last executing test programs: 8m38.036921005s ago: executing program 32 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c000001800000000000000000000000000000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {'GPL\x00'}, {'\\@'}]}) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, 0x0, 0x0, 0x8040) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8m6.582791522s ago: executing program 33 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) inotify_init1(0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x800000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) unshare(0x22020600) syz_open_dev$usbfs(0x0, 0x77, 0x101301) fsmount(r6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x80, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5, 0xffffffff}}, @TCA_CT_LABELS={0x14, 0x7, "97b357887853f846620853baa9b1ad04"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ZONE={0x6, 0x4, 0x188}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c804}, 0x10008010) 6m22.858780344s ago: executing program 34 (id=156): socket$alg(0x26, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0xd0000000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@link_local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "d663cd75673f3c2fdc000000000000000100", "056980b2e865284992526b3f12744020cdf770280290c865754e85f2769a66bd"}}}}}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0), 0x0, 0x80801) recvmmsg(0xffffffffffffffff, &(0x7f0000001980), 0x0, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0xffffffffffffffda, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m20.978912935s ago: executing program 35 (id=159): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24622, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000001580)='/dev/fuse\x00') ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 5m52.487955753s ago: executing program 36 (id=207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 5m34.240673904s ago: executing program 9 (id=185): openat$ptmx(0xffffffffffffff9c, 0x0, 0x400383, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000008c0)=ANY=[@ANYBLOB='fmask=00000000000000000000016,dmask=00000000000000000000020,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6d616363656c74adc23e3c1cbd69632c696f636861727365743d63703836392c6e616d65636173653d312c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,namecase=1,\x00'], 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) statfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x114) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0x0, 0x469, &(0x7f0000002480)="$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") socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x0, 0xfffd, {0x4, 0x1}, {0x4c, 0x1}, @cond=[{0x1df, 0x5388, 0x6f5, 0x800, 0xca, 0x4}, {0xffff, 0x6, 0x1, 0x6, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r2, 0x1, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x6}, 0x1c) 5m29.461705244s ago: executing program 9 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) io_setup(0x2, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000240)) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x409c) 5m25.288929983s ago: executing program 9 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000c00)='1', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) 5m22.582169846s ago: executing program 9 (id=224): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpriority(0x2, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 5m17.152329772s ago: executing program 37 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect(r1, &(0x7f00000005c0)=@ll={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x80) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f", 0x17}], 0x2}}], 0x1, 0x20000044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r4, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}], 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m9.299531368s ago: executing program 38 (id=222): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r5, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 5m6.774677586s ago: executing program 39 (id=224): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpriority(0x2, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 3m17.443961169s ago: executing program 8 (id=359): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m16.435752783s ago: executing program 3 (id=361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r5 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) shmctl$IPC_RMID(r4, 0x0) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) setpgid(r1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x48010) 3m15.898622399s ago: executing program 8 (id=362): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3m14.797551691s ago: executing program 3 (id=364): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,', @ANYRESHEX=r7]) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 3m14.123760758s ago: executing program 8 (id=366): syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000000)={0xf, 0xfffffffffffffffd, 0x5, 0x8ba28}) sched_setaffinity(0x0, 0xfffffffffffffdc0, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) getdents(r2, 0x0, 0x5f) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3m12.345778326s ago: executing program 3 (id=379): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10002) io_setup(0x40, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001640)=0x0) prlimit64(r1, 0x5, 0x0, &(0x7f00000016c0)) sched_setattr(r1, &(0x7f0000000100)={0xffffffffffffff84, 0x0, 0x20, 0xfffffe00, 0xe, 0x462, 0x19a, 0x40003, 0x5, 0x6}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x4, 0xb, 0x9, 0x1000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14000}, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, r4, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 3m10.666774082s ago: executing program 8 (id=369): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,', @ANYRESHEX=r7]) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 3m8.096965869s ago: executing program 3 (id=371): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1fd, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') bind$inet(r2, &(0x7f0000000640)={0x2, 0x0, @remote}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000700), 0x80846, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r7, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) syz_clone(0x8120a000, &(0x7f0000000880)="a7fb2f2cf880cbb9b680969c9804c2c2be853eb31adf46a4569720abd659794cd2560582f340d8b997a4f4c52d4492ed5c5cdd5815225c8fb592475e94cca97ceb6e4c1837e78b2c0c4768299663aa65ebb4627290e64ceac824c723554a5a8abc69c1915f1dfc67692bfd978a87cafdd1348904c9729a774efddc0cc4bcacce875e99b914aafe16", 0x88, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="fbdaab779fb448205f24f6e278bece656e3c3fe89a7cbe738f7f198c556f3985a741bd5e72ca7554d4ffca52ff91fbe0980e007b51b29beeafedaec53041361b549de2ea87ccfeb21f04f59318d14af3c09ddf10ee32d2ce8e5954399753226a16a3808a6eaa928ee9e42f18aa61b380cc458a59840155ebe42373b8439b77b4101c595018d1c2ae6a0f3be96e3fb524db8ca10c781d40d802fae11928") 3m5.723689725s ago: executing program 8 (id=374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 3m3.232973379s ago: executing program 8 (id=377): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2m59.107603372s ago: executing program 6 (id=382): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x0, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x26, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 2m58.544927618s ago: executing program 3 (id=385): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x40, 0x8000, 0x3, 0x1, 0x10}) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x0, 0x4}) read$msr(r6, &(0x7f00000001c0)=""/66, 0x42) r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_PRINT_DEBUG(r9, 0xab06) 2m57.393889623s ago: executing program 6 (id=386): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2m53.632915993s ago: executing program 3 (id=387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 2m52.105864295s ago: executing program 6 (id=401): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xd0000000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@link_local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "d663cd75673f3c2fdc000000000000000100", "056980b2e865284992526b3f12744020cdf770280290c865754e85f2769a66bd"}}}}}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000021c0), 0x0, 0x80801) recvmmsg(r6, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)=""/63, 0x3f}], 0x1}, 0x8}], 0x1, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x1002000ff) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0xffffffffffffffda, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m47.635264766s ago: executing program 40 (id=377): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2m41.686223461s ago: executing program 6 (id=397): r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, 0x0, &(0x7f0000000280)) socket(0x10, 0x803, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r6 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x141002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc0045543, &(0x7f0000000080)) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 2m39.49419326s ago: executing program 6 (id=400): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x40, 0x8000, 0x3, 0x1, 0x10}) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x0, 0x4}) read$msr(r6, &(0x7f00000001c0)=""/66, 0x42) r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_PRINT_DEBUG(r9, 0xab06) 2m38.276031005s ago: executing program 41 (id=387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 2m36.119539499s ago: executing program 6 (id=404): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000001200), 0x800000d3d8, 0x105302) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) timer_create(0x2, 0x0, &(0x7f00000013c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000080)={0x0, 0xfffff001, 0x2007, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @broadcast}, 0x10) close(0x3) connect$pppl2tp(r3, 0x0, 0x0) 2m18.665722864s ago: executing program 42 (id=404): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000001200), 0x800000d3d8, 0x105302) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) timer_create(0x2, 0x0, &(0x7f00000013c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000080)={0x0, 0xfffff001, 0x2007, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @broadcast}, 0x10) close(0x3) connect$pppl2tp(r3, 0x0, 0x0) 1m23.809585091s ago: executing program 2 (id=473): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1m6.939373178s ago: executing program 2 (id=491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000280), &(0x7f0000000440)=0x30) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x6}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000100001042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="803105005008000024006d12ba444bd701ad4eeb66f97512800e10e0be69703665100002800400120006000f0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x100, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x480}, 0x0) 1m4.47658548s ago: executing program 2 (id=495): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1fd, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') bind$inet(r2, &(0x7f0000000640)={0x2, 0x0, @remote}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000700), 0x80846, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r7, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) syz_clone(0x8120a000, &(0x7f0000000880)="a7fb2f2cf880cbb9b680969c9804c2c2be853eb31adf46a4569720abd659794cd2560582f340d8b997a4f4c52d4492ed5c5cdd5815225c8fb592475e94cca97ceb6e4c1837e78b2c0c4768299663aa65ebb4627290e64ceac824c723554a5a8abc69c1915f1dfc67692bfd978a87cafdd1348904c9729a774efddc0cc4bcacce875e99b914aafe16", 0x88, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="fbdaab779fb448205f24f6e278bece656e3c3fe89a7cbe738f7f198c556f3985a741bd5e72ca7554d4ffca52ff91fbe0980e007b51b29beeafedaec53041361b549de2ea87ccfeb21f04f59318d14af3c09ddf10ee32d2ce8e5954399753226a16a3808a6eaa928ee9e42f18aa61b380cc458a59840155ebe42373b8439b77b4101c595018d1c2ae6a0f3be96e3fb524db8ca10c781d40d802fae11928") 59.490124566s ago: executing program 2 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r0 = socket(0x1a, 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000e00)=[{0xdab4, 0x0, 0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000010001a800c000a800500080002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='dyn']) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x58) r5 = add_key$keyring(&(0x7f0000000880), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(0x0, &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x13, 0xa, 0x701, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x802) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8fcf"], 0x0) 54.816614553s ago: executing program 2 (id=497): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xff, 0x125c7, &(0x7f0000024b40)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x25c, &(0x7f0000002500)="$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") r2 = open(&(0x7f00000000c0)='./file0\x00', 0x147842, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) r3 = open(0x0, 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) link(&(0x7f0000000ac0)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@barrier_val={'barrier', 0x3d, 0x277}}, {@norecovery}, {@noload}, {@grpjquota}, {@nodioread_nolock}, {@acl}, {@discard}], [{@uid_eq}, {@measure}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") r7 = open(&(0x7f0000000300)='./file1\x00', 0xcd37e, 0xc1) fallocate(r7, 0x0, 0x0, 0x1001f0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 47.998146182s ago: executing program 2 (id=515): munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3041, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) r2 = syz_clone(0x10094480, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x6313, r2) ptrace(0x420e, r2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xbb80) fcntl$setstatus(r1, 0x4, 0x102800) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(r4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x1, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/70, 0x46) close_range(r7, 0xffffffffffffffff, 0x0) 32.794527481s ago: executing program 43 (id=515): munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3041, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) r2 = syz_clone(0x10094480, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x6313, r2) ptrace(0x420e, r2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xbb80) fcntl$setstatus(r1, 0x4, 0x102800) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(r4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x1, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/70, 0x46) close_range(r7, 0xffffffffffffffff, 0x0) 24.519448046s ago: executing program 7 (id=538): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x168503) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000240)=0x200b8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x800, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x6, 0x5}]}}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @loopback}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) setresgid(0x0, 0xee00, 0x0) r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) pread64(r1, 0x0, 0x0, 0x2f6) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 22.458079503s ago: executing program 1 (id=541): fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x25ca03) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x4000000012, 0x80000003}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000400), 0x0, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 20.793468332s ago: executing program 5 (id=544): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) setuid(0xee01) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 17.517726747s ago: executing program 4 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e00010000"], 0x590) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 17.093997305s ago: executing program 1 (id=546): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.1276955s ago: executing program 7 (id=547): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1fd, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') bind$inet(r2, &(0x7f0000000640)={0x2, 0x0, @remote}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000700), 0x80846, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r7, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) syz_clone(0x8120a000, &(0x7f0000000880)="a7fb2f2cf880cbb9b680969c9804c2c2be853eb31adf46a4569720abd659794cd2560582f340d8b997a4f4c52d4492ed5c5cdd5815225c8fb592475e94cca97ceb6e4c1837e78b2c0c4768299663aa65ebb4627290e64ceac824c723554a5a8abc69c1915f1dfc67692bfd978a87cafdd1348904c9729a774efddc0cc4bcacce875e99b914aafe16", 0x88, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="fbdaab779fb448205f24f6e278bece656e3c3fe89a7cbe738f7f198c556f3985a741bd5e72ca7554d4ffca52ff91fbe0980e007b51b29beeafedaec53041361b549de2ea87ccfeb21f04f59318d14af3c09ddf10ee32d2ce8e5954399753226a16a3808a6eaa928ee9e42f18aa61b380cc458a59840155ebe42373b8439b77b4101c595018d1c2ae6a0f3be96e3fb524db8ca10c781d40d802fae11928") 16.012968455s ago: executing program 0 (id=548): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x18000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x81, 0x7f, 0x1, 'queue0\x00', 0x1}) syz_clone3(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001380)={'dvmrp1\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000900ffffffffffffaaaaaaaaaa0c0e9a2357c5640180c20000010000000000000000aaaaaaaaaaaaaaaaaa80c20000010000000000000000"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) syz_open_dev$sg(0x0, 0xd, 0x553503) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000020c0)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) shutdown(r2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r3 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) 15.907168446s ago: executing program 5 (id=549): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,', @ANYRESHEX=r7]) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 14.586491785s ago: executing program 1 (id=550): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000190c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x4000808) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newlink={0x78, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x12a03}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4404d80c}, 0x20008000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 12.426401331s ago: executing program 4 (id=551): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r6, 0x0, 0x0, 0xfc) fstat(r3, &(0x7f00000000c0)) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(r3, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, 0x0) 12.426167669s ago: executing program 5 (id=552): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 12.424697926s ago: executing program 7 (id=563): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0xffffffffffffffff}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x5}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 12.353916055s ago: executing program 0 (id=553): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r3, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r4, 0x0, 0x18, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e4", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r5 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 11.3345746s ago: executing program 1 (id=554): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 9.550117629s ago: executing program 5 (id=555): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x181002, 0x0) io_uring_setup(0x7a58, &(0x7f0000000180)={0x0, 0xc95e, 0x2000, 0x2}) socket$alg(0x26, 0x5, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x8000000004) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x200040c4) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x3553000) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000001080)={{&(0x7f00005a0000/0x1000)=nil, 0x1000}, 0x1}) fadvise64(r4, 0x74, 0x8, 0x4) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0x0, 0x0, 0x4, r1, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x1, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000280)={0x200}, 0x1) 7.527322147s ago: executing program 7 (id=556): openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r0, @ANYBLOB="07279f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{}, {0x20, '\x05{+\x0f+{'}, {0x20, '}'}, {0x20, 'configfs\x00'}]}, 0x18) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500007700000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(r3, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000540)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='3', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000940)='dummy_udc.0', 0xb) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, 0x0) 7.486991142s ago: executing program 4 (id=557): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,', @ANYRESHEX=r7]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 6.439297216s ago: executing program 0 (id=558): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 5.311730681s ago: executing program 0 (id=559): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,', @ANYRESHEX=r7]) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 5.298387964s ago: executing program 4 (id=560): r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x4}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) 5.089711116s ago: executing program 1 (id=561): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.96153553s ago: executing program 0 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x28, r5, 0x62c21a4ade68aba1, 0xf0bd23, 0xfffffffd, {{0x32}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x1000076}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x2400c880) 3.961277128s ago: executing program 7 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e00010000"], 0x590) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.95222751s ago: executing program 5 (id=565): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/52) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) socket(0x200000000000011, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000240)={0x0, 0x68c, 0x800, 0x0, 0x3a5}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb83e, 0x0, 0x1, 0x230, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d95, 0x400, 0x0, 0x115, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e6a, 0x8, 0x3, 0x164, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1454, 0x40, 0x1, 0x15f, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x4, 0xaea, 0x0, &(0x7f0000000540)=@buf_1k="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"}}, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x7, 0x13, &(0x7f0000000300)=""/34) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r5, &(0x7f0000006540)={0x2020}, 0xfffffce2) 3.487853256s ago: executing program 4 (id=566): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x48, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x20000000) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x9, 0x204000) ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x408003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@errors_remount}, {@grpjquota}, {@i_version}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$eJzs3U1rHOcdAPD/jLS2ZcuVTHtwDXVN7SKZ1ruSVduiB9ctpT0Z2rrnuqq0EkIrrdCubEuYVqYfoFBKWygUcsolkA8QCP4IIWBI7iEJCSGxk4MPiTfsm1/kXWmNV1oj/X4wmueZF/3/zy4zO8/MMBPAvnUqIk5HxKNKpXI2IoYa09PGcKVa2agv9+D+7enqkESlcu3zJCKpT6suMvrU/zxSXyUORcQffhvxl+T5uKW19YWpQiG/0qjnyovLudLa+rn5xam5/Fx+aWJi/OLkpckLk2NdaedgRFz+9cf//sfrv7n89k9vfnD909G/Jo3pEU/a0W31pmdqn0VTf0Ss7ESwHuhrtCfT60QAAOhI8zj/RxFxNoair3Y0BwAAAOwllV8MxtdJRAUAAADYs9LaPbBJmm3cBzAYaZrN1u/h/V4cTgvFUvkns8XVpZn6vbLDkUln5wv5sca9wsORSar18Vr5Sf38pvpERByLiH8NDdTq2eliYabXJz8AAABgnziyqf//1VC9/w8AAADsMcO9TgAAAADYcfr/AAAAsPfp/wMAAMCe9rurV6tDpfn+65kba6sLxRvnZvKlhezi6nR2uriynJ0rFudqz+xb3O7/FYrF5Z/F0uqtXDlfKudKa+vXF4urS+Xr88+8AhsAAADYRcd+ePf9JCI2fj5QG6oO9DopYFf0v8jCH+1cHsDu6+t1AkDPvNDvP7CnZHqdANBzSUT8f4v5bW/eeWdn8gEAALpv5Putr/8n254b2Eh3KUVghzj/B/uX6/+wf7n+D/tXJvqi8478wI7mAvRGss38l7/+X6m8UEIAAEDXDdaGJM1G1M4DDEaaZrMRR2uvBcgks/OF/FhEfCci3hvKHKzWx2trJtv2GQAAAAAAAAAAAAAAAAAAAAAAAACAukoliQoAAACwp0WknySN93+NDJ0Z3Hx+4EDycKg2joib/7v2n1tT5fLKeHX6F4+nl//bmH6+F2cwAAAAgM2a/fRmPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuunB/dvTzWE34372y4gYbhW/Pw7VxociExGHv0yi/6n1kojo60L8jTsR8as/tYifVNOK4UYWreIPdCv+8Vbt3zp+GhFHuhAf9rO71f3PlVbbXxqnauPN29/Bx+v2dyF++/1f+nj/19dm+z/aYYwT997MtY1/J+JEf+v9TzN+0mb/d7rD+H/+4/p6u3mV1yJGWv7+JM/EypUXl3OltfVz84tTc/m5/NLExPjFyUuTFybHcrPzhXzjb8sY//zBW4+2av/hNvGHt2n/mQ7b/829W/e/Wy9mWsUfPd36+z/eJn7a+O37caNcnT/SLG/Uy087+ca7J7dq/0yb9m/3/Y922P6zv//7hx0uCgDsgtLa+sJUoZBf2deFl/o0qodFnS2cNsK8Ck1WyK+U/vZqpPFKFprbxMOe7JcAAIDue74PDAAAAAAAAAAAAAAAAAAAAOy27jwzrPlM7K2frte0UR899yxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+jYAAP//b3rPYw==") 1.996402004s ago: executing program 1 (id=567): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 853.60076ms ago: executing program 0 (id=568): ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000040)={0xc9, 0x1}) open_tree(0xffffffffffffffff, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2142, 0x0) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x1400400d) close_range(0xffffffffffffffff, r4, 0x2) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffff, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xed, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0xee00, 0x0, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) socket$nl_generic(0x10, 0x3, 0x10) 816.972582ms ago: executing program 4 (id=569): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0xffffffffffffffff}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x5}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 25.960168ms ago: executing program 7 (id=570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 0s ago: executing program 5 (id=571): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) kernel console output (not intermixed with test programs): e [ 304.864480][ T5871] veth1_vlan: left promiscuous mode [ 304.869782][ T5871] veth0_vlan: left promiscuous mode [ 305.229384][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 305.250343][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 305.446961][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.475134][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.558698][ T7173] team0: Port device team_slave_0 added [ 305.567637][ T7173] team0: Port device team_slave_1 added [ 305.646219][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.655520][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.696325][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.709360][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.717374][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.748934][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.863584][ T7173] hsr_slave_0: entered promiscuous mode [ 305.870363][ T7173] hsr_slave_1: entered promiscuous mode [ 305.877607][ T7173] debugfs: 'hsr0' already exists in 'hsr' [ 305.885395][ T7173] Cannot create hsr debugfs directory [ 305.907709][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.007518][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.027267][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.146070][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.179452][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.195255][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.243488][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.250651][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.346368][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.357198][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.408798][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.415984][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.513257][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.730675][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.834025][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.841241][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.873303][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.880565][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.991467][ T5871] bridge_slave_1: left allmulticast mode [ 306.998807][ T5871] bridge_slave_1: left promiscuous mode [ 307.013861][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.039385][ T5871] bridge_slave_0: left allmulticast mode [ 307.061112][ T5871] bridge_slave_0: left promiscuous mode [ 307.068407][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.286156][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.302767][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.317856][ T5871] bond0 (unregistering): Released all slaves [ 307.963084][ T5871] hsr_slave_0: left promiscuous mode [ 307.987230][ T5871] hsr_slave_1: left promiscuous mode [ 308.000416][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.016508][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.028528][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.038490][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.055349][ T5871] veth1_macvtap: left promiscuous mode [ 308.060869][ T5871] veth0_macvtap: left promiscuous mode [ 308.066960][ T5871] veth1_vlan: left promiscuous mode [ 308.072357][ T5871] veth0_vlan: left promiscuous mode [ 308.390605][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 308.408678][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 308.920207][ T7173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.973563][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.999686][ T7173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 309.049417][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.074723][ T7173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 309.095777][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.105950][ T7173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 309.126183][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.149459][ T5871] IPVS: stop unused estimator thread 0... [ 309.192020][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.399279][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.430656][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.499300][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.532885][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.540053][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.593261][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.600448][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.927494][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 310.037293][ T6982] veth0_vlan: entered promiscuous mode [ 310.075327][ T6982] veth1_vlan: entered promiscuous mode [ 310.168287][ T6982] veth0_macvtap: entered promiscuous mode [ 310.191067][ T6982] veth1_macvtap: entered promiscuous mode [ 310.269860][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.316930][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.389623][ T1022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.413609][ T1022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.424020][ T7002] veth0_vlan: entered promiscuous mode [ 310.434128][ T1022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.450231][ T5871] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.490874][ T7002] veth1_vlan: entered promiscuous mode [ 310.666123][ T7002] veth0_macvtap: entered promiscuous mode [ 310.713810][ T7002] veth1_macvtap: entered promiscuous mode [ 310.746471][ T5871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.763916][ T5871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.797792][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.857140][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.877975][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.897992][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.920093][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.945726][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.971657][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.990051][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.005100][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.200615][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13 [ 311.220634][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.255237][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.316380][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.319105][ T7173] veth0_vlan: entered promiscuous mode [ 311.328798][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.359743][ T7173] veth1_vlan: entered promiscuous mode [ 311.442946][ T7173] veth0_macvtap: entered promiscuous mode [ 311.466914][ T7173] veth1_macvtap: entered promiscuous mode [ 311.533353][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.595617][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.096869][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.115298][ T7401] netlink: 68 bytes leftover after parsing attributes in process `syz.6.226'. [ 313.167966][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.207648][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.245475][ T7409] loop9: detected capacity change from 0 to 256 [ 313.276595][ T7409] exfat: Deprecated parameter 'namecase' [ 313.288806][ T7409] exfat: Deprecated parameter 'namecase' [ 313.503122][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 313.549756][ T7409] exfat: Deprecated parameter 'namecase' [ 314.506206][ T1022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.499352][ T7417] loop8: detected capacity change from 0 to 1764 [ 315.852932][ T7409] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 317.016015][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139941][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.029786][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.141274][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.847885][ T7452] loop8: detected capacity change from 0 to 17 [ 320.971668][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.004001][ T7452] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop8 [ 321.016616][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.718484][ T7470] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 327.274080][ T5938] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.655980][ T5938] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.035926][ T7480] loop8: detected capacity change from 0 to 17 [ 328.175089][ T7480] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop8 [ 329.278592][ T7488] loop3: detected capacity change from 0 to 1764 [ 330.345621][ T7491] loop6: detected capacity change from 0 to 32768 [ 331.943888][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14 [ 332.268420][ T7491] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 332.710271][ T7509] ceph: No mds server is up or the cluster is laggy [ 333.010706][ T7491] XFS (loop6): Ending clean mount [ 333.201862][ T7491] XFS (loop6): Quotacheck needed: Please wait. [ 333.403620][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 333.468539][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 333.643157][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.659090][ T7491] XFS (loop6): Quotacheck: Done. [ 333.698295][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.729599][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.753768][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.763893][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.809519][ T6368] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 336.187199][ T51] Bluetooth: hci0: command tx timeout [ 337.081956][ T7537] loop6: detected capacity change from 0 to 17 [ 337.171929][ T7537] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop6 [ 337.958638][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.026139][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.041206][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.050184][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.083589][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.383185][ T5633] Bluetooth: hci0: command tx timeout [ 339.613362][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.625885][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.636218][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.648930][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.658595][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.101928][ T5881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.154761][ T5881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.061804][ T5633] Bluetooth: hci0: command tx timeout [ 342.067302][ T51] Bluetooth: hci6: command tx timeout [ 342.074431][ T5642] Bluetooth: hci3: command tx timeout [ 342.094262][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15 [ 342.456219][ T5881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.468031][ T5881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.549708][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.255'. [ 342.777682][ T5881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.841321][ T5881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.055378][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.074486][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.345504][ T5633] Bluetooth: hci0: command tx timeout [ 345.350981][ T51] Bluetooth: hci6: command tx timeout [ 345.357771][ T5642] Bluetooth: hci3: command tx timeout [ 345.393022][ T7516] bridge_slave_0: entered allmulticast mode [ 345.643180][ T7516] bridge_slave_0: entered promiscuous mode [ 345.842162][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.872780][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.891528][ T7516] bridge_slave_1: entered allmulticast mode [ 345.912424][ T7516] bridge_slave_1: entered promiscuous mode [ 346.919137][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.037885][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 347.076865][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.412760][ T5642] Bluetooth: hci6: command tx timeout [ 348.418416][ T5633] Bluetooth: hci3: command tx timeout [ 348.455870][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.418017][ T5881] bridge_slave_1: left allmulticast mode [ 349.436049][ T5881] bridge_slave_1: left promiscuous mode [ 349.465057][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.540745][ T5881] bridge_slave_0: left allmulticast mode [ 349.557975][ T5881] bridge_slave_0: left promiscuous mode [ 349.572544][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.783877][ T7626] loop8: detected capacity change from 0 to 17 [ 349.857508][ T7626] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop8 [ 350.441965][ T5633] Bluetooth: hci3: command tx timeout [ 350.447445][ T5633] Bluetooth: hci6: command tx timeout [ 350.864688][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.882711][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.916809][ T5881] bond0 (unregistering): Released all slaves [ 351.025197][ T7516] team0: Port device team_slave_0 added [ 351.276334][ T7516] team0: Port device team_slave_1 added [ 351.319435][ T7635] loop6: detected capacity change from 0 to 17 [ 351.557298][ T7635] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop6 [ 351.697917][ T5638] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 352.072032][ T5638] usb 4-1: Using ep0 maxpacket: 32 [ 352.109584][ T5638] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 352.475383][ T5638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.740639][ T5638] usb 4-1: config 0 has no interface number 0 [ 352.785078][ T5638] usb 4-1: config 0 interface 196 has no altsetting 0 [ 352.807273][ T5638] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 352.846887][ T5638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.875686][ T5638] usb 4-1: Product: syz [ 352.880734][ T5638] usb 4-1: Manufacturer: syz [ 352.890846][ T5638] usb 4-1: SerialNumber: syz [ 352.986104][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.019845][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.055698][ T5638] usb 4-1: config 0 descriptor?? [ 353.080340][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.146208][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.173760][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.227437][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.316594][ T7655] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 353.329927][ T7655] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 353.338435][ T7655] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 353.568327][ T5747] usb 4-1: USB disconnect, device number 2 [ 357.546049][ T5881] hsr_slave_0: left promiscuous mode [ 357.569815][ T5881] hsr_slave_1: left promiscuous mode [ 357.580746][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.610987][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.656096][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.670062][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.732540][ T5881] veth1_macvtap: left promiscuous mode [ 357.748192][ T5881] veth0_macvtap: left promiscuous mode [ 357.758335][ T5881] veth1_vlan: left promiscuous mode [ 357.778214][ T5881] veth0_vlan: left promiscuous mode [ 358.873042][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 359.057573][ T7697] loop3: detected capacity change from 0 to 17 [ 359.164423][ T7697] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 359.518356][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 360.847336][ T7711] loop8: detected capacity change from 0 to 512 [ 361.234956][ T7711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.248643][ T7711] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.267989][ T7723] syz.6.263 uses obsolete (PF_INET,SOCK_PACKET) [ 363.537248][ T6982] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.971509][ T7737] loop6: detected capacity change from 0 to 17 [ 364.066437][ T7737] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop6 [ 364.330612][ T7516] hsr_slave_0: entered promiscuous mode [ 364.377716][ T7516] hsr_slave_1: entered promiscuous mode [ 364.416593][ T7516] debugfs: 'hsr0' already exists in 'hsr' [ 364.445644][ T7516] Cannot create hsr debugfs directory [ 364.575568][ T5633] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 364.601140][ T5747] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 364.615701][ T7746] mmap: syz.6.273 (7746) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 364.766056][ T5747] usb 9-1: Using ep0 maxpacket: 32 [ 364.776722][ T5747] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 364.795066][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.866977][ T5747] usb 9-1: config 0 has no interface number 0 [ 364.890626][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.246059][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.325952][ T7546] bridge_slave_0: entered allmulticast mode [ 365.542794][ T5747] usb 9-1: config 0 interface 196 has no altsetting 0 [ 365.552516][ T5747] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 365.563878][ T7546] bridge_slave_0: entered promiscuous mode [ 365.570864][ T5747] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.718375][ T5747] usb 9-1: Product: syz [ 365.722854][ T5747] usb 9-1: Manufacturer: syz [ 365.727481][ T5747] usb 9-1: SerialNumber: syz [ 365.762734][ T5747] usb 9-1: config 0 descriptor?? [ 365.765277][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.779966][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.788549][ T5881] IPVS: stop unused estimator thread 0... [ 365.789056][ T7546] bridge_slave_1: entered allmulticast mode [ 365.979181][ T7759] loop6: detected capacity change from 0 to 2048 [ 366.116983][ T7759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.246139][ T7546] bridge_slave_1: entered promiscuous mode [ 366.726477][ T6368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.735735][ T9] usb 9-1: USB disconnect, device number 2 [ 366.998795][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.031691][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.224765][ T7557] bridge_slave_0: entered allmulticast mode [ 367.238552][ T7557] bridge_slave_0: entered promiscuous mode [ 367.332653][ T7775] 9pnet_fd: Insufficient options for proto=fd [ 368.029699][ T5747] IPVS: starting estimator thread 0... [ 368.142159][ T7776] IPVS: using max 30 ests per chain, 72000 per kthread [ 368.174678][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.197850][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.478798][ T7557] bridge_slave_1: entered allmulticast mode [ 369.288479][ T7557] bridge_slave_1: entered promiscuous mode [ 369.339006][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.376684][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.447885][ T5881] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.112589][ T7796] 9pnet_fd: Insufficient options for proto=fd [ 372.142681][ T7797] loop3: detected capacity change from 0 to 17 [ 372.225956][ T7797] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 372.764715][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.797205][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.829208][ T7546] team0: Port device team_slave_0 added [ 372.867507][ T7546] team0: Port device team_slave_1 added [ 373.038343][ T5881] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.406036][ T5633] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 374.372191][ T7557] team0: Port device team_slave_0 added [ 374.399095][ T7557] team0: Port device team_slave_1 added [ 374.614279][ T5881] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.841322][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.875564][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.024491][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.122334][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.159858][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.292940][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.350123][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.391171][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.481465][ T5633] Bluetooth: hci3: command 0x0405 tx timeout [ 375.529739][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.629492][ T5881] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.679553][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.703046][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.743294][ T7816] loop3: detected capacity change from 0 to 131072 [ 375.760225][ T7816] F2FS-fs (loop3): invalid crc value [ 375.834284][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.886058][ T7816] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 375.904231][ T7816] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 376.134383][ T7838] loop8: detected capacity change from 0 to 17 [ 376.193785][ T7838] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop8 [ 376.660296][ T7840] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 376.679706][ T7841] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 377.891770][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.898139][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.923048][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 378.079165][ T7546] hsr_slave_0: entered promiscuous mode [ 378.087289][ T7546] hsr_slave_1: entered promiscuous mode [ 378.099321][ T7546] debugfs: 'hsr0' already exists in 'hsr' [ 378.105556][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 378.110765][ T7546] Cannot create hsr debugfs directory [ 378.119642][ T29] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 378.148002][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.165561][ T29] usb 7-1: config 0 has no interface number 0 [ 378.178206][ T29] usb 7-1: config 0 interface 196 has no altsetting 0 [ 378.198142][ T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 378.220462][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.242295][ T29] usb 7-1: Product: syz [ 378.254997][ T29] usb 7-1: Manufacturer: syz [ 378.266255][ T29] usb 7-1: SerialNumber: syz [ 378.313390][ T29] usb 7-1: config 0 descriptor?? [ 378.397088][ T7557] hsr_slave_0: entered promiscuous mode [ 378.404140][ T7557] hsr_slave_1: entered promiscuous mode [ 378.410592][ T7557] debugfs: 'hsr0' already exists in 'hsr' [ 378.416714][ T7557] Cannot create hsr debugfs directory [ 378.587862][ T29] usb 7-1: USB disconnect, device number 2 [ 379.325891][ T5881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.513524][ T7868] syzkaller0: entered promiscuous mode [ 381.519274][ T7868] syzkaller0: entered allmulticast mode [ 381.875179][ T7876] loop3: detected capacity change from 0 to 32768 [ 381.893075][ T7876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.289 (7876) [ 381.927550][ T7876] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 381.937727][ T7876] BTRFS info (device loop3): using sha256 checksum algorithm [ 382.008417][ T5881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.093914][ T7876] BTRFS info (device loop3): rebuilding free space tree [ 382.115287][ T7876] BTRFS info (device loop3): setting nodatasum [ 382.121594][ T7876] BTRFS info (device loop3): setting nodatacow [ 382.128206][ T7876] BTRFS info (device loop3): enabling ssd optimizations [ 382.135270][ T7876] BTRFS info (device loop3): enabling free space tree [ 382.142098][ T7876] BTRFS info (device loop3): force clearing of disk cache [ 382.152666][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5308416 mirror 1 wanted 0x77808b7ecca445f549ae3d233ea0eb27adb628f92d0be59092c566b0ee5e6744 found 0x2e468cc30797ba5d24952fada3c5de86d5af839dbdf81cee889c1a1f6752fa23 level 0 [ 382.179226][ T7876] BTRFS: error (device loop3) in btrfs_fill_super:994: errno=-5 IO failure [ 382.189818][ T7876] BTRFS error (device loop3 state E): commit super block returned -30 [ 382.572277][ T5881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.159581][ T7900] 9pnet_fd: Insufficient options for proto=fd [ 383.410574][ T5638] IPVS: starting estimator thread 0... [ 384.108123][ T7902] IPVS: using max 22 ests per chain, 52800 per kthread [ 384.535237][ T7912] loop6: detected capacity change from 0 to 17 [ 384.940791][ T7912] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop6 [ 385.544124][ T5881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.765331][ T7921] loop6: detected capacity change from 0 to 2048 [ 385.891205][ T7921] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.012724][ T7928] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 386.038116][ T7925] IPVS: stopping master sync thread 7928 ... [ 386.736630][ T7934] loop6: detected capacity change from 0 to 512 [ 387.079508][ T5881] bridge_slave_1: left allmulticast mode [ 387.101127][ T5881] bridge_slave_1: left promiscuous mode [ 387.111191][ T5747] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 387.111360][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.160711][ T5881] bridge_slave_0: left allmulticast mode [ 387.501843][ T5881] bridge_slave_0: left promiscuous mode [ 387.515430][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.571176][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 387.579992][ T5747] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 387.588447][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.589281][ T5881] bridge_slave_1: left allmulticast mode [ 387.602718][ T5747] usb 4-1: config 0 has no interface number 0 [ 387.615890][ T5747] usb 4-1: config 0 interface 196 has no altsetting 0 [ 387.641310][ T5747] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 387.648695][ T5881] bridge_slave_1: left promiscuous mode [ 387.650587][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.672216][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.674574][ T5747] usb 4-1: Product: syz [ 387.719686][ T5747] usb 4-1: Manufacturer: syz [ 387.956062][ T5881] bridge_slave_0: left allmulticast mode [ 387.958727][ T5747] usb 4-1: SerialNumber: syz [ 387.967385][ T5881] bridge_slave_0: left promiscuous mode [ 387.996573][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.007129][ T5747] usb 4-1: config 0 descriptor?? [ 388.453490][ T29] usb 4-1: USB disconnect, device number 3 [ 390.430139][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 391.300300][ T7954] 9pnet_fd: Insufficient options for proto=fd [ 392.024362][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.065111][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.093519][ T5881] bond0 (unregistering): Released all slaves [ 392.134074][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.159679][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.167792][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.177278][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.185218][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.427883][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.440131][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.452792][ T5881] bond0 (unregistering): Released all slaves [ 392.600057][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 393.302817][ T7963] kthread_run failed with err -4 [ 393.409210][ T7546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 393.511361][ T5642] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 393.515109][ T7546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.574813][ T7546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.589448][ T7546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.729375][ T5633] Bluetooth: hci5: command tx timeout [ 396.761212][ T5642] Bluetooth: hci5: command tx timeout [ 398.841805][ T5642] Bluetooth: hci5: command tx timeout [ 399.105954][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.123257][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.142453][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.225571][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 399.237170][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 400.926053][ T5633] Bluetooth: hci5: command tx timeout [ 401.192431][ T8010] 9pnet_fd: Insufficient options for proto=fd [ 401.484942][ T5633] Bluetooth: hci7: command tx timeout [ 402.292184][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 402.307034][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 402.317698][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 402.348743][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 402.358699][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 402.367925][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.571391][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 402.600860][ T9] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 402.636927][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.681243][ T9] usb 7-1: config 0 has no interface number 0 [ 402.754569][ T9] usb 7-1: config 0 interface 196 has no altsetting 0 [ 402.973352][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 402.996892][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.043246][ T9] usb 7-1: Product: syz [ 403.091533][ T9] usb 7-1: Manufacturer: syz [ 403.159544][ T9] usb 7-1: SerialNumber: syz [ 403.222814][ T9] usb 7-1: config 0 descriptor?? [ 403.612703][ T5633] Bluetooth: hci7: command tx timeout [ 403.826677][ T5639] usb 7-1: USB disconnect, device number 3 [ 403.845277][ T8023] tipc: Started in network mode [ 403.860091][ T8023] tipc: Node identity ac14140f, cluster identity 4711 [ 403.898219][ T8023] tipc: New replicast peer: 172.30.0.9 [ 403.948125][ T8023] tipc: Enabled bearer , priority 10 [ 404.024783][ T8031] loop3: detected capacity change from 0 to 2048 [ 404.104652][ T8031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.441296][ T5633] Bluetooth: hci6: command tx timeout [ 404.692583][ T8035] loop8: detected capacity change from 0 to 32768 [ 404.701334][ T8035] xfs: Unknown parameter 'appraise' [ 405.647004][ T5633] Bluetooth: hci7: command tx timeout [ 407.502360][ T5633] Bluetooth: hci6: command tx timeout [ 407.723260][ T5633] Bluetooth: hci7: command tx timeout [ 407.809474][ T5881] hsr_slave_0: left promiscuous mode [ 407.830567][ T5881] hsr_slave_1: left promiscuous mode [ 407.847711][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.874860][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.912323][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.931810][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.009666][ T5881] hsr_slave_0: left promiscuous mode [ 408.036191][ T5881] hsr_slave_1: left promiscuous mode [ 408.127640][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.371682][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.146457][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.153900][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.263118][ T8058] 9pnet_fd: Insufficient options for proto=fd [ 409.571254][ T5633] Bluetooth: hci6: command tx timeout [ 409.977992][ T5881] veth1_macvtap: left promiscuous mode [ 409.986181][ T5881] veth0_macvtap: left promiscuous mode [ 409.992013][ T5881] veth1_vlan: left promiscuous mode [ 409.997330][ T5881] veth0_vlan: left promiscuous mode [ 410.063018][ T5881] veth1_macvtap: left promiscuous mode [ 410.070100][ T5881] veth0_macvtap: left promiscuous mode [ 410.090362][ T5881] veth1_vlan: left promiscuous mode [ 410.100668][ T5881] veth0_vlan: left promiscuous mode [ 411.663756][ T5633] Bluetooth: hci6: command tx timeout [ 414.126570][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 414.143851][ T8084] loop8: detected capacity change from 0 to 2048 [ 414.155540][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 414.172558][ T8084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.392752][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 416.428241][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 416.583443][ T5639] tipc: Node number set to 2886997007 [ 417.961144][ T5639] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 418.221293][ T5639] usb 7-1: Using ep0 maxpacket: 32 [ 418.271559][ T5639] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 418.301459][ T5639] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.345347][ T5639] usb 7-1: config 0 has no interface number 0 [ 418.376584][ T5639] usb 7-1: config 0 interface 196 has no altsetting 0 [ 418.415014][ T5639] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 418.430249][ T5639] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.441624][ T5639] usb 7-1: Product: syz [ 418.445821][ T5639] usb 7-1: Manufacturer: syz [ 418.450428][ T5639] usb 7-1: SerialNumber: syz [ 418.460733][ T5639] usb 7-1: config 0 descriptor?? [ 418.629976][ T5881] IPVS: stop unused estimator thread 0... [ 418.971376][ T5639] usb 7-1: USB disconnect, device number 4 [ 421.006239][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 421.310580][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.339288][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.371659][ T7955] bridge_slave_0: entered allmulticast mode [ 421.379867][ T7955] bridge_slave_0: entered promiscuous mode [ 421.400659][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.419782][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.430081][ T7955] bridge_slave_1: entered allmulticast mode [ 421.438561][ T7955] bridge_slave_1: entered promiscuous mode [ 421.605063][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.624205][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.632574][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.639785][ T7995] bridge_slave_0: entered allmulticast mode [ 421.648507][ T7995] bridge_slave_0: entered promiscuous mode [ 421.664234][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.673776][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.680981][ T7995] bridge_slave_1: entered allmulticast mode [ 421.690068][ T7995] bridge_slave_1: entered promiscuous mode [ 421.701788][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.852906][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.866353][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.879970][ T7955] team0: Port device team_slave_0 added [ 421.889576][ T7955] team0: Port device team_slave_1 added [ 422.036859][ T7995] team0: Port device team_slave_0 added [ 422.053585][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.060576][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.087376][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.099273][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.109376][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.121646][ T8016] bridge_slave_0: entered allmulticast mode [ 422.129801][ T8016] bridge_slave_0: entered promiscuous mode [ 422.143602][ T7995] team0: Port device team_slave_1 added [ 422.150414][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.160573][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.187837][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.205461][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.214319][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.225605][ T8016] bridge_slave_1: entered allmulticast mode [ 422.234173][ T8016] bridge_slave_1: entered promiscuous mode [ 422.336606][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.347274][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.375738][ T7995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.419549][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.431693][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.439600][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.480573][ T7995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.529786][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.562845][ T7955] hsr_slave_0: entered promiscuous mode [ 422.569680][ T7955] hsr_slave_1: entered promiscuous mode [ 422.578059][ T7955] debugfs: 'hsr0' already exists in 'hsr' [ 422.586036][ T7955] Cannot create hsr debugfs directory [ 422.701484][ T8016] team0: Port device team_slave_0 added [ 422.765875][ T7995] hsr_slave_0: entered promiscuous mode [ 422.782008][ T7995] hsr_slave_1: entered promiscuous mode [ 422.801902][ T7995] debugfs: 'hsr0' already exists in 'hsr' [ 422.807672][ T7995] Cannot create hsr debugfs directory [ 422.818887][ T8016] team0: Port device team_slave_1 added [ 422.961424][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.969854][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.996514][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.056950][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.065955][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.092593][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.336419][ T8016] hsr_slave_0: entered promiscuous mode [ 423.343431][ T8016] hsr_slave_1: entered promiscuous mode [ 423.349864][ T8016] debugfs: 'hsr0' already exists in 'hsr' [ 423.357075][ T8016] Cannot create hsr debugfs directory [ 423.925793][ T5881] bridge_slave_1: left allmulticast mode [ 423.936089][ T5881] bridge_slave_1: left promiscuous mode [ 423.942832][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.953776][ T5881] bridge_slave_0: left allmulticast mode [ 423.959464][ T5881] bridge_slave_0: left promiscuous mode [ 423.967421][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.980381][ T5881] bridge_slave_1: left allmulticast mode [ 423.987258][ T5881] bridge_slave_1: left promiscuous mode [ 423.993097][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.002324][ T5881] bridge_slave_0: left allmulticast mode [ 424.007956][ T5881] bridge_slave_0: left promiscuous mode [ 424.014891][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.026577][ T5881] bridge_slave_1: left allmulticast mode [ 424.032563][ T5881] bridge_slave_1: left promiscuous mode [ 424.038276][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.050172][ T5881] bridge_slave_0: left allmulticast mode [ 424.056589][ T5881] bridge_slave_0: left promiscuous mode [ 424.062605][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.155586][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.174433][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.184543][ T5881] bond0 (unregistering): Released all slaves [ 424.271394][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.283282][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.297785][ T5881] bond0 (unregistering): Released all slaves [ 424.369650][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.397723][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.407886][ T5881] bond0 (unregistering): Released all slaves [ 424.580521][ T5881] hsr_slave_0: left promiscuous mode [ 424.593247][ T5881] hsr_slave_1: left promiscuous mode [ 424.603369][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.612923][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.629409][ T5881] hsr_slave_0: left promiscuous mode [ 424.636104][ T5881] hsr_slave_1: left promiscuous mode [ 424.642132][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.649799][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.661962][ T5881] hsr_slave_0: left promiscuous mode [ 424.668492][ T5881] hsr_slave_1: left promiscuous mode [ 424.675662][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.683544][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.835241][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 424.867530][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 425.157939][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 425.175387][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 425.452128][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 425.498870][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 425.713499][ T7955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.764640][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.782172][ T7955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.796115][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.887266][ T7955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.900551][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.910624][ T7955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.959684][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.249078][ T7955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.308603][ T7955] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.339832][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.347017][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.388631][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.395817][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.554271][ T7955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.573908][ T8016] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 426.589080][ T8016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.643363][ T8016] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 426.673877][ T8016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.764281][ T8016] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 426.779793][ T8016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.790131][ T8016] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 426.808371][ T8016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.949020][ T7995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.979130][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.998236][ T7995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.014313][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.039615][ T7995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.058163][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.079243][ T7995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.093271][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.365927][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.405821][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.447271][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.476917][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.484119][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.497402][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.525141][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.532321][ T5881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.554206][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.561386][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.607820][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.615045][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.809586][ T7955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.930169][ T7955] veth0_vlan: entered promiscuous mode [ 427.966335][ T7955] veth1_vlan: entered promiscuous mode [ 428.066435][ T7955] veth0_macvtap: entered promiscuous mode [ 428.096338][ T7955] veth1_macvtap: entered promiscuous mode [ 428.160566][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.195454][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.235010][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.256709][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.268913][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.294513][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.465926][ T5871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.489904][ T5871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.576832][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.594674][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.331353][ T8271] loop6: detected capacity change from 0 to 17 [ 430.400719][ T8271] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop6 [ 430.803544][ T31] audit: type=1800 audit(1785235936.672:9): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.235" name="file1" dev="tmpfs" ino=18 res=0 errno=0 [ 431.777372][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.933217][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.010232][ T5633] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 432.426848][ T8293] kernel profiling enabled (shift: 5) [ 432.499842][ T8296] 9pnet_fd: Insufficient options for proto=fd [ 439.193475][ T8016] veth0_vlan: entered promiscuous mode [ 439.275073][ T8342] loop8: detected capacity change from 0 to 131072 [ 439.290775][ T8342] F2FS-fs (loop8): invalid crc value [ 439.345786][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.356661][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.379601][ T8342] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 439.398448][ T8342] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 439.439476][ T8348] loop2: detected capacity change from 0 to 17 [ 439.466940][ T8348] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 439.516586][ T8016] veth1_vlan: entered promiscuous mode [ 439.813311][ T7995] veth0_vlan: entered promiscuous mode [ 439.842180][ T7995] veth1_vlan: entered promiscuous mode [ 439.888525][ T8016] veth0_macvtap: entered promiscuous mode [ 440.809934][ T8367] F2FS-fs (loop8): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 440.822013][ T8368] F2FS-fs (loop8): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 440.951238][ T8016] veth1_macvtap: entered promiscuous mode [ 440.982700][ T7995] veth0_macvtap: entered promiscuous mode [ 441.127336][ T7995] veth1_macvtap: entered promiscuous mode [ 441.315264][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.382374][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.640377][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.755055][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.416486][ T1022] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.440239][ T1022] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.571538][ T1022] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.632389][ T1022] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.795639][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.869485][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.896275][ T8383] syzkaller0: entered promiscuous mode [ 443.903677][ T8396] udc usbip-vudc.0: UDC had already stopped [ 443.952213][ T8383] syzkaller0: entered allmulticast mode [ 443.955548][ T8398] loop6: detected capacity change from 0 to 4096 [ 443.965474][ T8398] EXT4-fs: Ignoring removed orlov option [ 443.983887][ T8398] EXT4-fs (loop6): Test dummy encryption mode enabled [ 444.009952][ T8398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.044832][ T8398] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 444.645907][ T8406] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 445.332626][ T8409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.353825][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.374218][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.436276][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 445.650878][ T6368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.814909][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.872299][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.909244][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.023864][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.037444][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.114872][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.489150][ T8432] 9pnet_fd: Insufficient options for proto=fd [ 448.530759][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.566524][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.736359][ T8438] loop8: detected capacity change from 0 to 17 [ 449.160344][ T31] audit: type=1800 audit(1785235955.022:10): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.245" name="file0" dev="overlay" ino=26 res=0 errno=0 [ 449.367438][ T8438] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop8 [ 450.287158][ T8442] loop6: detected capacity change from 0 to 32768 [ 450.958828][ T8442] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.360 (8442) [ 450.978569][ T8442] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 450.990478][ T8442] BTRFS info (device loop6): using sha256 checksum algorithm [ 451.564448][ T8442] BTRFS info (device loop6): rebuilding free space tree [ 451.630037][ T8442] BTRFS info (device loop6): setting nodatasum [ 451.637165][ T8442] BTRFS info (device loop6): setting nodatacow [ 451.643907][ T8442] BTRFS info (device loop6): enabling ssd optimizations [ 451.650857][ T8442] BTRFS info (device loop6): enabling free space tree [ 451.657681][ T8442] BTRFS info (device loop6): force clearing of disk cache [ 451.667861][ T49] BTRFS warning (device loop6): checksum verify failed on logical 5308416 mirror 1 wanted 0x77808b7ecca445f549ae3d233ea0eb27adb628f92d0be59092c566b0ee5e6744 found 0x2e468cc30797ba5d24952fada3c5de86d5af839dbdf81cee889c1a1f6752fa23 level 0 [ 452.057460][ T8477] 9pnet_fd: Insufficient options for proto=fd [ 452.378471][ T8480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.018932][ T8442] BTRFS: error (device loop6) in btrfs_fill_super:994: errno=-5 IO failure [ 453.035783][ T8442] BTRFS error (device loop6 state E): commit super block returned -30 [ 453.195489][ T8484] loop8: detected capacity change from 0 to 4096 [ 453.202855][ T8484] EXT4-fs: Ignoring removed orlov option [ 453.264600][ T8484] EXT4-fs (loop8): Test dummy encryption mode enabled [ 453.346140][ T8484] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.482828][ T8481] loop2: detected capacity change from 0 to 17 [ 454.620794][ T8481] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 454.761184][ T5642] Bluetooth: hci7: command 0x2016 tx timeout [ 455.686324][ T8500] udc usbip-vudc.0: UDC had already stopped [ 455.769636][ T6982] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.960647][ T31] audit: type=1800 audit(1785235961.682:11): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.379" name="file0" dev="overlay" ino=271 res=0 errno=0 [ 456.951349][ T5642] Bluetooth: hci7: command 0x2016 tx timeout [ 459.748059][ T8521] 9pnet_fd: Insufficient options for proto=fd [ 462.594609][ T8535] loop6: detected capacity change from 0 to 17 [ 462.622627][ T8535] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop6 [ 465.876072][ T8552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.988809][ T8554] 9pnet_fd: Insufficient options for proto=fd [ 467.228159][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 468.179129][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.382'. [ 468.407536][ T8563] loop5: detected capacity change from 0 to 17 [ 468.733878][ T8571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 468.743082][ T8571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 469.384198][ T8570] loop2: detected capacity change from 0 to 4096 [ 469.760770][ T8570] ntfs3(loop2): ino=0, mi_enum_attr [ 469.799653][ T8563] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 469.955320][ T8570] ntfs3(loop2): failed to replay log file. Can't mount rw! [ 473.038194][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 473.047278][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 473.452002][ T5937] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.497802][ T5937] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.554106][ T8575] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.575729][ T8575] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.992386][ T8609] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 482.778072][ T8622] ceph: No mds server is up or the cluster is laggy [ 482.903082][ T8619] loop2: detected capacity change from 0 to 512 [ 483.546373][ T5639] libceph: connect (1)[c::]:6789 error -101 [ 483.779963][ T5639] libceph: mon0 (1)[c::]:6789 connect error [ 484.177222][ T8619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.221241][ T8619] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.178329][ T8640] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 485.721349][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.743339][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.753411][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.766414][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.786195][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.841172][ T803] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 486.003700][ T803] usb 8-1: Using ep0 maxpacket: 16 [ 486.025200][ T803] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 486.035455][ T8640] Cannot find set identified by id 0 to match [ 486.057623][ T803] usb 8-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 486.085828][ T7955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.102814][ T803] usb 8-1: config 0 has no interface number 0 [ 486.137110][ T803] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.229781][ T803] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 486.264108][ T803] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 486.325275][ T803] usb 8-1: Product: syz [ 486.347212][ T803] usb 8-1: SerialNumber: syz [ 486.378108][ T803] usb 8-1: config 0 descriptor?? [ 486.698168][ T8660] 9pnet_fd: Insufficient options for proto=fd [ 486.729590][ T5747] IPVS: starting estimator thread 0... [ 486.749385][ T803] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 487.531587][ T8661] IPVS: using max 22 ests per chain, 52800 per kthread [ 489.425906][ T5633] Bluetooth: hci0: command tx timeout [ 489.783896][ T803] usb 8-1: USB disconnect, device number 2 [ 491.491157][ T5633] Bluetooth: hci0: command tx timeout [ 491.639642][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 491.648697][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.403'. [ 491.792492][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.234474][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.549493][ T8689] 9pnet_fd: Insufficient options for proto=fd [ 493.561169][ T5633] Bluetooth: hci0: command tx timeout [ 493.607556][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.863382][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.983308][ T51] Bluetooth: hci0: command tx timeout [ 496.177528][ T8703] loop7: detected capacity change from 0 to 256 [ 496.415251][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.492664][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 496.560669][ T8702] loop2: detected capacity change from 0 to 256 [ 496.812595][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 496.857744][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 496.870075][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.065115][ T8711] loop5: detected capacity change from 0 to 16 [ 499.571427][ T5642] Bluetooth: hci2: command tx timeout [ 499.706906][ T8711] erofs (device loop5): mounted with root inode @ nid 36. [ 499.770548][ T8702] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6cf3ec, utbl_chksum : 0xe619d30d) [ 500.160251][ T58] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.630909][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.410'. [ 500.802527][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.813966][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.847966][ T5871] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.344088][ T5871] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.641389][ T5642] Bluetooth: hci2: command tx timeout [ 502.051638][ T8729] loop5: detected capacity change from 0 to 4096 [ 502.058944][ T8729] EXT4-fs: Ignoring removed orlov option [ 502.066815][ T8729] EXT4-fs (loop5): Test dummy encryption mode enabled [ 502.151949][ T8729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.750400][ T58] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.130780][ T58] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.721253][ T5642] Bluetooth: hci2: command tx timeout [ 504.239301][ T58] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.336837][ T8751] loop7: detected capacity change from 0 to 256 [ 504.375546][ T8751] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 504.660763][ T8749] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 504.784618][ T7995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.245761][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 506.256848][ T5642] Bluetooth: hci2: command tx timeout [ 506.284720][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 506.298403][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 506.917383][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 507.028163][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 510.937480][ T58] bridge_slave_1: left allmulticast mode [ 510.972937][ T58] bridge_slave_1: left promiscuous mode [ 511.015845][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.115664][ T58] bridge_slave_0: left allmulticast mode [ 511.158891][ T58] bridge_slave_0: left promiscuous mode [ 511.233957][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.258368][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.269445][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.277665][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.292335][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.306809][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.457074][ T5633] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 513.514461][ T5633] Bluetooth: hci3: command tx timeout [ 514.011428][ T8797] loop2: detected capacity change from 0 to 2048 [ 514.158651][ T8797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.768755][ T7955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.241377][ T8803] loop2: detected capacity change from 0 to 17 [ 515.339806][ T8803] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 515.571152][ T5633] Bluetooth: hci3: command tx timeout [ 515.654683][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.704379][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.744046][ T58] bond0 (unregistering): Released all slaves [ 515.771865][ T8805] tmpfs: Unknown parameter 'fscontext' [ 516.404208][ T5280] 8021q: adding VLAN 0 to HW filter on device eth17 [ 516.596824][ T8810] loop7: detected capacity change from 0 to 2048 [ 516.798193][ T58] tipc: Disabling bearer [ 516.805342][ T8810] EXT4-fs (loop7): Cannot use DAX on a filesystem that may contain inline data [ 516.819766][ T58] tipc: Left network mode [ 517.094788][ T8810] loop7: detected capacity change from 0 to 256 [ 517.641302][ T5633] Bluetooth: hci3: command tx timeout [ 519.721171][ T5633] Bluetooth: hci3: command tx timeout [ 519.812254][ T8645] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.470699][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.492322][ T8645] bridge_slave_0: entered allmulticast mode [ 521.507449][ T8645] bridge_slave_0: entered promiscuous mode [ 522.342510][ T8848] loop7: detected capacity change from 0 to 128 [ 522.354976][ T8645] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.377107][ T8848] FAT-fs (loop7): data area starts beyond volume (33 > 0) [ 522.391396][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.429325][ T8848] FAT-fs (loop7): Can't find a valid FAT filesystem [ 522.513748][ T8645] bridge_slave_1: entered allmulticast mode [ 522.535359][ T5638] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 522.712741][ T8645] bridge_slave_1: entered promiscuous mode [ 522.821148][ T5638] usb 6-1: Using ep0 maxpacket: 32 [ 523.870447][ T8840] Bluetooth: hci5: command 0x0406 tx timeout [ 523.884777][ T5628] Bluetooth: hci7: command 0x2016 tx timeout [ 524.096471][ T5638] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 524.153126][ T5638] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.208759][ T5638] usb 6-1: config 0 has no interface number 0 [ 524.234933][ T5638] usb 6-1: config 0 interface 196 has no altsetting 0 [ 524.283092][ T5638] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 524.305876][ T58] hsr_slave_0: left promiscuous mode [ 524.317309][ T5638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.336309][ T58] hsr_slave_1: left promiscuous mode [ 524.345864][ T5638] usb 6-1: Product: syz [ 524.355650][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.364287][ T5638] usb 6-1: Manufacturer: syz [ 524.368345][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.381137][ T5638] usb 6-1: SerialNumber: syz [ 524.381582][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.390527][ T5638] usb 6-1: config 0 descriptor?? [ 524.409420][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.438335][ T58] veth1_macvtap: left promiscuous mode [ 524.448886][ T58] veth0_macvtap: left promiscuous mode [ 524.458626][ T58] veth1_vlan: left promiscuous mode [ 524.465028][ T58] veth0_vlan: left promiscuous mode [ 524.758855][ T5638] usb 6-1: USB disconnect, device number 2 [ 525.302950][ T8869] 9pnet_fd: Insufficient options for proto=fd [ 526.339981][ T8873] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 526.933956][ T30] IPVS: starting estimator thread 0... [ 527.331918][ T8877] IPVS: using max 21 ests per chain, 50400 per kthread [ 527.368727][ T8880] loop7: detected capacity change from 0 to 17 [ 527.443150][ T8880] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop7 [ 527.760199][ T58] team0 (unregistering): Port device team_slave_1 removed [ 527.803847][ T58] team0 (unregistering): Port device team_slave_0 removed [ 528.604038][ T5633] Bluetooth: hci6: command 0x0406 tx timeout [ 529.305866][ T8645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.591764][ T5280] 8021q: adding VLAN 0 to HW filter on device eth18 [ 529.762733][ T8645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.335078][ T8903] 9pnet_fd: Insufficient options for proto=fd [ 531.058939][ T5638] IPVS: starting estimator thread 0... [ 531.191296][ T8904] IPVS: using max 22 ests per chain, 52800 per kthread [ 532.123540][ T8645] team0: Port device team_slave_0 added [ 533.522132][ T8920] netlink: 23 bytes leftover after parsing attributes in process `syz.2.439'. [ 533.653124][ T8645] team0: Port device team_slave_1 added [ 534.358342][ T58] IPVS: stop unused estimator thread 0... [ 535.020755][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.046729][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.129186][ T8645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.224519][ T803] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 535.281845][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.306055][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.383875][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 535.411169][ T803] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 535.431338][ T8645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.443668][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.505053][ T803] usb 6-1: config 0 has no interface number 0 [ 535.533840][ T803] usb 6-1: config 0 interface 196 has no altsetting 0 [ 535.591554][ T8934] 9pnet_fd: Insufficient options for proto=fd [ 535.740657][ T803] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 535.864115][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.003451][ T803] usb 6-1: Product: syz [ 536.061850][ T803] usb 6-1: Manufacturer: syz [ 536.082851][ T803] usb 6-1: SerialNumber: syz [ 536.097522][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.116214][ T803] usb 6-1: config 0 descriptor?? [ 536.126897][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.153079][ T8696] bridge_slave_0: entered allmulticast mode [ 536.186076][ T8696] bridge_slave_0: entered promiscuous mode [ 536.682572][ T6979] usb 6-1: USB disconnect, device number 3 [ 536.953549][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.031934][ T8944] 9pnet_fd: Insufficient options for proto=fd [ 537.675918][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.701936][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.711459][ T8696] bridge_slave_1: entered allmulticast mode [ 537.737322][ T8696] bridge_slave_1: entered promiscuous mode [ 538.195923][ T8950] loop2: detected capacity change from 0 to 17 [ 538.239432][ T8950] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 538.343107][ T8696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.457864][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.573271][ T8645] hsr_slave_0: entered promiscuous mode [ 538.595559][ T8645] hsr_slave_1: entered promiscuous mode [ 538.960461][ T8696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.391331][ T8960] ceph: No mds server is up or the cluster is laggy [ 539.399079][ T5638] libceph: connect (1)[c::]:6789 error -101 [ 539.472690][ T5638] libceph: mon0 (1)[c::]:6789 connect error [ 539.895510][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 539.906840][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 539.916536][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 539.929785][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 539.939725][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.180433][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.278440][ T8977] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 540.287060][ T8977] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 540.295673][ T8977] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 541.085389][ T8696] team0: Port device team_slave_0 added [ 541.097394][ T8696] team0: Port device team_slave_1 added [ 541.387264][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.419828][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.483004][ T8696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.133443][ T5633] Bluetooth: hci1: command tx timeout [ 542.291602][ T8991] comedi comedi3: pcl711: I/O port conflict (0x100,16) [ 542.318324][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.359905][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.470523][ T8696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.807711][ T9008] 9pnet_fd: Insufficient options for proto=fd [ 545.131008][ T5633] Bluetooth: hci1: command tx timeout [ 545.918178][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.450989][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.458708][ T8783] bridge_slave_0: entered allmulticast mode [ 546.467409][ T8783] bridge_slave_0: entered promiscuous mode [ 546.555556][ T8696] hsr_slave_0: entered promiscuous mode [ 546.590305][ T8696] hsr_slave_1: entered promiscuous mode [ 546.610673][ T8696] debugfs: 'hsr0' already exists in 'hsr' [ 546.638666][ T8696] Cannot create hsr debugfs directory [ 546.659031][ T49] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.689387][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.064470][ T9040] 9pnet_fd: Insufficient options for proto=fd [ 547.329050][ T9038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 547.338227][ T9038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 547.671252][ T5633] Bluetooth: hci1: command tx timeout [ 547.694578][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.053001][ T8783] bridge_slave_1: entered allmulticast mode [ 548.344108][ T9043] loop5: detected capacity change from 0 to 4096 [ 548.468327][ T9043] ntfs3(loop5): ino=0, mi_enum_attr [ 548.485682][ T9043] ntfs3(loop5): failed to replay log file. Can't mount rw! [ 548.576101][ T8783] bridge_slave_1: entered promiscuous mode [ 549.107762][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.150161][ T9049] loop7: detected capacity change from 0 to 17 [ 549.210980][ T9049] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop7 [ 549.721779][ T5633] Bluetooth: hci1: command tx timeout [ 549.884836][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.051277][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 550.063366][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 550.078127][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 550.090844][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 550.099096][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.500096][ T8783] team0: Port device team_slave_0 added [ 550.636375][ T8783] team0: Port device team_slave_1 added [ 550.957389][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.986251][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.082187][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.036870][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.142597][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.237979][ T5642] Bluetooth: hci0: command tx timeout [ 552.533658][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.550829][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.838686][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.559615][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.581156][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.674472][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.462'. [ 553.684798][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.7.462'. [ 553.831749][ T8783] hsr_slave_0: entered promiscuous mode [ 553.875643][ T8783] hsr_slave_1: entered promiscuous mode [ 553.944015][ T8783] debugfs: 'hsr0' already exists in 'hsr' [ 554.042072][ T9097] loop2: detected capacity change from 0 to 17 [ 554.048546][ T8783] Cannot create hsr debugfs directory [ 554.111096][ T9097] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 554.119150][ T5881] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.292332][ T5642] Bluetooth: hci0: command tx timeout [ 554.459653][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.489950][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.640569][ T5881] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.648360][ T9103] comedi comedi3: pcl711: I/O port conflict (0x100,16) [ 554.657607][ T5881] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.749047][ T5280] 8021q: adding VLAN 0 to HW filter on device eth19 [ 556.361368][ T5642] Bluetooth: hci0: command tx timeout [ 558.496580][ T9151] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 558.506622][ T9151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 558.516358][ T5642] Bluetooth: hci0: command tx timeout [ 559.066428][ T9150] loop7: detected capacity change from 0 to 4096 [ 559.193491][ T9150] ntfs3(loop7): ino=0, mi_enum_attr [ 559.209684][ T9150] ntfs3(loop7): failed to replay log file. Can't mount rw! [ 561.089403][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.802132][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.809451][ T8969] bridge_slave_0: entered allmulticast mode [ 561.819780][ T8969] bridge_slave_0: entered promiscuous mode [ 562.308524][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.315037][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.248194][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.255579][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.264416][ T8969] bridge_slave_1: entered allmulticast mode [ 563.693622][ T8969] bridge_slave_1: entered promiscuous mode [ 563.798230][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 563.807276][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.474'. [ 563.973273][ T8969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.014414][ T8969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.267590][ T9191] loop5: detected capacity change from 0 to 17 [ 564.314772][ T9191] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 564.423668][ T9177] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 565.231520][ T8969] team0: Port device team_slave_0 added [ 565.996297][ T8969] team0: Port device team_slave_1 added [ 566.340245][ T58] bridge_slave_1: left allmulticast mode [ 566.346201][ T58] bridge_slave_1: left promiscuous mode [ 566.377201][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.397109][ T58] bridge_slave_0: left allmulticast mode [ 566.418202][ T58] bridge_slave_0: left promiscuous mode [ 566.431309][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.490027][ T58] bridge_slave_1: left allmulticast mode [ 566.514242][ T58] bridge_slave_1: left promiscuous mode [ 566.531482][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.558704][ T58] bridge_slave_0: left allmulticast mode [ 566.567086][ T58] bridge_slave_0: left promiscuous mode [ 566.573977][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.707352][ T9213] comedi comedi3: aio_aio12_8: I/O port conflict (0x100,32) [ 567.715609][ T9224] overlayfs: overlapping lowerdir path [ 568.015451][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.048059][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.075658][ T58] bond0 (unregistering): Released all slaves [ 568.245823][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 568.258909][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 568.266901][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 568.288819][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 568.297272][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 568.473352][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.490684][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.507698][ T58] bond0 (unregistering): Released all slaves [ 568.523854][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.530804][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.559200][ T8969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.731867][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.751413][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.831623][ T8969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.225252][ T8969] hsr_slave_0: entered promiscuous mode [ 569.236781][ T8969] hsr_slave_1: entered promiscuous mode [ 569.244487][ T8969] debugfs: 'hsr0' already exists in 'hsr' [ 569.250245][ T8969] Cannot create hsr debugfs directory [ 569.471686][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.486889][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.503599][ T9056] bridge_slave_0: entered allmulticast mode [ 569.523435][ T9056] bridge_slave_0: entered promiscuous mode [ 569.537504][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.561503][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.575712][ T9056] bridge_slave_1: entered allmulticast mode [ 569.593358][ T9056] bridge_slave_1: entered promiscuous mode [ 569.798253][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.877935][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.034009][ T9056] team0: Port device team_slave_0 added [ 570.046125][ T58] hsr_slave_0: left promiscuous mode [ 570.054309][ T58] hsr_slave_1: left promiscuous mode [ 570.060395][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.067916][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.080758][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.092397][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.105766][ T58] hsr_slave_0: left promiscuous mode [ 570.112120][ T58] hsr_slave_1: left promiscuous mode [ 570.118222][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.126326][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.136075][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.146398][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.177661][ T58] veth1_macvtap: left promiscuous mode [ 570.183412][ T58] veth0_macvtap: left promiscuous mode [ 570.189009][ T58] veth1_vlan: left promiscuous mode [ 570.194906][ T58] veth0_vlan: left promiscuous mode [ 570.203309][ T58] veth1_macvtap: left promiscuous mode [ 570.208825][ T58] veth0_macvtap: left promiscuous mode [ 570.215478][ T58] veth1_vlan: left promiscuous mode [ 570.220784][ T58] veth0_vlan: left promiscuous mode [ 570.363885][ T5633] Bluetooth: hci2: command tx timeout [ 570.652784][ T58] team0 (unregistering): Port device team_slave_1 removed [ 570.677529][ T58] team0 (unregistering): Port device team_slave_0 removed [ 571.110654][ T58] team0 (unregistering): Port device team_slave_1 removed [ 571.137752][ T58] team0 (unregistering): Port device team_slave_0 removed [ 571.295169][ T9056] team0: Port device team_slave_1 added [ 571.305237][ T5280] 8021q: adding VLAN 0 to HW filter on device eth21 [ 571.509846][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.520801][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.547436][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.588004][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.610371][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.642264][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.900465][ T9056] hsr_slave_0: entered promiscuous mode [ 571.907505][ T9056] hsr_slave_1: entered promiscuous mode [ 571.914944][ T9056] debugfs: 'hsr0' already exists in 'hsr' [ 571.922391][ T9056] Cannot create hsr debugfs directory [ 572.266232][ T5280] 8021q: adding VLAN 0 to HW filter on device eth22 [ 572.322541][ T58] IPVS: stop unused estimator thread 0... [ 572.342209][ T58] IPVS: stop unused estimator thread 0... [ 572.447796][ T5633] Bluetooth: hci2: command tx timeout [ 572.674558][ T58] bridge_slave_1: left allmulticast mode [ 572.680644][ T58] bridge_slave_1: left promiscuous mode [ 572.689425][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.700974][ T58] bridge_slave_0: left allmulticast mode [ 572.706719][ T58] bridge_slave_0: left promiscuous mode [ 572.712552][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.729955][ T58] bridge_slave_1: left allmulticast mode [ 572.751800][ T58] bridge_slave_1: left promiscuous mode [ 572.764369][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.783571][ T58] bridge_slave_0: left allmulticast mode [ 572.801291][ T58] bridge_slave_0: left promiscuous mode [ 572.807236][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.834176][ T58] bridge_slave_1: left allmulticast mode [ 572.851122][ T58] bridge_slave_1: left promiscuous mode [ 572.861789][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.883821][ T58] bridge_slave_0: left allmulticast mode [ 572.901099][ T58] bridge_slave_0: left promiscuous mode [ 572.906896][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.098375][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.110110][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.128353][ T58] bond0 (unregistering): Released all slaves [ 573.222926][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.240007][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.256276][ T58] bond0 (unregistering): Released all slaves [ 573.358834][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.378553][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.390208][ T58] bond0 (unregistering): Released all slaves [ 573.536039][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.557521][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.568077][ T9235] bridge_slave_0: entered allmulticast mode [ 573.593201][ T9235] bridge_slave_0: entered promiscuous mode [ 573.650362][ T58] hsr_slave_0: left promiscuous mode [ 573.658127][ T58] hsr_slave_1: left promiscuous mode [ 573.665163][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.673788][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.683374][ T58] hsr_slave_0: left promiscuous mode [ 573.689516][ T58] hsr_slave_1: left promiscuous mode [ 573.695653][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.706224][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.714538][ T58] hsr_slave_0: left promiscuous mode [ 573.720701][ T58] hsr_slave_1: left promiscuous mode [ 573.729078][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.737031][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.945003][ T58] team0 (unregistering): Port device team_slave_1 removed [ 573.980876][ T58] team0 (unregistering): Port device team_slave_0 removed [ 574.245989][ T58] team0 (unregistering): Port device team_slave_1 removed [ 574.286088][ T58] team0 (unregistering): Port device team_slave_0 removed [ 574.521330][ T5633] Bluetooth: hci2: command tx timeout [ 574.547249][ T58] team0 (unregistering): Port device team_slave_1 removed [ 574.570268][ T58] team0 (unregistering): Port device team_slave_0 removed [ 574.792871][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.800299][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.810950][ T9235] bridge_slave_1: entered allmulticast mode [ 574.819748][ T9235] bridge_slave_1: entered promiscuous mode [ 574.899433][ T8969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 574.910506][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.919000][ T8969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 574.930007][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.942870][ T9235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.027169][ T8969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.040041][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.048658][ T8969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.069616][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.086885][ T9235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.253128][ T9235] team0: Port device team_slave_0 added [ 575.360450][ T9235] team0: Port device team_slave_1 added [ 575.447527][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.454676][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.480875][ T9235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.495114][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.505250][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.532075][ T9235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.632372][ T9235] hsr_slave_0: entered promiscuous mode [ 575.638827][ T9235] hsr_slave_1: entered promiscuous mode [ 575.957670][ T9056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 575.972590][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.980655][ T9056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 575.994047][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.017353][ T9056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 576.038274][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 576.061189][ T9056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 576.073564][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 576.140286][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.229384][ T8969] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.263288][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.270472][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.295483][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.302677][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.403391][ T9235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 576.417316][ T9235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 576.436079][ T9235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 576.454992][ T9235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.473030][ T9235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 576.485493][ T9235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 576.501396][ T9235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 576.519203][ T9235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 576.602356][ T5633] Bluetooth: hci2: command tx timeout [ 576.675247][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.736748][ T9056] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.766457][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.773700][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.796162][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.803339][ T5871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.948688][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.050977][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.084550][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.091748][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.132335][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.139513][ T5871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.828730][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.980404][ T8969] veth0_vlan: entered promiscuous mode [ 578.009199][ T8969] veth1_vlan: entered promiscuous mode [ 578.072800][ T8969] veth0_macvtap: entered promiscuous mode [ 578.088464][ T8969] veth1_macvtap: entered promiscuous mode [ 578.126761][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.174743][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.198732][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.229276][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.245786][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.264939][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.284093][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.520529][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.541108][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.578415][ T9056] veth0_vlan: entered promiscuous mode [ 578.626097][ T5871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.634085][ T9056] veth1_vlan: entered promiscuous mode [ 578.648338][ T5871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.738912][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.787820][ T9056] veth0_macvtap: entered promiscuous mode [ 578.829153][ T9056] veth1_macvtap: entered promiscuous mode [ 579.194657][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.685947][ T9472] binder: 9463:9472 ioctl c00c6211 0 returned -14 [ 580.280944][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.863534][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.889633][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.913116][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.962329][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.123078][ T6159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.158687][ T6159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.232637][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.317951][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.879998][ T9504] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 584.889170][ T9504] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 585.402892][ T9507] loop1: detected capacity change from 0 to 4096 [ 585.480187][ T9507] ntfs3(loop1): ino=0, mi_enum_attr [ 585.560654][ T9507] ntfs3(loop1): failed to replay log file. Can't mount rw! [ 587.405763][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 587.414665][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 587.579551][ T5937] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.930720][ T5937] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.959732][ T9519] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 588.071176][ T5936] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.104512][ T5936] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.241426][ T9235] veth0_vlan: entered promiscuous mode [ 588.582175][ T9528] loop0: detected capacity change from 0 to 17 [ 588.588000][ T9235] veth1_vlan: entered promiscuous mode [ 588.594616][ T9528] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 588.798492][ T9517] Cannot find set identified by id 0 to match [ 588.978140][ T9235] veth0_macvtap: entered promiscuous mode [ 589.038565][ T9235] veth1_macvtap: entered promiscuous mode [ 589.051151][ T5638] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 589.149249][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.208047][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.232743][ T5638] usb 3-1: Using ep0 maxpacket: 16 [ 589.498158][ T5638] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 589.513947][ T363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.547580][ T5638] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 589.590499][ T9536] 9pnet_fd: Insufficient options for proto=fd [ 589.661094][ T29] IPVS: starting estimator thread 0... [ 589.719361][ T5638] usb 3-1: config 0 has no interface number 0 [ 590.314414][ T5937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.320882][ T5638] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.349085][ T5937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.366085][ T363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.376715][ T9537] IPVS: using max 30 ests per chain, 72000 per kthread [ 590.670020][ T9539] pim6reg: entered allmulticast mode [ 590.759849][ T9538] pim6reg: left allmulticast mode [ 590.958150][ T5638] usb 3-1: string descriptor 0 read error: -71 [ 590.966307][ T5638] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 590.975521][ T5638] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 590.993099][ T5638] usb 3-1: config 0 descriptor?? [ 591.001272][ T5638] usb 3-1: can't set config #0, error -71 [ 591.010158][ T5638] usb 3-1: USB disconnect, device number 2 [ 592.695946][ T9547] loop2: detected capacity change from 0 to 32768 [ 592.742976][ T9547] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 592.751207][ T9547] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 593.144172][ T9547] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 593.175319][ T5761] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 593.263067][ T5761] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 593.526979][ T5280] 8021q: adding VLAN 0 to HW filter on device eth20 [ 593.593341][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.615133][ T5761] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 352ms [ 593.656078][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.668246][ T5761] gfs2: fsid=syz:syz.0: jid=0: Done [ 593.697913][ T9547] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 593.836670][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.877644][ T9547] gfs2: fsid=syz:syz.0: found 1 quota changes [ 593.879693][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.922909][ T31] audit: type=1800 audit(1785236099.782:12): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.497" name="file0" dev="loop2" ino=2341 res=0 errno=0 [ 594.162141][ T31] audit: type=1800 audit(1785236100.032:13): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.497" name="file1" dev="loop2" ino=2373 res=0 errno=0 [ 594.188879][ T9559] binder: 9558:9559 ioctl c00c6211 0 returned -14 [ 594.369372][ T9563] comedi comedi3: pcl711: I/O port conflict (0x100,16) [ 596.830197][ T9581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.692895][ T9584] loop5: detected capacity change from 0 to 128 [ 597.779400][ T9584] FAT-fs (loop5): data area starts beyond volume (33 > 0) [ 597.840559][ T9584] FAT-fs (loop5): Can't find a valid FAT filesystem [ 598.178191][ T9589] 9pnet_fd: Insufficient options for proto=fd [ 598.314394][ T9597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.365832][ T10] IPVS: starting estimator thread 0... [ 599.120329][ T9598] IPVS: using max 22 ests per chain, 52800 per kthread [ 599.250847][ T7955] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 599.576905][ T9605] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 599.585984][ T9605] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 600.104844][ T9608] loop0: detected capacity change from 0 to 4096 [ 600.204783][ T9608] ntfs3(loop0): ino=0, mi_enum_attr [ 600.226405][ T9608] ntfs3(loop0): failed to replay log file. Can't mount rw! [ 600.251129][ T7955] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 600.260374][ T7955] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7955 [syz-executor] gfs2_quota_sync+0x322/0x570 [ 600.270670][ T7955] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 600.278995][ T7955] CPU: 0 UID: 0 PID: 7955 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 600.279037][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 600.279058][ T7955] Call Trace: [ 600.279070][ T7955] [ 600.279082][ T7955] dump_stack_lvl+0x100/0x190 [ 600.279126][ T7955] gfs2_withdraw.cold+0xa/0xed [ 600.279168][ T7955] inode_go_instantiate+0xd56/0x1560 [ 600.279212][ T7955] ? __pfx_inode_go_instantiate+0x10/0x10 [ 600.279252][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.279305][ T7955] gfs2_instantiate+0x16c/0x250 [ 600.279355][ T7955] gfs2_glock_wait+0x214/0x330 [ 600.279405][ T7955] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 600.279466][ T7955] gfs2_glock_nq+0xa03/0x14f0 [ 600.279526][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.279581][ T7955] do_sync+0x705/0xd60 [ 600.279628][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.279686][ T7955] ? __pfx_do_sync+0x10/0x10 [ 600.279731][ T7955] ? __pfx_bh_get+0x10/0x10 [ 600.279790][ T7955] ? gfs2_quota_sync+0x322/0x570 [ 600.279844][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.279886][ T7955] ? preempt_schedule_thunk+0x16/0x40 [ 600.279955][ T7955] gfs2_quota_sync+0x322/0x570 [ 600.280021][ T7955] gfs2_sync_fs+0x44/0xb0 [ 600.280062][ T7955] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 600.280102][ T7955] sync_filesystem+0x111/0x290 [ 600.280141][ T7955] generic_shutdown_super+0x86/0x360 [ 600.280189][ T7955] kill_block_super+0x3b/0xa0 [ 600.280230][ T7955] gfs2_kill_sb+0x4a9/0x590 [ 600.280277][ T7955] deactivate_locked_super+0xc1/0x1b0 [ 600.280324][ T7955] deactivate_super+0xe7/0x110 [ 600.280371][ T7955] cleanup_mnt+0x21f/0x450 [ 600.280427][ T7955] task_work_run+0x150/0x240 [ 600.280465][ T7955] ? __pfx_task_work_run+0x10/0x10 [ 600.280507][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.280565][ T7955] exit_to_user_mode_loop+0x1d8/0x6f0 [ 600.280611][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.280655][ T7955] ? rcu_is_watching+0x12/0xc0 [ 600.280714][ T7955] do_syscall_64+0x666/0x870 [ 600.280768][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.280806][ T7955] RIP: 0033:0x7f59be59f0d7 [ 600.280836][ T7955] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 600.280871][ T7955] RSP: 002b:00007ffdbbac8cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 600.280906][ T7955] RAX: 0000000000000000 RBX: 00007f59be63330a RCX: 00007f59be59f0d7 [ 600.280930][ T7955] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbbac8d90 [ 600.280953][ T7955] RBP: 00007ffdbbac8d90 R08: 00007ffdbbac9d90 R09: 00000000ffffffff [ 600.280978][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbbac9e20 [ 600.281002][ T7955] R13: 00007f59be63330a R14: 0000000000091126 R15: 00007ffdbbac9e60 [ 600.281052][ T7955] [ 600.770689][ T7955] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 601.035092][ T9619] loop1: detected capacity change from 0 to 17 [ 601.290875][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.504'. [ 601.299903][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.7.504'. [ 603.018349][ T9619] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 603.081153][ T5633] Bluetooth: hci0: command 0x0401 tx timeout [ 603.088418][ T9616] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 604.116674][ T9637] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 604.133973][ T9637] VFS: Can't find a romfs filesystem on dev nullb0. [ 604.133973][ T9637] [ 605.964021][ T7955] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 606.004350][ T7955] CPU: 1 UID: 0 PID: 7955 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 606.004397][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 606.004420][ T7955] Call Trace: [ 606.004431][ T7955] [ 606.004444][ T7955] dump_stack_lvl+0x100/0x190 [ 606.004492][ T7955] gfs2_assert_warn_i.cold+0x3a/0x118 [ 606.004541][ T7955] ? __pfx_gfs2_assert_warn_i+0x10/0x10 [ 606.004573][ T7955] ? mark_held_locks+0x40/0x70 [ 606.004611][ T7955] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 606.004649][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.004695][ T7955] gfs2_make_fs_ro+0x25e/0x370 [ 606.004737][ T7955] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 606.004782][ T7955] ? __pfx_autoremove_wake_function+0x10/0x10 [ 606.004841][ T7955] ? __pfx___might_resched+0x10/0x10 [ 606.004877][ T7955] ? gfs2_put_super+0x149/0x670 [ 606.004916][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.004966][ T7955] gfs2_put_super+0x1a4/0x670 [ 606.005012][ T7955] ? __pfx_gfs2_put_super+0x10/0x10 [ 606.005062][ T7955] generic_shutdown_super+0x167/0x360 [ 606.005105][ T7955] kill_block_super+0x3b/0xa0 [ 606.005142][ T7955] gfs2_kill_sb+0x4a9/0x590 [ 606.005184][ T7955] deactivate_locked_super+0xc1/0x1b0 [ 606.005226][ T7955] deactivate_super+0xe7/0x110 [ 606.005268][ T7955] cleanup_mnt+0x21f/0x450 [ 606.005318][ T7955] task_work_run+0x150/0x240 [ 606.005354][ T7955] ? __pfx_task_work_run+0x10/0x10 [ 606.005390][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.005439][ T7955] exit_to_user_mode_loop+0x1d8/0x6f0 [ 606.005479][ T7955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.005519][ T7955] ? rcu_is_watching+0x12/0xc0 [ 606.005575][ T7955] do_syscall_64+0x666/0x870 [ 606.005622][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.005657][ T7955] RIP: 0033:0x7f59be59f0d7 [ 606.005683][ T7955] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 606.005716][ T7955] RSP: 002b:00007ffdbbac8cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 606.005748][ T7955] RAX: 0000000000000000 RBX: 00007f59be63330a RCX: 00007f59be59f0d7 [ 606.005772][ T7955] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbbac8d90 [ 606.005793][ T7955] RBP: 00007ffdbbac8d90 R08: 00007ffdbbac9d90 R09: 00000000ffffffff [ 606.005814][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbbac9e20 [ 606.005835][ T7955] R13: 00007f59be63330a R14: 0000000000091126 R15: 00007ffdbbac9e60 [ 606.005879][ T7955] [ 606.526104][ T9654] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 606.541205][ T9654] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 606.550121][ T9654] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 606.558024][ T9654] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 606.580083][ T9655] comedi comedi3: aio_aio12_8: I/O port conflict (0x100,32) [ 608.864431][ T9672] binder: 9671:9672 ioctl c00c6211 0 returned -14 [ 608.959978][ T9667] loop7: detected capacity change from 0 to 4096 [ 609.222974][ T9667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.695201][ T9681] syz.7.517 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 611.067748][ T8016] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.232687][ T9684] netlink: zone id is out of range [ 611.247215][ T9684] netlink: zone id is out of range [ 611.260563][ T9684] netlink: zone id is out of range [ 611.285287][ T9684] netlink: zone id is out of range [ 611.304156][ T9684] netlink: zone id is out of range [ 611.327567][ T9684] netlink: zone id is out of range [ 611.333547][ T9684] netlink: zone id is out of range [ 611.348256][ T9684] netlink: zone id is out of range [ 611.359576][ T9684] netlink: zone id is out of range [ 611.367546][ T9684] netlink: zone id is out of range [ 611.559683][ T31] audit: type=1326 audit(1785236117.332:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59be59de99 code=0x0 [ 615.602455][ T9705] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 617.452314][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 617.765895][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 617.899770][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 618.118196][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 618.156056][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 618.473243][ T9739] net_ratelimit: 9 callbacks suppressed [ 618.473269][ T9739] Set syz0 is full, maxelem 0 reached [ 618.582211][ T9736] loop0: detected capacity change from 0 to 17 [ 618.647741][ T9736] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 618.973171][ T9743] efs: cannot read volume header [ 620.285616][ T5633] Bluetooth: hci3: command tx timeout [ 620.532823][ T9757] 9pnet_fd: Insufficient options for proto=fd [ 621.855981][ T9765] loop5: detected capacity change from 0 to 512 [ 621.933996][ T9765] FAT-fs (loop5): data area starts beyond volume (199892 > 45184) [ 621.942016][ T9765] FAT-fs (loop5): Can't find a valid FAT filesystem [ 622.667826][ T9773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 622.677035][ T9773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.701275][ T5633] Bluetooth: hci3: command tx timeout [ 623.261986][ T9776] loop4: detected capacity change from 0 to 4096 [ 623.308137][ T9776] ntfs3(loop4): ino=0, mi_enum_attr [ 623.339088][ T9775] comedi comedi3: pcl711: I/O port conflict (0x100,16) [ 623.341944][ T9776] ntfs3(loop4): failed to replay log file. Can't mount rw! [ 623.671800][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.680602][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.788192][ T5633] Bluetooth: hci3: command tx timeout [ 624.892683][ T5937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.069258][ T9792] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 626.841365][ T5633] Bluetooth: hci3: command tx timeout [ 627.381746][ T5937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.935023][ T9811] loop1: detected capacity change from 0 to 17 [ 630.152799][ T9811] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 631.476590][ T5937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.623682][ T5937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.343693][ T9837] 9pnet_fd: Insufficient options for proto=fd [ 633.356872][ T5937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.414012][ T5937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.746938][ T9832] vlan2: entered allmulticast mode [ 633.863948][ T9832] veth1_macvtap: entered allmulticast mode [ 633.980911][ T9850] netlink: zone id is out of range [ 633.982657][ T9850] netlink: zone id is out of range [ 633.998280][ T9850] netlink: zone id is out of range [ 634.000329][ T9850] netlink: zone id is out of range [ 634.022717][ T9850] netlink: zone id is out of range [ 634.023635][ T9850] netlink: zone id is out of range [ 634.023899][ T9850] netlink: zone id is out of range [ 634.030327][ T9850] netlink: zone id is out of range [ 634.032660][ T9850] netlink: zone id is out of range [ 634.050097][ T9850] netlink: zone id is out of range [ 634.648086][ T9853] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 635.002196][ T9853] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 635.010947][ T9853] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 639.484536][ T5754] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 639.763977][ T9876] 9pnet_fd: Insufficient options for proto=fd [ 640.209482][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 640.500490][ T5754] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 640.599591][ T5754] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 640.670434][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.702553][ T5754] usb 6-1: config 0 descriptor?? [ 641.458584][ T9884] 9pnet_fd: Insufficient options for proto=fd [ 641.573884][ T9882] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 641.734404][ T5754] usbhid 6-1:0.0: can't add hid device: -71 [ 641.744300][ T9882] bond1 (unregistering): Released all slaves [ 642.190599][ T9895] loop1: detected capacity change from 0 to 17 [ 642.294507][ T9895] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 642.325025][ T5754] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 642.627025][ T5754] usb 6-1: USB disconnect, device number 4 [ 644.116377][ T9912] loop4: detected capacity change from 0 to 512 [ 644.127689][ T9912] EXT4-fs: Ignoring removed i_version option [ 644.196893][ T9912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.205629][ T9912] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 644.216000][ T9912] EXT4-fs (loop4): blocks per group (64) and clusters per group (32768) inconsistent [ 644.244218][ T5639] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 645.206045][ T5639] usb 1-1: Dual-Role OTG device on HNP port [ 645.368764][ T5639] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 645.379862][ T5639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.668216][ T5639] gspca_main: spca501-2.14.0 probing 0000:0000 [ 645.678481][ T5639] gspca_spca501: reg write: error -32 [ 645.725130][ T5937] bridge_slave_1: left allmulticast mode [ 645.774404][ T5937] bridge_slave_1: left promiscuous mode [ 645.805720][ T9924] net_ratelimit: 9 callbacks suppressed [ 645.805739][ T9924] netlink: zone id is out of range [ 645.820755][ T9924] netlink: zone id is out of range [ 645.836774][ T9924] netlink: zone id is out of range [ 645.845445][ T9924] netlink: zone id is out of range [ 645.846308][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.870522][ T9924] netlink: zone id is out of range [ 645.878361][ T9924] netlink: zone id is out of range [ 645.885375][ T9924] netlink: zone id is out of range [ 645.891860][ T9924] netlink: zone id is out of range [ 645.898761][ T9924] netlink: zone id is out of range [ 645.908934][ T9924] netlink: zone id is out of range [ 646.164931][ T9925] loop0: detected capacity change from 0 to 32768 [ 646.176894][ T5639] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 646.185299][ T5639] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 646.204925][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 646.217003][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 646.225421][ C1] CPU: 1 UID: 0 PID: 5639 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 646.234799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 646.244852][ C1] Workqueue: usb_hub_wq hub_event [ 646.249903][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 646.255805][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 646.275418][ C1] RSP: 0018:ffffc90000a089e8 EFLAGS: 00010012 [ 646.281486][ C1] RAX: dffffc0000000000 RBX: ffff888055bbc000 RCX: ffffffff87e64a69 [ 646.289460][ C1] RDX: 00000000000000e6 RSI: ffffffff87e648a6 RDI: ffff888055bbc128 [ 646.297430][ C1] RBP: ffff888055bbc128 R08: 0000000000000004 R09: 0000000000000020 [ 646.305399][ C1] R10: 0000000000000020 R11: 000000000000756b R12: ffff888055bbc0f0 [ 646.313372][ C1] R13: ffff888055bbc128 R14: ffff888055bbc740 R15: 0000000000000001 [ 646.321346][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 646.330277][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.336857][ C1] CR2: 00007ff7de2634e8 CR3: 00000000561bf000 CR4: 0000000000350ef0 [ 646.344829][ C1] Call Trace: [ 646.348102][ C1] [ 646.350944][ C1] f_midi2_set_alt+0x444/0x5f0 [ 646.355727][ C1] composite_setup+0x16f8/0x9290 [ 646.360696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.366356][ C1] ? __lock_acquire+0x49f/0x1a40 [ 646.371309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.376953][ C1] ? rt_mutex_slowlock_block.constprop.0+0x1f1/0x7c0 [ 646.383658][ C1] ? __pfx_composite_setup+0x10/0x10 [ 646.388969][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 646.394361][ C1] ? do_raw_spin_lock+0x128/0x260 [ 646.399404][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 646.404796][ C1] ? configfs_composite_setup+0xfb/0x130 [ 646.410441][ C1] configfs_composite_setup+0xfb/0x130 [ 646.415913][ C1] dummy_timer+0x2045/0x36f0 [ 646.420511][ C1] ? do_raw_spin_lock+0x128/0x260 [ 646.425562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.431209][ C1] ? find_held_lock+0x2b/0x80 [ 646.435907][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 646.441562][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 646.447219][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 646.453035][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.458681][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 646.464338][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 646.470343][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 646.475283][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.480929][ C1] ? mark_held_locks+0x40/0x70 [ 646.485699][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 646.491520][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 646.496467][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 646.501700][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 646.506836][ C1] handle_softirqs+0x1ea/0x9b0 [ 646.511618][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 646.516914][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.522558][ C1] ? _raw_spin_unlock+0x28/0x50 [ 646.527414][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.533058][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 646.538721][ C1] __irq_exit_rcu+0x162/0x210 [ 646.543410][ C1] irq_exit_rcu+0x9/0x30 [ 646.547664][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 646.553309][ C1] [ 646.556231][ C1] [ 646.559155][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.565144][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 646.571574][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 2e 29 f6 48 89 df e8 3e 7e 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 8e 18 f6 65 8b 05 4e 97 a7 08 85 c0 74 16 5b [ 646.591189][ C1] RSP: 0018:ffffc900042ae928 EFLAGS: 00000246 [ 646.597257][ C1] RAX: 0000000000000006 RBX: ffff888021b0c000 RCX: 0000000000000040 [ 646.605227][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a9f86 RDI: ffffffff8c400980 [ 646.613196][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 646.621165][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 646.629132][ C1] R13: ffff888021b44478 R14: 0000000000000000 R15: ffff888021b44400 [ 646.637113][ C1] dummy_urb_enqueue+0x56c/0x880 [ 646.642061][ C1] ? bus_for_each_drv+0xb1/0x1e0 [ 646.647010][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 646.652152][ C1] ? __device_attach+0x1e4/0x4d0 [ 646.657107][ C1] ? device_initial_probe+0xaf/0xd0 [ 646.662324][ C1] ? bus_probe_device+0x64/0x160 [ 646.667275][ C1] ? device_add+0x121d/0x1970 [ 646.671985][ C1] ? usb_new_device.cold+0x685/0x115c [ 646.677373][ C1] ? hub_event+0x30a3/0x4a60 [ 646.681978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.687640][ C1] usb_submit_urb+0x827/0x19b0 [ 646.692418][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.698067][ C1] ? __init_swait_queue_head+0xca/0x150 [ 646.703633][ C1] usb_start_wait_urb+0x10e/0x580 [ 646.708668][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.714311][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 646.719866][ C1] ? trace_kmalloc+0xeb/0x110 [ 646.724559][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.730205][ C1] ? __asan_memset+0x23/0x50 [ 646.734811][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.740458][ C1] usb_control_msg+0x328/0x4b0 [ 646.745231][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 646.750533][ C1] usb_control_msg_send+0xca/0x130 [ 646.755664][ C1] usb_set_interface+0x9b6/0xe20 [ 646.760627][ C1] snd_usb_midi_v2_create+0x629/0x4070 [ 646.766117][ C1] ? __entry_text_end+0x1020b6/0x1020b9 [ 646.771677][ C1] ? irqentry_exit+0x24d/0xa00 [ 646.776454][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.782097][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 646.787312][ C1] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 646.793221][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.798864][ C1] ? usb_ifnum_to_if+0x16f/0x1d0 [ 646.803827][ C1] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 646.809768][ C1] usb_audio_probe+0xf05/0x3b10 [ 646.814650][ C1] ? __pfx_usb_audio_probe+0x10/0x10 [ 646.819955][ C1] ? do_raw_spin_lock+0x128/0x260 [ 646.824995][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 646.830386][ C1] ? mark_held_locks+0x40/0x70 [ 646.835156][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 646.840534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.846189][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.851834][ C1] ? mark_held_locks+0x40/0x70 [ 646.856608][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 646.862429][ C1] usb_probe_interface+0x303/0x8f0 [ 646.867568][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 646.873224][ C1] really_probe+0x241/0xa60 [ 646.877747][ C1] __driver_probe_device+0x20e/0x450 [ 646.883066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.888714][ C1] driver_probe_device+0x4a/0x140 [ 646.893757][ C1] __device_attach_driver+0x1df/0x320 [ 646.899150][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 646.905061][ C1] bus_for_each_drv+0x159/0x1e0 [ 646.909919][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 646.915297][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.920939][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 646.926150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.931793][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 646.937611][ C1] __device_attach+0x1e4/0x4d0 [ 646.942392][ C1] ? __pfx___device_attach+0x10/0x10 [ 646.947695][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.953339][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 646.958556][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.964202][ C1] device_initial_probe+0xaf/0xd0 [ 646.969246][ C1] bus_probe_device+0x64/0x160 [ 646.974023][ C1] device_add+0x121d/0x1970 [ 646.978560][ C1] ? __pfx_device_add+0x10/0x10 [ 646.983439][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.989085][ C1] ? mark_held_locks+0x40/0x70 [ 646.993857][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.999508][ C1] usb_set_configuration+0xd97/0x1c60 [ 647.004916][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 647.010993][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 647.016377][ C1] usb_probe_device+0xef/0x400 [ 647.021161][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 647.026555][ C1] really_probe+0x241/0xa60 [ 647.031076][ C1] __driver_probe_device+0x20e/0x450 [ 647.036378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.042024][ C1] driver_probe_device+0x4a/0x140 [ 647.047078][ C1] __device_attach_driver+0x1df/0x320 [ 647.052468][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 647.058386][ C1] bus_for_each_drv+0x159/0x1e0 [ 647.063244][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 647.068623][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.074265][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 647.079473][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.085142][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 647.090958][ C1] __device_attach+0x1e4/0x4d0 [ 647.095739][ C1] ? __pfx___device_attach+0x10/0x10 [ 647.101044][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.106693][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 647.111909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.117559][ C1] device_initial_probe+0xaf/0xd0 [ 647.122609][ C1] bus_probe_device+0x64/0x160 [ 647.127385][ C1] device_add+0x121d/0x1970 [ 647.131917][ C1] ? __pfx_device_add+0x10/0x10 [ 647.136790][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 647.142523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.148180][ C1] usb_new_device.cold+0x685/0x115c [ 647.153394][ C1] ? _mutex_trylock_nest_lock+0x241/0x310 [ 647.159129][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 647.164345][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.169992][ C1] ? mark_held_locks+0x40/0x70 [ 647.174767][ C1] hub_event+0x30a3/0x4a60 [ 647.179228][ C1] ? __pfx_hub_event+0x10/0x10 [ 647.184030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.189677][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.195322][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 647.200726][ C1] process_one_work+0xa23/0x1940 [ 647.205678][ C1] ? __pfx_process_one_work+0x10/0x10 [ 647.211055][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.216710][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.222359][ C1] worker_thread+0x5ef/0xe50 [ 647.226964][ C1] ? __pfx_worker_thread+0x10/0x10 [ 647.232078][ C1] ? kthread+0x13a/0x450 [ 647.236348][ C1] ? __pfx_worker_thread+0x10/0x10 [ 647.241462][ C1] kthread+0x370/0x450 [ 647.245558][ C1] ? __pfx_kthread+0x10/0x10 [ 647.250262][ C1] ret_from_fork+0x72b/0xd50 [ 647.254869][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 647.259999][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.265643][ C1] ? rcu_is_watching+0x12/0xc0 [ 647.270427][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.276069][ C1] ? __switch_to+0x800/0x10f0 [ 647.280772][ C1] ? __switch_to_asm+0x39/0x70 [ 647.285558][ C1] ? __pfx_kthread+0x10/0x10 [ 647.290176][ C1] ret_from_fork_asm+0x1a/0x30 [ 647.294971][ C1] [ 647.297977][ C1] Modules linked in: [ 647.301869][ C1] ---[ end trace 0000000000000000 ]--- [ 647.307312][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 647.313214][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 647.332827][ C1] RSP: 0018:ffffc90000a089e8 EFLAGS: 00010012 [ 647.338895][ C1] RAX: dffffc0000000000 RBX: ffff888055bbc000 RCX: ffffffff87e64a69 [ 647.346863][ C1] RDX: 00000000000000e6 RSI: ffffffff87e648a6 RDI: ffff888055bbc128 [ 647.354836][ C1] RBP: ffff888055bbc128 R08: 0000000000000004 R09: 0000000000000020 [ 647.362806][ C1] R10: 0000000000000020 R11: 000000000000756b R12: ffff888055bbc0f0 [ 647.370773][ C1] R13: ffff888055bbc128 R14: ffff888055bbc740 R15: 0000000000000001 [ 647.378745][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 647.387681][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.394266][ C1] CR2: 00007ff7de2634e8 CR3: 00000000561bf000 CR4: 0000000000350ef0 [ 647.402242][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 647.409649][ C1] Kernel Offset: disabled [ 647.413956][ C1] Rebooting in 86400 seconds..