732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.996532][ T6732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.020314][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 505.109720][ T6727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.124742][ T6727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.168487][T15790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.185316][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.247494][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 505.257214][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.290325][T15790] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.316224][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 505.356709][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.375198][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.382414][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.429062][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 505.458567][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.480352][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.512085][T15986] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 505.512085][T15986] The task syz.4.3620 (15986) triggered the difference, watch for misbehavior. [ 505.512211][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.529975][ T6727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.585061][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 505.646131][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 505.673745][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.708270][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.734991][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.754373][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 505.784090][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.794904][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 505.813291][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 505.832455][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.855619][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 505.864239][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 505.910219][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.180864][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.209113][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.257670][T15999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.984955][ T28] INFO: task syz.4.1961:10002 blocked for more than 143 seconds. [ 507.016401][ T28] Not tainted syzkaller #0 [ 507.021437][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 507.096127][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.103716][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.112093][ T28] task:syz.4.1961 state:D stack:26832 pid:10002 ppid:4286 flags:0x00004002 [ 507.162121][ T28] Call Trace: [ 507.177915][T15790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.209871][ T28] [ 507.212920][ T28] __schedule+0x107f/0x4030 [ 507.304939][ T28] ? release_firmware_map_entry+0x187/0x187 [ 507.359965][ T28] ? __mutex_trylock_common+0x86/0x260 [ 507.495031][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 507.501311][ T28] schedule+0xb9/0x180 [ 507.564714][ T28] schedule_preempt_disabled+0xf/0x20 [ 507.570194][ T28] __mutex_lock+0x548/0xae0 [ 507.628693][ T28] ? __mutex_lock+0x3ba/0xae0 [ 507.633500][ T28] ? nfsd_shutdown_threads+0x4f/0x1a0 [ 507.664549][ T28] ? mutex_lock_nested+0x10/0x10 [ 507.669634][ T28] ? net_generic+0x1e/0x240 [ 507.674224][ T28] nfsd_shutdown_threads+0x4f/0x1a0 [ 507.714691][ T28] nfsd_umount+0x3e/0xc0 [ 507.719068][ T28] deactivate_locked_super+0x93/0xf0 [ 507.727104][ T28] cleanup_mnt+0x471/0x4f0 [ 507.731695][ T28] task_work_run+0x1d0/0x260 [ 507.736786][ T28] ? task_work_cancel+0x220/0x220 [ 507.741895][ T28] ? do_exit+0x9d0/0x2570 [ 507.746755][ T28] ? kmem_cache_free+0xf7/0x2a0 [ 507.751735][ T28] do_exit+0x9d5/0x2570 [ 507.756501][ T28] ? put_task_struct+0x80/0x80 [ 507.761359][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 507.767799][ T28] ? lock_chain_count+0x20/0x20 [ 507.772728][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 507.778228][ T28] do_group_exit+0x229/0x2e0 [ 507.782902][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 507.806232][ T28] get_signal+0x1259/0x1340 [ 507.811013][ T28] arch_do_signal_or_restart+0xc4/0x1310 [ 507.824679][ T28] ? kick_process+0xd4/0x140 [ 507.829484][ T28] ? task_work_add+0x2cb/0x330 [ 507.834320][ T28] ? get_sigframe_size+0x10/0x10 [ 507.854507][ T28] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 507.860023][ T28] ? ksys_write+0x1fd/0x260 [ 507.867274][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 507.873002][ T28] exit_to_user_mode_loop+0x70/0x110 [ 507.878803][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 507.884751][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 507.890300][ T28] do_syscall_64+0x58/0xa0 [ 507.900739][ T28] ? clear_bhb_loop+0x60/0xb0 [ 507.906658][ T28] ? clear_bhb_loop+0x60/0xb0 [ 507.911427][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.918030][ T28] RIP: 0033:0x7fd9b619e199 [ 507.922511][ T28] RSP: 002b:00007fd9b43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.931984][ T28] RAX: 0000000000000002 RBX: 00007fd9b6426090 RCX: 00007fd9b619e199 [ 507.940273][ T28] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000004 [ 507.949277][ T28] RBP: 00007fd9b62358e0 R08: 0000000000000000 R09: 0000000000000000 [ 507.970134][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.986836][ T28] R13: 00007fd9b6426128 R14: 00007fd9b6426090 R15: 00007ffee83d5a58 [ 508.014845][ T28] [ 508.019186][ T28] [ 508.019186][ T28] Showing all locks held in the system: [ 508.066728][ T28] 1 lock held by rcu_tasks_kthre/12: [ 508.072114][ T28] #0: ffffffff8cb2e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 508.175078][ T28] 1 lock held by rcu_tasks_trace/13: [ 508.181293][ T28] #0: ffffffff8cb2ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 508.263382][ T28] 1 lock held by khungtaskd/28: [ 508.314675][ T28] #0: ffffffff8cb2d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 508.346208][ T28] 2 locks held by getty/4024: [ 508.350965][ T28] #0: ffff88814ceaf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 508.403777][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 508.464517][ T28] 2 locks held by kworker/1:8/4362: [ 508.469797][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 508.520660][ T28] #1: ffffc90004837d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 508.574186][ T28] 1 lock held by syz.3.801/6520: [ 508.604679][ T28] 2 locks held by kworker/u4:14/6732: [ 508.654578][ T28] 2 locks held by syz.1.949/6939: [ 508.659699][ T28] #0: ffff88802a4bc0e0 (&type->s_umount_key#116){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 508.721115][ T28] #1: ffffffff8cdccf08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4f/0x1a0 [ 508.800668][ T28] 3 locks held by kworker/1:16/8295: [ 508.822732][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 508.859196][ T28] #1: ffffc9000c9e7d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 508.905000][ T28] #2: ffffffff8cb33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 508.934551][ T28] 2 locks held by syz.4.1961/10002: [ 508.940187][ T28] #0: ffff88802c5280e0 (&type->s_umount_key#116){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 508.994556][ T28] #1: ffffffff8cdccf08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4f/0x1a0 [ 509.004343][ T28] 1 lock held by syz.0.3238/14230: [ 509.031340][ T28] 1 lock held by syz.9.3507/15220: [ 509.039827][ T28] #0: ffff88802a4bc0e0 (&type->s_umount_key#116){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 509.050739][ T28] 3 locks held by syz-executor/15790: [ 509.056322][ T28] #0: ffff88807a49d1e0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 509.067194][ T28] #1: ffff88807a49c428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1060 [ 509.077146][ T28] #2: ffffffff8deb5e28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 509.087347][ T28] 3 locks held by syz.4.3707/16006: [ 509.092582][ T28] #0: ffff88802a2d91e0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 509.102698][ T28] #1: ffff88802a2d8428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1060 [ 509.120660][ T28] #2: ffffffff8deb5e28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 509.154819][ T28] 3 locks held by syz.2.3712/16025: [ 509.160114][ T28] #0: ffff888056a211e0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 509.179197][ T28] #1: ffff888056a20428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1060 [ 509.190181][ T28] #2: ffffffff8deb5e28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 509.200682][ T28] 4 locks held by sed/16041: [ 509.209696][ T28] [ 509.231857][ T28] ============================================= [ 509.231857][ T28] [ 509.272235][ T28] NMI backtrace for cpu 1 [ 509.276667][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 509.283926][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.294061][ T28] Call Trace: [ 509.297379][ T28] [ 509.300348][ T28] dump_stack_lvl+0x188/0x24e [ 509.305079][ T28] ? irq_work_queue+0xb8/0x140 [ 509.310006][ T28] ? show_regs_print_info+0x12/0x12 [ 509.315251][ T28] ? load_image+0x410/0x410 [ 509.319799][ T28] ? vprintk_emit+0x59f/0x6a0 [ 509.324556][ T28] ? printk_sprint+0x460/0x460 [ 509.329382][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 509.334381][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 509.340584][ T28] ? _printk+0xda/0x130 [ 509.344790][ T28] ? load_image+0x410/0x410 [ 509.349353][ T28] ? load_image+0x410/0x410 [ 509.353912][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 509.360027][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 509.366246][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 509.372280][ T28] watchdog+0xf0e/0xf50 [ 509.376600][ T28] ? watchdog+0x1ed/0xf50 [ 509.381016][ T28] kthread+0x29d/0x330 [ 509.385169][ T28] ? hungtask_pm_notify+0x40/0x40 [ 509.390250][ T28] ? kthread_blkcg+0xd0/0xd0 [ 509.394997][ T28] ret_from_fork+0x1f/0x30 [ 509.399523][ T28] [ 509.404015][ T28] Sending NMI from CPU 1 to CPUs 0: [ 509.409500][ C0] NMI backtrace for cpu 0 [ 509.409513][ C0] CPU: 0 PID: 4347 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 509.409532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.409544][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 509.409659][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 509.409685][ C0] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 20 95 9e 0c 48 89 de 5b e9 57 90 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d b4 28 80 7e 65 8b 15 b5 28 80 7e 81 e2 00 01 ff 00 74 [ 509.409702][ C0] RSP: 0018:ffffc90004817b28 EFLAGS: 00000246 [ 509.409716][ C0] RAX: ffffffff883ee359 RBX: 000000000000c000 RCX: 0000000000000001 [ 509.409730][ C0] RDX: ffffffff883ee2d6 RSI: ffffffff8dd58a70 RDI: 000000000000002e [ 509.409743][ C0] RBP: 000000000000002e R08: ffff88802b651e00 R09: 0000000000000003 [ 509.409755][ C0] R10: 000000000000002e R11: 0000000000000000 R12: 0000000000000000 [ 509.409766][ C0] R13: 0000000000000004 R14: ffffffff8b2c8dc0 R15: 000000000000002e [ 509.409779][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 509.409794][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.409807][ C0] CR2: 00007f099126e068 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 509.409823][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.409834][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.409846][ C0] Call Trace: [ 509.409852][ C0] [ 509.409857][ C0] in_aton+0x1c9/0x440 [ 509.409935][ C0] nsim_dev_trap_report_work+0x457/0xa80 [ 509.409972][ C0] ? process_one_work+0x7b4/0x1160 [ 509.409996][ C0] process_one_work+0x8ab/0x1160 [ 509.410026][ C0] ? worker_detach_from_pool+0x240/0x240 [ 509.410051][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 509.410081][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 509.410112][ C0] ? wq_worker_running+0x97/0x190 [ 509.410131][ C0] worker_thread+0xaf5/0x12a0 [ 509.410162][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 509.410187][ C0] kthread+0x29d/0x330 [ 509.410202][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 509.410223][ C0] ? kthread_blkcg+0xd0/0xd0 [ 509.410241][ C0] ret_from_fork+0x1f/0x30 [ 509.410274][ C0] [ 509.665421][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 509.672345][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 509.679584][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.689740][ T28] Call Trace: [ 509.693054][ T28] [ 509.696018][ T28] dump_stack_lvl+0x188/0x24e [ 509.700743][ T28] ? memcpy+0x3c/0x60 [ 509.704848][ T28] ? show_regs_print_info+0x12/0x12 [ 509.710089][ T28] ? load_image+0x410/0x410 [ 509.714663][ T28] panic+0x2d3/0x710 [ 509.718615][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 509.724303][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 509.728866][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 509.734467][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 509.740675][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 509.746881][ T28] watchdog+0xf4d/0xf50 [ 509.751088][ T28] ? watchdog+0x1ed/0xf50 [ 509.755468][ T28] kthread+0x29d/0x330 [ 509.759576][ T28] ? hungtask_pm_notify+0x40/0x40 [ 509.764656][ T28] ? kthread_blkcg+0xd0/0xd0 [ 509.769290][ T28] ret_from_fork+0x1f/0x30 [ 509.773774][ T28] [ 509.777433][ T28] Kernel Offset: disabled [ 509.781772][ T28] Rebooting in 86400 seconds..