last executing test programs: 16m22.863045662s ago: executing program 0 (id=79): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0xa120) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 16m17.213435635s ago: executing program 0 (id=89): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x30}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000001c0)='n', 0x1, 0xb) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x2, &(0x7f00000016c0)=""/4106, &(0x7f0000000000)=0x100a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x400c1) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000540)={0x0, "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"}) 16m8.764676042s ago: executing program 0 (id=98): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stack\x00') r4 = dup(r0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0x8, 0xf3, 0x6, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x6, 0x6, 0x6, 0x80000001, 0x1ff, 0xfd, 0xfffffffc, 0x803, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x3, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]}) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil) 16m7.275946536s ago: executing program 0 (id=102): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r4, &(0x7f00000061c0)='dir', 0x3) 16m5.917301304s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) pipe2(&(0x7f0000001440), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 16m4.386025882s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x40, &(0x7f000001f500)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x90001) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_read_part_table(0x107b, &(0x7f0000001580)="$eJzs0L9NQzEQB+BfeCRxoKClZAU2oKekoWEKGrogZmADBmEBRmATJA7ZYIkFIM33Ffee7o/Pcjio7esmeV/nLslzy/1RT+5+irdJzpJU1T7Les5UVSVvH1Wz8eFy1k5q//ldv1h+76m2q6qr8b8ZcclpesvN9Vw4T1tlNb4vOX6c2ace+g1aWrId88n5Xz0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyrrwAAAP//cdkdJw==") 15m47.867052435s ago: executing program 32 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x40, &(0x7f000001f500)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x90001) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_read_part_table(0x107b, &(0x7f0000001580)="$eJzs0L9NQzEQB+BfeCRxoKClZAU2oKekoWEKGrogZmADBmEBRmATJA7ZYIkFIM33Ffee7o/Pcjio7esmeV/nLslzy/1RT+5+irdJzpJU1T7Les5UVSVvH1Wz8eFy1k5q//ldv1h+76m2q6qr8b8ZcclpesvN9Vw4T1tlNb4vOX6c2ace+g1aWrId88n5Xz0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyrrwAAAP//cdkdJw==") 12m51.003160278s ago: executing program 2 (id=351): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x204000, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x1c000, 0x40) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x4}, @in={0x2, 0x4e24, @broadcast}], 0x2c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sigaltstack(0x0, &(0x7f0000001580)={0x0}) file_getattr(r0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x18, 0x800) 12m48.637896932s ago: executing program 2 (id=354): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004840), &(0x7f0000004880)=0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000040)="170000000200010000ffbe8c5ee17688a20033e00201fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) 12m45.408380161s ago: executing program 2 (id=358): socket$kcm(0x11, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) 12m38.936669733s ago: executing program 2 (id=367): r0 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) r6 = userfaultfd(0x80801) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) r7 = openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) sendmsg$802154_dgram(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000280)={&(0x7f0000000240)="d0162193977276e42b0f5e276301bca3ddb384e6396b92f01aab", 0x1a}}, 0x44000) r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000001600)={0x1, @win={{0x3, 0x0, 0x2, 0x21}, 0x7, 0x8, 0x0, 0x0, 0x0, 0x5}}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) r10 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 12m34.546995313s ago: executing program 2 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x200, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x3d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) 12m31.699184538s ago: executing program 2 (id=377): socket$kcm(0x11, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) 12m15.558056498s ago: executing program 33 (id=377): socket$kcm(0x11, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) 12m0.131515557s ago: executing program 1 (id=416): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x516, &(0x7f00000005c0)="$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") timer_create(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) io_setup(0x4, &(0x7f0000000600)=0x0) fcntl$getownex(r3, 0x10, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) 11m59.021427473s ago: executing program 1 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) syz_open_dev$loop(0x0, 0x4, 0x2001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) 11m55.612483088s ago: executing program 1 (id=422): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno']) 11m52.786644336s ago: executing program 1 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 11m38.369302464s ago: executing program 1 (id=435): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@rnullb, 0x0, &(0x7f0000002a00)='./cgroup\x00') mknod$loop(0x0, 0x8, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) 11m31.569413961s ago: executing program 1 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="10", @ANYRES8=r2], 0x4000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4af"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) readv(r4, &(0x7f0000004180)=[{&(0x7f0000001040)=""/4096, 0x1000}, {0x0}], 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r5, 0x11, 0x0, 0x74000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 11m16.188301272s ago: executing program 34 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="10", @ANYRES8=r2], 0x4000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4af"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) readv(r4, &(0x7f0000004180)=[{&(0x7f0000001040)=""/4096, 0x1000}, {0x0}], 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r5, 0x11, 0x0, 0x74000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 5m33.14710738s ago: executing program 3 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r7], 0xb2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 5m31.09320311s ago: executing program 3 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xccd02, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x75) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000580)) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) shutdown(r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, &(0x7f0000006680)) listen(0xffffffffffffffff, 0x0) 5m30.226598345s ago: executing program 3 (id=803): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00", 0x5a, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xbbd25b33d864198e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000880)="723a732f70202e2f66696c65303a300c257e858054d731b2b72d0849e986da55ec26f9a5ef42", 0x26) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 5m27.715425879s ago: executing program 3 (id=797): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file2\x00', 0x40c, &(0x7f00000001c0)=ANY=[], 0x1, 0xacd, &(0x7f0000000ac0)="$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") timer_create(0x1, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x48500000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd5ee}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x8c}}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffff7ec]}, 0x0, 0x8) 5m25.418883922s ago: executing program 3 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r4, &(0x7f0000000340)=""/79, 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x167e00) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xef}, 'port1\x00', 0xc5f2618db8c5cbca, 0x1c0c10, 0x0, 0x7, 0x3, 0x2, 0x3, 0x0, 0x5, 0x2}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) 5m15.342836199s ago: executing program 3 (id=815): syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket(0x10, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 5m0.187221414s ago: executing program 35 (id=815): syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket(0x10, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 4m20.598386531s ago: executing program 5 (id=881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) 4m18.836546606s ago: executing program 5 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r3, 0x1, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x2) 4m17.551570093s ago: executing program 5 (id=885): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1, &(0x7f00000005c0)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x90) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2888}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) r3 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x2080483) pwritev(r4, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x76, @string={0x76, 0x3, "62748ddd4e12c34e39db53f865c358e72a903e63906253f1aff22147ee382fbbf8fe10f670ed503768dcd8750b3ece428f2699c57fd37891c45fcd0cea3fc4dce9b3954df803078f8641dec681743d8d65f7f6551f9ba72bb77ce454dea14486aaf8ec0413c97fef4340dc957b1d19248b39899f"}}, 0x0, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x4, &(0x7f0000000240)={0x13, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cd5e1dee93"}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000908000200ac1efe010c000280050001000000000008000740ff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 4m10.554736887s ago: executing program 5 (id=894): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a13235d78ad62ceef188a2e499b39cf581", 0x0, 0x7fffffff, 0x0, 0x31, 0x0, &(0x7f0000000800)="010aeb2d63f65318c38d2d42d2f00e829c4e0e6996e0a34a320ac2b1f9d92ee1c5ddf44045b16f528b596c7e9b9892461b", 0x0}, 0x50) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) accept$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000500)=0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") pidfd_send_signal(r2, 0x41, &(0x7f00000006c0)={0x30, 0xf7, 0xa3}, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000000c0)="8e676d7bb04ad3f1d9bfef079833c3ec9b6dbb82ba97a8fc8695294ade38f8511045dcd3adb0d8778284d8a5b31b5e10462c9889974a9fba8a355b61499e072fc697621a54019eea0d1b9a520ff7821ab004afe74b8550681818845508d7b28b2ed61eb3f54724fe46d3368d904fa0288d1c89165c4ca4b83a5b6b85815d2fd4bef3cd186c9da125", &(0x7f0000000240)=""/251, &(0x7f00000003c0)="edd59d74155fc9f5dc03990ede5bba5c16fb9b4918564db020d775399d", &(0x7f0000000400)="01aca7207969e8f6c51206254083107d132477aa416acc9d47fc97a69cb2c43d95c51ad99e521f402f5a6e082703bc523830ffd114e9c030b091479e06041ce5cd2e3878", 0x8, r2, 0x4}, 0x38) 4m7.299313274s ago: executing program 5 (id=900): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) 4m2.820613627s ago: executing program 5 (id=904): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x212f0) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) fanotify_mark(0xffffffffffffffff, 0x61, 0x40001002, r0, 0x0) 4m2.330589203s ago: executing program 36 (id=904): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x212f0) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) fanotify_mark(0xffffffffffffffff, 0x61, 0x40001002, r0, 0x0) 1m12.124418022s ago: executing program 7 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x442202) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m10.937351725s ago: executing program 7 (id=1150): socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x398, 0x1c8, 0x98, 0x1c8, 0x98, 0x0, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xb, 0x3}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r11, 0x701, 0x10, 0xfffffffe, {0x2e}, [{{@pci={{0x8}, {0xfffffffffffffe83}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r13 = dup(r10) syz_ublk_setup_queues(r13, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m9.401584911s ago: executing program 7 (id=1160): modify_ldt$write2(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000040)={0xc9, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") write$nci(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0xfffffffd, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004840) r5 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x1fc, 0xd615, 0x9, 0x535, 0xfffffffc, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) 1m5.765602234s ago: executing program 7 (id=1156): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 1m3.486033104s ago: executing program 7 (id=1161): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) 1m2.186859575s ago: executing program 7 (id=1164): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x242000, 0x110, 0x32}, 0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x18}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000840)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@fat=@uid={'uid', 0x3d, r8}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000"], 0x310) 46.127823779s ago: executing program 37 (id=1164): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x242000, 0x110, 0x32}, 0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x18}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000840)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@fat=@uid={'uid', 0x3d, r8}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000"], 0x310) 24.758015987s ago: executing program 8 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="05000b000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="11e69e005a8dbdeea00aa89585ed1c7775b638d2765986a4db89294669e46ec5f1e40ce738c98576dafa923d2fc206a4ccde6eae5deef591dd712860a97a"], 0x1c}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0xe, {0x2, 0x4e20, @empty}}, 0x24) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e616d65636173653d312c6b6565705f6c6173745f646f74732c7a65726f5f73697a655f6469722c696f636861727365743d61736369692c646973636172642c6e616d65636173653d312c696f636861727365743d63703935302c646973636172642c7a65726f5f73697a655f6469722c7a65726f5f73697a655f6469722c002c10fd375820153cb39cf77205e3b9e48beab79d3e70fefcbd6a7c8afe2240bd85521ce613a044aa256f8b2823ee6ed03dac19bd9d5c86049ceca3d0"], 0x1, 0x1533, &(0x7f0000006800)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) unlinkat(r4, &(0x7f0000000040)='./bus\x00', 0x200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) setresuid(0x0, 0xee00, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r10}, 0xc) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x8040) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="38003300a210fe00ffffffffffff080211000000505050505050ea2c27f28b18d30a0ecb5b2ea863c943328ecb23028659a85b4f2fb44834a8d5cbd1"], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 19.117190352s ago: executing program 8 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000040)='./file0\x00') read$FUSE(r5, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r5, &(0x7f0000002c00)={0x18, 0xfffffffffffffff5, r6, {0x1}}, 0x18) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 13.487639469s ago: executing program 9 (id=1243): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[], 0x0, 0x1b6, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) copy_file_range(r3, &(0x7f00000001c0), r2, 0x0, 0xa003e458, 0x700000000000000) 13.26992083s ago: executing program 8 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r3) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 12.278426217s ago: executing program 8 (id=1246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setns(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGABS0(r3, 0x80184540, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f00000005c0), 0x0}, 0x20) 11.20078433s ago: executing program 9 (id=1247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0x1, 0x3}, 0x2}, 0x18) 10.547788653s ago: executing program 4 (id=1250): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e27, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 9.433532451s ago: executing program 9 (id=1251): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@sb={'sb', 0x3d, 0x7c7f}}, {@dax_always}, {@errors_continue}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) syz_ublk_setup_io_uring(0xd7, &(0x7f0000000280)={0x0, 0x4778, 0x4000, 0x1, 0x49}, 0x0, &(0x7f0000000340), &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x200, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x123) 9.342101908s ago: executing program 4 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) ioprio_set$pid(0x2, r1, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f00000f9000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2000000000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) 9.33667138s ago: executing program 6 (id=1253): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r1, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)) r4 = creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x2284, &(0x7f0000000040)=0x85) 7.820868301s ago: executing program 9 (id=1254): syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff010220000904"], 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket(0x10, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 7.82002491s ago: executing program 4 (id=1255): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e27, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000400)={0x0, 0x1, '\x00', @zc_export={r5}}, 0x0) 7.604968825s ago: executing program 6 (id=1256): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34091, 0x22000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @multicast}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000001406241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x8400}}, 0x44) 7.347799028s ago: executing program 8 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x200, 0xf0}}) 6.552084588s ago: executing program 4 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bind$inet6(r4, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00 ', @ANYRES16=r3, @ANYBLOB="000000000080fcdbdf25110000001c0003800500080092000000060007004e210000080001000200000008000600fcffffff0400018040000280140001000000000000000000000000000000000106000b000a00000006000f000700000006000f000800000006000e004e2300000800070001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_SSID={0xb, 0x34, @random='test_ss'}]}, 0x68}}, 0x0) nanosleep(0x0, 0x0) 5.963915891s ago: executing program 6 (id=1259): io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0xc6c, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r5, 0xffffffffffffffff, 0x0) 4.511825455s ago: executing program 6 (id=1260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0x1, 0x3}, 0x2}, 0x18) 4.30028215s ago: executing program 9 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) listns(&(0x7f0000000080)={0x20, 0x0, 0x2}, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000180)=0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x10, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 2.422658613s ago: executing program 6 (id=1262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x442202) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.572434899s ago: executing program 8 (id=1263): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1530, &(0x7f0000002f80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0xb) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x2, 0xa}}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081020100bfa30000000000000703000004feffff720af0fff8ffffff69a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioperm(0x7ff, 0x8, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) shutdown(r1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) 1.472556106s ago: executing program 9 (id=1264): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103683, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000cc0)={0x0, 0x1, 0x5, 0x1}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x3114, &(0x7f00000020c0)={0x0, 0x5078, 0x400, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x1, 0x1, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000100)=[0x7, 0x10], 0x2) 1.469318708s ago: executing program 4 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) ioprio_set$pid(0x2, r1, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f00000f9000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2000000000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) 1.392352643s ago: executing program 6 (id=1266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) flock(r1, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 0s ago: executing program 4 (id=1267): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000500)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0xbf, 0x1, 0x6}, @map_fd={0x18, 0x2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x2) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=@ipv6_delrule={0x58, 0x21, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x8}, [@FRA_DST={0x14, 0x1, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_DST={0x14, 0x1, @private2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) kernel console output (not intermixed with test programs): eft allmulticast mode [ 774.713562][ T5844] bridge_slave_1: left promiscuous mode [ 774.713801][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.774192][ T5844] bridge_slave_0: left allmulticast mode [ 774.774211][ T5844] bridge_slave_0: left promiscuous mode [ 774.776475][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.052804][ T5844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.142576][ T5844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.213040][ T5844] bond0 (unregistering): Released all slaves [ 775.221931][ T4390] net_ratelimit: 99 callbacks suppressed [ 775.592271][ T5844] hsr_slave_0: left promiscuous mode [ 775.611701][ T5844] hsr_slave_1: left promiscuous mode [ 775.613095][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.632345][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.304470][ T5844] team0 (unregistering): Port device team_slave_1 removed [ 776.396409][ T5844] team0 (unregistering): Port device team_slave_0 removed [ 776.993259][ T5845] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.926701][T10141] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.926915][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.927104][T10141] bridge_slave_0: entered allmulticast mode [ 777.929380][T10141] bridge_slave_0: entered promiscuous mode [ 777.988700][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.988939][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.989134][T10135] bridge_slave_0: entered allmulticast mode [ 777.990992][T10135] bridge_slave_0: entered promiscuous mode [ 778.021272][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.021399][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.024276][T10141] bridge_slave_1: entered allmulticast mode [ 778.035900][T10141] bridge_slave_1: entered promiscuous mode [ 778.043530][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.043640][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.043821][T10135] bridge_slave_1: entered allmulticast mode [ 778.060120][T10135] bridge_slave_1: entered promiscuous mode [ 778.359312][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.379831][T10141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.397778][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.415617][T10141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.639946][T10135] team0: Port device team_slave_0 added [ 778.651244][T10141] team0: Port device team_slave_0 added [ 778.661336][T10135] team0: Port device team_slave_1 added [ 778.670459][T10141] team0: Port device team_slave_1 added [ 778.761393][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.761402][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.761424][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.769808][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.769819][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.769841][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.875998][T10141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.876010][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.876035][T10141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.949782][T10141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.949794][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.949818][T10141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.258310][T10135] hsr_slave_0: entered promiscuous mode [ 779.259976][T10135] hsr_slave_1: entered promiscuous mode [ 779.261041][T10135] debugfs: 'hsr0' already exists in 'hsr' [ 779.261067][T10135] Cannot create hsr debugfs directory [ 779.398160][T10141] hsr_slave_0: entered promiscuous mode [ 779.399580][T10141] hsr_slave_1: entered promiscuous mode [ 779.400660][T10141] debugfs: 'hsr0' already exists in 'hsr' [ 779.400678][T10141] Cannot create hsr debugfs directory [ 780.204736][T10135] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 780.236956][T10135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 780.239083][T10135] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 780.267443][T10135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.268335][T10135] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 780.296586][T10135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.306919][T10135] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 780.338552][T10135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.344125][ T4423] net_ratelimit: 48 callbacks suppressed [ 780.581067][T10141] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 780.607845][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 780.610990][T10141] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 780.636526][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.637535][T10141] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 780.667775][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.669370][T10141] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 780.697716][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.796680][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.866927][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.884184][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.884322][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.908102][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.908165][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.963973][T10141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.029396][T10141] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.048932][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.048993][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.077811][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.077926][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.647944][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.829865][T10141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.995829][T10135] veth0_vlan: entered promiscuous mode [ 782.014306][T10135] veth1_vlan: entered promiscuous mode [ 782.077761][T10135] veth0_macvtap: entered promiscuous mode [ 782.095716][T10135] veth1_macvtap: entered promiscuous mode [ 782.138991][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.161272][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.472617][ T5845] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.473152][ T5845] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.476892][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.476906][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.608800][ T5844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.608816][ T5844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.611425][T10141] veth0_vlan: entered promiscuous mode [ 782.635459][ T1021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.635522][ T1021] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.664735][T10141] veth1_vlan: entered promiscuous mode [ 782.730522][T10141] veth0_macvtap: entered promiscuous mode [ 782.745699][T10141] veth1_macvtap: entered promiscuous mode [ 782.785905][T10141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.807782][T10141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.820824][ T5844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.821005][ T5844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.821061][ T5844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.878015][ T1005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.378320][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.378337][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.000255][T10401] ceph: No mds server is up or the cluster is laggy [ 784.035916][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 784.036154][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 785.250095][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.250113][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.463310][ C1] net_ratelimit: 470 callbacks suppressed [ 786.072019][ T33] audit: type=1326 audit(1790144290.910:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a56b97ed7 code=0x7ffc0000 [ 786.098910][ T33] audit: type=1326 audit(1790144290.910:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a56b3f4d9 code=0x7ffc0000 [ 786.098968][ T33] audit: type=1326 audit(1790144290.920:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a56b97ed7 code=0x7ffc0000 [ 786.099012][ T33] audit: type=1326 audit(1790144290.920:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a56b3f4d9 code=0x7ffc0000 [ 786.099057][ T33] audit: type=1326 audit(1790144290.920:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a56b97ed7 code=0x7ffc0000 [ 786.101422][ T33] audit: type=1326 audit(1790144290.920:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a56b3f4d9 code=0x7ffc0000 [ 786.127926][ T33] audit: type=1326 audit(1790144290.950:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a56b97ed7 code=0x7ffc0000 [ 786.127999][ T33] audit: type=1326 audit(1790144290.950:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a56b3f4d9 code=0x7ffc0000 [ 786.128064][ T33] audit: type=1326 audit(1790144290.950:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a56b97ed7 code=0x7ffc0000 [ 786.128106][ T33] audit: type=1326 audit(1790144290.950:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.7.768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a56b3f4d9 code=0x7ffc0000 [ 786.176113][T10417] loop3: detected capacity change from 0 to 512 [ 786.256833][T10417] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 786.296189][ T5728] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 786.491710][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 786.497481][ T5728] usb 6-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 786.582941][ T5728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.582965][ T5728] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 786.583062][ T5728] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 786.583099][ T5728] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 786.583135][ T5728] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 786.583155][ T5728] usb 6-1: config 1 interface 1 has no altsetting 0 [ 786.970191][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.970347][ T5728] usb 6-1: Product: syz [ 786.970463][ T5728] usb 6-1: Manufacturer: syz [ 786.970555][ T5728] usb 6-1: SerialNumber: syz [ 787.861120][T10430] loop6: detected capacity change from 0 to 64 [ 787.939119][T10430] hfs: unable to open catalog tree [ 787.939130][T10430] hfs: can't find a HFS filesystem on dev loop6 [ 787.957948][ T5728] usb 6-1: selecting invalid altsetting 0 [ 787.960795][ T5728] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 787.969310][ T5728] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 788.084098][ T5728] usb 6-1: USB disconnect, device number 8 [ 788.253184][T10001] udevd[10001]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 790.010051][T10447] loop5: detected capacity change from 0 to 128 [ 790.054494][T10447] loop5: detected capacity change from 0 to 128 [ 790.090300][T10447] EXT4-fs (loop5): Test dummy encryption mode enabled [ 790.130078][T10447] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.190204][T10447] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 790.741587][ C1] net_ratelimit: 143 callbacks suppressed [ 791.411978][ T7222] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 794.468882][T10482] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.788'. [ 795.801802][ T5744] net_ratelimit: 64 callbacks suppressed [ 795.938075][T10493] loop7: detected capacity change from 0 to 1024 [ 795.941438][T10493] EXT4-fs: Ignoring removed bh option [ 795.974906][T10493] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 796.055499][T10493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.060439][ T5728] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 796.268062][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 796.273633][ T5728] usb 6-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 796.280044][ T5728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.280063][ T5728] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 796.280138][ T5728] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 796.280171][ T5728] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 796.280207][ T5728] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.280226][ T5728] usb 6-1: config 1 interface 1 has no altsetting 0 [ 796.282420][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.282438][ T5728] usb 6-1: Product: syz [ 796.282451][ T5728] usb 6-1: Manufacturer: syz [ 796.282465][ T5728] usb 6-1: SerialNumber: syz [ 797.813217][T10135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.849749][T10506] loop3: detected capacity change from 0 to 2048 [ 797.885740][ T5728] usb 6-1: selecting invalid altsetting 0 [ 797.887933][ T5728] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 797.904239][T10506] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 797.915590][ T5728] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 797.983940][T10506] NILFS (loop3): invalid segment: Sequence number mismatch [ 797.983958][T10506] NILFS (loop3): unable to fall back to spare super block [ 797.983966][T10506] NILFS (loop3): error -22 while searching super root [ 798.060210][ T5728] usb 6-1: USB disconnect, device number 9 [ 799.472061][T10028] udevd[10028]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 800.844026][ T5728] net_ratelimit: 126 callbacks suppressed [ 801.263543][ T1221] kernel read not supported for file [fscontext] (pid: 1221 comm: kworker/0:2) [ 803.542593][T10540] netlink: 'syz.6.808': attribute type 2 has an invalid length. [ 803.542618][T10540] netlink: 'syz.6.808': attribute type 8 has an invalid length. [ 803.542633][T10540] netlink: 132 bytes leftover after parsing attributes in process `syz.6.808'. [ 803.652479][T10544] fuse: Bad value for 'fd' [ 805.941694][ C0] net_ratelimit: 59 callbacks suppressed [ 808.358369][T10567] cgroup: Unknown subsys name 'cpuset' [ 809.145074][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.145122][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.461759][ C1] net_ratelimit: 78 callbacks suppressed [ 812.435178][T10588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.028806][T10589] ip6gretap1: entered allmulticast mode [ 813.049541][T10589] batman_adv: batadv0: Adding interface: ip6gretap1 [ 813.049583][T10589] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.049669][T10589] batman_adv: batadv0: Interface activated: ip6gretap1 [ 813.892581][T10581] capability: warning: `syz.4.818' uses deprecated v2 capabilities in a way that may be insecure [ 815.958828][ T33] kauditd_printk_skb: 289 callbacks suppressed [ 815.958850][ T33] audit: type=1800 audit(1790144320.800:2240): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.822" name="pimreg" dev="sda1" ino=2067 res=0 errno=0 [ 816.800260][T10610] loop7: detected capacity change from 0 to 512 [ 816.822386][ C0] net_ratelimit: 121 callbacks suppressed [ 817.509126][T10610] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 819.074842][T10618] overlayfs: missing 'workdir' [ 820.247939][ T1221] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 820.457026][T10640] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 820.594008][T10638] loop5: detected capacity change from 0 to 32768 [ 820.595266][T10638] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 820.597142][T10638] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.832 (10638) [ 820.638026][ T1221] usb 4-1: Using ep0 maxpacket: 32 [ 820.638347][T10638] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 820.638379][T10638] BTRFS info (device loop5): using crc32c checksum algorithm [ 820.642363][ T1221] usb 4-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 820.645783][ T1221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.645805][ T1221] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 820.645879][ T1221] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 820.645911][ T1221] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 820.645947][ T1221] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 820.645967][ T1221] usb 4-1: config 1 interface 1 has no altsetting 0 [ 820.653651][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.653669][ T1221] usb 4-1: Product: syz [ 820.653682][ T1221] usb 4-1: Manufacturer: syz [ 820.653696][ T1221] usb 4-1: SerialNumber: syz [ 820.854573][T10638] BTRFS info (device loop5): rebuilding free space tree [ 820.956330][T10638] BTRFS info (device loop5): disabling free space tree [ 820.956448][T10638] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 820.956473][T10638] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 821.008610][T10638] BTRFS info (device loop5): enabling ssd optimizations [ 821.008646][T10638] BTRFS info (device loop5): turning on async discard [ 821.008664][T10638] BTRFS info (device loop5): force clearing of disk cache [ 821.008715][T10638] BTRFS info (device loop5): use zstd compression, level 3 [ 821.328682][ T1221] usb 4-1: selecting invalid altsetting 0 [ 821.330987][ T1221] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 821.335877][ T1221] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 821.955246][ T4423] net_ratelimit: 63 callbacks suppressed [ 822.075567][ T7222] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 822.737962][ T1221] usb 4-1: USB disconnect, device number 14 [ 824.448795][T10679] udevd[10679]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 827.221674][ C0] net_ratelimit: 87 callbacks suppressed [ 830.142130][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 830.152694][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 830.182324][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 830.190494][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 830.191974][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 830.722052][ T5729] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 830.871634][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 830.872603][ T5729] usb 5-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 830.877944][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.877966][ T5729] usb 5-1: Product: syz [ 830.877981][ T5729] usb 5-1: Manufacturer: syz [ 830.877996][ T5729] usb 5-1: SerialNumber: syz [ 830.929371][ T5729] usb 5-1: config 0 descriptor?? [ 830.943032][ T5729] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 831.150442][ T5729] ssu100 5-1:0.0: probe with driver ssu100 failed with error -32 [ 832.261787][ C1] net_ratelimit: 92 callbacks suppressed [ 832.918111][ T5611] Bluetooth: hci0: command tx timeout [ 833.148944][T10712] ALSA: mixer_oss: invalid OSS volume '' [ 833.164225][T10712] SET target dimension over the limit! [ 834.981737][ T7829] Bluetooth: hci0: command tx timeout [ 835.379565][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.411261][ T1221] usb 5-1: USB disconnect, device number 13 [ 835.506039][T10721] loop7: detected capacity change from 0 to 512 [ 835.593958][T10721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 835.593977][T10721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 835.633157][T10721] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 835.633522][T10721] EXT4-fs (loop7): orphan cleanup on readonly fs [ 835.695056][T10721] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 835.695166][T10721] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 835.695188][T10721] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.847: Failed to acquire dquot type 1 [ 835.695283][T10721] loop7: lost filesystem error report for type 5 error -117 [ 835.698415][T10721] EXT4-fs (loop7): Remounting filesystem read-only [ 835.702617][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 835.702642][ C0] EXT4-fs (loop7): initial error at time 1790144340: ext4_acquire_dquot:7069 [ 835.702669][ C0] EXT4-fs (loop7): last error at time 1790144340: ext4_acquire_dquot:7069 [ 836.324020][T10721] EXT4-fs (loop7): 1 truncate cleaned up [ 836.343566][ T4385] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 836.343602][ T4385] Quota error (device loop7): write_blk: dquota write failed [ 836.343619][ T4385] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 836.343636][ T4385] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 836.343654][ T4385] Quota error (device loop7): write_blk: dquota write failed [ 836.343668][ T4385] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 836.344008][ T4385] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 836.344029][ T4385] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 836.504509][T10721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 837.192984][ T7829] Bluetooth: hci0: command tx timeout [ 837.303790][ T7880] net_ratelimit: 52 callbacks suppressed [ 838.281675][ T33] audit: type=1326 audit(1790144343.110:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.4.851" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63799e159 code=0x0 [ 838.365255][T10135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.588879][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.850'. [ 838.588912][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.850'. [ 839.341410][ T7829] Bluetooth: hci0: command tx timeout [ 839.519525][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.250719][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.424968][ T1005] net_ratelimit: 91 callbacks suppressed [ 842.883121][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.552260][T10693] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.552386][T10693] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.552619][T10693] bridge_slave_0: entered allmulticast mode [ 844.561040][T10693] bridge_slave_0: entered promiscuous mode [ 844.604684][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.604842][T10693] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.605053][T10693] bridge_slave_1: entered allmulticast mode [ 844.610419][T10778] xt_hashlimit: size too large, truncated to 1048576 [ 844.643309][T10693] bridge_slave_1: entered promiscuous mode [ 846.232147][ T51] bridge_slave_1: left allmulticast mode [ 846.232171][ T51] bridge_slave_1: left promiscuous mode [ 846.232416][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.269103][ T33] audit: type=1326 audit(1790144351.100:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.275660][ T33] audit: type=1326 audit(1790144351.120:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.614047][ T51] bridge_slave_0: left allmulticast mode [ 846.614299][ T51] bridge_slave_0: left promiscuous mode [ 846.619828][ T33] audit: type=1326 audit(1790144351.460:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.621534][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.691213][ T33] audit: type=1326 audit(1790144351.520:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.729901][ T33] audit: type=1326 audit(1790144351.540:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2d1699cfc7 code=0x7ffc0000 [ 846.763817][ T33] audit: type=1326 audit(1790144351.610:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.763873][ T33] audit: type=1326 audit(1790144351.610:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.830578][ T33] audit: type=1326 audit(1790144351.670:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.830634][ T33] audit: type=1326 audit(1790144351.670:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 846.842104][ T33] audit: type=1326 audit(1790144351.680:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.5.861" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f2d1699e159 code=0x7ffc0000 [ 847.701587][ C1] net_ratelimit: 108 callbacks suppressed [ 848.057739][ T51] batman_adv: batadv0: Interface deactivated: gretap1 [ 848.722979][T10809] loop7: detected capacity change from 0 to 32768 [ 848.757610][T10809] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 848.757626][T10809] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 848.915662][T10809] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 4ms [ 848.930860][ T5728] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 848.930881][ T5728] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 849.949200][T10822] random: crng reseeded on system resumption [ 850.460612][T10822] hwrng_fill thread creation failed [ 850.648151][ T5728] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1717ms [ 850.924866][ T5728] gfs2: fsid=syz:syz.0: jid=0: Done [ 850.926557][T10809] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 850.957710][T10809] gfs2: fsid=syz:syz.0: R: n:1970324836974660 f:00 b:0/0 i:0 q:0 r:0 e:0 [ 850.957765][T10809] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - RG = 1970324836974660, function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 792 [ 850.957848][T10809] gfs2: fsid=syz:syz.0: G: s:UN n:3/7000000000044 f:an t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0 [ 850.957971][T10809] CPU: 1 UID: 0 PID: 10809 Comm: syz.7.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.957998][T10809] Tainted: [L]=SOFTLOCKUP [ 850.958006][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.958018][T10809] Call Trace: [ 850.958049][T10809] [ 850.958099][T10809] dump_stack_lvl+0xe8/0x150 [ 850.958197][T10809] gfs2_withdraw+0xc3/0x1b0 [ 850.958281][T10809] gfs2_consist_rgrpd_i+0x1a0/0x240 [ 850.958310][T10809] ? __pfx_gfs2_consist_rgrpd_i+0x10/0x10 [ 850.958354][T10809] ? __pfx_glock_wake_function+0x10/0x10 [ 850.958431][T10809] ? mutex_init_lockdep+0xdf/0x110 [ 850.958465][T10809] gfs2_ri_update+0x578/0x1a00 [ 850.958509][T10809] ? inode_dio_wait+0x7f/0x270 [ 850.958574][T10809] ? __pfx_gfs2_ri_update+0x10/0x10 [ 850.958612][T10809] ? inode_go_held+0xe7/0x1f0 [ 850.958639][T10809] ? gfs2_glock_wait+0x205/0x2a0 [ 850.958687][T10809] gfs2_rindex_update+0x312/0x3d0 [ 850.958719][T10809] ? __pfx_gfs2_rindex_update+0x10/0x10 [ 850.958749][T10809] ? init_inodes+0x24e/0x320 [ 850.958778][T10809] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 850.958849][T10809] init_inodes+0x24e/0x320 [ 850.958878][T10809] gfs2_fill_super+0x193f/0x20b0 [ 850.958926][T10809] ? __pfx_gfs2_fill_super+0x10/0x10 [ 850.958956][T10809] ? init_locking+0xb8/0x210 [ 850.958983][T10809] ? sb_set_blocksize+0x155/0x240 [ 850.959074][T10809] ? setup_bdev_super+0x586/0x680 [ 850.959107][T10809] get_tree_bdev_flags+0x430/0x4f0 [ 850.959131][T10809] ? __pfx_gfs2_fill_super+0x10/0x10 [ 850.959156][T10809] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 850.959190][T10809] gfs2_get_tree+0x51/0x1e0 [ 850.959218][T10809] vfs_get_tree+0x92/0x2a0 [ 850.959243][T10809] do_new_mount+0x319/0xdc0 [ 850.959279][T10809] ? __pfx_do_new_mount+0x10/0x10 [ 850.959310][T10809] ? ns_capable+0x84/0xe0 [ 850.959339][T10809] ? path_mount+0x647/0x1050 [ 850.959371][T10809] ? user_path_at+0xd4/0x160 [ 850.959393][T10809] __se_sys_mount+0x31d/0x420 [ 850.959418][T10809] ? __pfx___se_sys_mount+0x10/0x10 [ 850.959443][T10809] ? __x64_sys_mount+0x20/0xc0 [ 850.959464][T10809] do_syscall_64+0x166/0x520 [ 850.959492][T10809] ? trace_irq_disable+0x3b/0x140 [ 850.959517][T10809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.959538][T10809] ? clear_bhb_loop+0x70/0xc0 [ 850.959564][T10809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.959584][T10809] RIP: 0033:0x7f6a56b9f3ca [ 850.959635][T10809] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.959653][T10809] RSP: 002b:00007f6a57acde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 850.959702][T10809] RAX: ffffffffffffffda RBX: 00007f6a57acdee0 RCX: 00007f6a56b9f3ca [ 850.959718][T10809] RDX: 0000200000037f40 RSI: 00002000000003c0 RDI: 00007f6a57acdea0 [ 850.959733][T10809] RBP: 0000200000037f40 R08: 00007f6a57acdee0 R09: 0000000001010084 [ 850.959749][T10809] R10: 0000000001010084 R11: 0000000000000246 R12: 00002000000003c0 [ 850.959763][T10809] R13: 00007f6a57acdea0 R14: 0000000000037fb0 R15: 00002000000010c0 [ 850.959799][T10809] [ 850.975257][ T51] batman_adv: batadv0: Removing interface: gretap1 [ 852.422400][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.513303][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.686608][ T51] bond0 (unregistering): Released all slaves [ 852.821627][ C1] net_ratelimit: 47 callbacks suppressed [ 853.919146][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 853.919373][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 853.919500][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x547a instead [ 853.919595][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5a6a instead [ 853.919776][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 853.919932][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 853.920028][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 853.920135][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 853.920533][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 853.920817][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 853.921017][T10834] jffs2: Further such events for this erase block will not be printed [ 853.946744][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 853.946839][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 853.958486][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x547a instead [ 853.958590][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5a6a instead [ 853.958682][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 853.971021][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 853.971051][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 853.971740][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 853.971999][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 853.972169][T10834] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 853.972250][T10834] jffs2: Further such events for this erase block will not be printed [ 853.987481][T10834] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 853.987586][T10834] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 854.247426][T10693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.252863][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 854.408467][T10693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.426459][ T51] tipc: Left network mode [ 855.722184][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 856.748897][T10693] team0: Port device team_slave_0 added [ 856.760965][T10693] team0: Port device team_slave_1 added [ 857.211019][T10861] virtio-fs: tag not found [ 858.421571][ C0] net_ratelimit: 70 callbacks suppressed [ 860.055208][T10693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.055220][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.055245][T10693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.111443][T10693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.111455][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.111690][T10693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.239957][T10881] loop7: detected capacity change from 0 to 8 [ 861.293670][T10879] hub 8-0:1.0: USB hub found [ 861.300219][T10879] hub 8-0:1.0: 1 port detected [ 863.461560][ C1] net_ratelimit: 85 callbacks suppressed [ 864.015787][T10693] hsr_slave_0: entered promiscuous mode [ 864.018348][T10693] hsr_slave_1: entered promiscuous mode [ 864.019507][T10693] debugfs: 'hsr0' already exists in 'hsr' [ 864.019523][T10693] Cannot create hsr debugfs directory [ 864.326132][ T51] hsr_slave_0: left promiscuous mode [ 865.060712][ T51] hsr_slave_1: left promiscuous mode [ 865.088602][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.088745][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.188832][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.188904][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.384036][T10905] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 865.420342][T10905] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 866.410163][ T51] veth1_macvtap: left promiscuous mode [ 866.410443][ T51] veth0_macvtap: left promiscuous mode [ 866.423646][ T51] veth1_vlan: left promiscuous mode [ 866.424010][ T51] veth0_vlan: left promiscuous mode [ 868.473297][T10939] net_ratelimit: 73 callbacks suppressed [ 868.753187][ T51] team0 (unregistering): Port device team_slave_1 removed [ 869.093529][ T51] team0 (unregistering): Port device team_slave_0 removed [ 869.976945][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 870.148578][T10927] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 870.193597][T10927] bond1 (unregistering): Released all slaves [ 870.376302][T10948] loop7: detected capacity change from 0 to 256 [ 870.433128][T10948] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 870.687028][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.687090][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.770586][T10953] overlay: ./file0 is not a directory [ 873.781554][ C1] net_ratelimit: 45 callbacks suppressed [ 876.179195][T10969] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 877.171577][ T51] IPVS: stop unused estimator thread 0... [ 878.910984][ T4385] net_ratelimit: 225 callbacks suppressed [ 879.790730][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 883.646154][T11008] Bluetooth: hci6: command 0x0406 tx timeout [ 883.646210][T11008] Bluetooth: hci4: command 0x0406 tx timeout [ 884.025359][ T45] net_ratelimit: 45 callbacks suppressed [ 884.128948][T11022] No source specified [ 884.979326][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.000185][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.009264][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.021429][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.029869][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 887.008752][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 887.030254][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 887.046046][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 887.071044][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 887.110259][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 887.151845][T11018] Bluetooth: hci1: command tx timeout [ 888.022184][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.152355][ T5847] net_ratelimit: 72 callbacks suppressed [ 889.226883][ T5611] Bluetooth: hci1: command tx timeout [ 889.230042][ T5616] Bluetooth: hci2: command tx timeout [ 891.507899][ T5616] Bluetooth: hci2: command tx timeout [ 891.507945][ T5616] Bluetooth: hci1: command tx timeout [ 891.603629][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.937054][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 893.551722][ T5611] Bluetooth: hci1: command tx timeout [ 893.551756][ T5611] Bluetooth: hci2: command tx timeout [ 894.261540][ C0] net_ratelimit: 85 callbacks suppressed [ 895.023331][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.626294][ T5611] Bluetooth: hci2: command tx timeout [ 898.362058][T11130] syz.7.921: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 898.362998][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.7.921 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.363029][T11130] Tainted: [L]=SOFTLOCKUP [ 898.363037][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.363050][T11130] Call Trace: [ 898.363059][T11130] [ 898.363070][T11130] dump_stack_lvl+0xe8/0x150 [ 898.363109][T11130] warn_alloc+0x24d/0x270 [ 898.363173][T11130] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 898.363287][T11130] ? security_file_ioctl+0xc3/0x2a0 [ 898.363360][T11130] ? __pfx_warn_alloc+0x10/0x10 [ 898.363407][T11130] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 898.363455][T11130] ? __mutex_trylock_common+0x15f/0x270 [ 898.363492][T11130] ? __pfx___mutex_trylock_common+0x10/0x10 [ 898.363540][T11130] ? trace_contention_end+0x3d/0x140 [ 898.363575][T11130] ? __mutex_lock+0x305/0x15a0 [ 898.363611][T11130] ? tomoyo_path_number_perm+0x219/0x5f0 [ 898.363644][T11130] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 898.363675][T11130] ? dvb_demux_do_ioctl+0x320/0x540 [ 898.363785][T11130] ? __pfx___mutex_lock+0x10/0x10 [ 898.363818][T11130] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 898.363850][T11130] vmalloc_noprof+0xb2/0xe0 [ 898.363882][T11130] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 898.363915][T11130] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 898.363952][T11130] dvb_demux_do_ioctl+0x45d/0x540 [ 898.363988][T11130] dvb_usercopy+0x199/0x2e0 [ 898.364013][T11130] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 898.364039][T11130] ? __pfx_dvb_usercopy+0x10/0x10 [ 898.364081][T11130] ? __fget_files+0x2a/0x420 [ 898.364108][T11130] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 898.364146][T11130] dvb_demux_ioctl+0x29/0x40 [ 898.364176][T11130] __se_sys_ioctl+0xfc/0x170 [ 898.364207][T11130] do_syscall_64+0x166/0x520 [ 898.364238][T11130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.364261][T11130] ? clear_bhb_loop+0x70/0xc0 [ 898.364289][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.364312][T11130] RIP: 0033:0x7f6a56b9e159 [ 898.364335][T11130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.364354][T11130] RSP: 002b:00007f6a57aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.364377][T11130] RAX: ffffffffffffffda RBX: 00007f6a56e26090 RCX: 00007f6a56b9e159 [ 898.364393][T11130] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 898.364408][T11130] RBP: 00007f6a56c3506b R08: 0000000000000000 R09: 0000000000000000 [ 898.364422][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.364435][T11130] R13: 00007f6a56e26128 R14: 00007f6a56e26090 R15: 00007fff24a967e8 [ 898.364472][T11130] [ 898.364569][T11130] Mem-Info: [ 898.364624][T11130] active_anon:9483 inactive_anon:14617 isolated_anon:0 [ 898.364624][T11130] active_file:34 inactive_file:62005 isolated_file:0 [ 898.364624][T11130] unevictable:6725 dirty:362 writeback:0 [ 898.364624][T11130] slab_reclaimable:11429 slab_unreclaimable:100855 [ 898.364624][T11130] mapped:29967 shmem:18387 pagetables:1369 [ 898.364624][T11130] sec_pagetables:0 bounce:0 [ 898.364624][T11130] kernel_misc_reclaimable:0 [ 898.364624][T11130] free:778249 free_pcp:17777 free_cma:0 [ 898.364739][T11130] Node 0 active_anon:37932kB inactive_anon:58468kB active_file:136kB inactive_file:247808kB unevictable:26900kB isolated(anon):0kB isolated(file):0kB mapped:78908kB dirty:1448kB writeback:0kB shmem:73548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13024kB pagetables:5312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 898.365458][T11130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 898.365595][T11130] Node 0 DMA free:11196kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 898.365730][T11130] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 898.397760][T11130] Node 0 DMA32 free:246288kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37932kB inactive_anon:58468kB active_file:136kB inactive_file:247808kB unevictable:21900kB writepending:1448kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:55124kB local_pcp:39612kB free_cma:0kB [ 898.397929][T11130] lowmem_reserve[]: 0 0 0 0 0 [ 898.398135][T11130] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.398250][T11130] lowmem_reserve[]: 0 0 0 0 0 [ 898.398586][T11130] Node 1 Normal free:2855512kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:20880kB local_pcp:6216kB free_cma:0kB [ 898.398705][T11130] lowmem_reserve[]: 0 0 0 0 0 [ 898.398893][T11130] Node 0 DMA: [ 898.592050][T11130] 3*4kB (ME) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 11196kB [ 898.592594][T11130] Node 0 DMA32: 3204*4kB (UME) 1312*8kB (UME) 1176*16kB (UME) 1429*32kB (UME) 559*64kB (UME) 244*128kB (UME) 172*256kB (UME) 61*512kB (UM) 27*1024kB (UM) 3*2048kB (U) 2*4096kB (U) = 272112kB [ 898.592774][T11130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 898.592883][T11130] Node 1 Normal: 43*4kB (UM) 44*8kB (UM) 44*16kB (UME) 6*32kB (UM) 4*64kB (UM) 2*128kB (M) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 694*4096kB (UM) = 2855564kB [ 898.593052][T11130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.593070][T11130] Node 0 hugepages_total=471 hugepages_free=471 hugepages_surp=0 hugepages_size=2048kB [ 898.593088][T11130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.593104][T11130] Node 1 hugepages_total=470 hugepages_free=470 hugepages_surp=0 hugepages_size=2048kB [ 898.593121][T11130] 80390 total pagecache pages [ 898.593130][T11130] 0 pages in swap cache [ 898.593198][T11130] Free swap = 124996kB [ 898.593208][T11130] Total swap = 124996kB [ 898.593217][T11130] 2097051 pages RAM [ 898.593225][T11130] 0 pages HighMem/MovableOnly [ 898.593234][T11130] 428781 pages reserved [ 898.593242][T11130] 0 pages cma reserved [ 898.988732][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.301610][ C0] net_ratelimit: 50 callbacks suppressed [ 903.467212][ T51] bridge_slave_1: left allmulticast mode [ 903.467235][ T51] bridge_slave_1: left promiscuous mode [ 903.467474][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.065829][ T51] bridge_slave_0: left allmulticast mode [ 904.065850][ T51] bridge_slave_0: left promiscuous mode [ 904.072311][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.329935][T11178] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.935: No space for directory leaf checksum. Please run e2fsck -D. [ 904.329969][T11178] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.935: checksumming directory block 0 [ 904.821591][ C1] net_ratelimit: 91 callbacks suppressed [ 905.168275][T11178] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.935: No space for directory leaf checksum. Please run e2fsck -D. [ 905.168304][T11178] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.935: checksumming directory block 0 [ 905.168578][T11178] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.935: No space for directory leaf checksum. Please run e2fsck -D. [ 905.168606][T11178] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.935: checksumming directory block 0 [ 906.568699][T11184] Cannot find add_set index 3 as target [ 907.007982][T11191] loop7: detected capacity change from 0 to 4096 [ 907.022138][T11191] ntfs3(loop7): Primary boot: invalid bytes per index 3072(3). [ 907.035743][T11191] ntfs3(loop7): try to read out of volume at offset 0x1ffe00 [ 908.775342][T11207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.031538][ C0] net_ratelimit: 69 callbacks suppressed [ 910.888823][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 912.684181][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.730499][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.759844][ T51] bond0 (unregistering): Released all slaves [ 913.972920][ T51] tipc: Left network mode [ 915.221587][ C1] net_ratelimit: 74 callbacks suppressed [ 916.922603][ T33] kauditd_printk_skb: 91 callbacks suppressed [ 916.922633][ T33] audit: type=1326 audit(1790144421.770:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 916.924149][ T33] audit: type=1326 audit(1790144421.770:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 916.925053][ T33] audit: type=1326 audit(1790144421.770:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 916.928367][ T33] audit: type=1326 audit(1790144421.770:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 916.930926][ T33] audit: type=1326 audit(1790144421.770:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 916.964362][ T33] audit: type=1326 audit(1790144421.810:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 916.965545][ T33] audit: type=1326 audit(1790144421.810:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 916.966519][ T33] audit: type=1326 audit(1790144421.810:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a56b97ed7 code=0x7ffc0000 [ 916.967534][ T33] audit: type=1326 audit(1790144421.810:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a56b3f4d9 code=0x7ffc0000 [ 916.968691][ T33] audit: type=1326 audit(1790144421.810:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.7.948" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a56b97ed7 code=0x7ffc0000 [ 918.199913][T11025] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.200060][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.200256][T11025] bridge_slave_0: entered allmulticast mode [ 918.215098][T11025] bridge_slave_0: entered promiscuous mode [ 918.270077][T11274] loop7: detected capacity change from 0 to 128 [ 918.275284][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.275402][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.275607][T11025] bridge_slave_1: entered allmulticast mode [ 918.292823][T11025] bridge_slave_1: entered promiscuous mode [ 918.334428][T11274] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 919.725028][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 920.502467][ C1] net_ratelimit: 62 callbacks suppressed [ 921.067291][T11025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.119132][T11025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.010028][ T51] hsr_slave_0: left promiscuous mode [ 922.988921][ T51] hsr_slave_1: left promiscuous mode [ 922.990216][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.990237][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.446166][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.446184][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.296545][ T51] veth1_macvtap: left promiscuous mode [ 924.296577][ T51] veth0_macvtap: left promiscuous mode [ 924.296645][ T51] veth1_vlan: left promiscuous mode [ 924.296689][ T51] veth0_vlan: left promiscuous mode [ 925.497434][ T33] kauditd_printk_skb: 76 callbacks suppressed [ 925.497509][ T33] audit: type=1800 audit(1790144430.280:2429): pid=11319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.963" name=08 dev="sda1" ino=2062 res=0 errno=0 [ 926.021573][ C0] net_ratelimit: 35 callbacks suppressed [ 929.697916][ T51] team0 (unregistering): Port device team_slave_1 removed [ 929.797823][ T51] team0 (unregistering): Port device team_slave_0 removed [ 930.590774][T11038] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.591092][T11038] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.591321][T11038] bridge_slave_0: entered allmulticast mode [ 930.616088][T11038] bridge_slave_0: entered promiscuous mode [ 930.653794][T11038] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.653925][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.654119][T11038] bridge_slave_1: entered allmulticast mode [ 930.656583][T11038] bridge_slave_1: entered promiscuous mode [ 930.691421][T11025] team0: Port device team_slave_0 added [ 930.874311][T11025] team0: Port device team_slave_1 added [ 930.965005][T11038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.078699][T11038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.188038][T11025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.188049][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.188074][T11025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.352729][T11025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.352741][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.352769][T11025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.365673][T11038] team0: Port device team_slave_0 added [ 931.376999][T11038] team0: Port device team_slave_1 added [ 931.391744][ C0] net_ratelimit: 67 callbacks suppressed [ 932.045855][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.045948][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.079507][T11359] xt_connbytes: Forcing CT accounting to be enabled [ 933.149695][T11038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.149708][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.149734][T11038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.182926][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.975'. [ 933.399508][T11038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.399520][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.399543][T11038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.085254][T11025] hsr_slave_0: entered promiscuous mode [ 935.103724][T11025] hsr_slave_1: entered promiscuous mode [ 936.139651][ T51] IPVS: stop unused estimator thread 0... [ 936.478809][T11038] hsr_slave_0: entered promiscuous mode [ 936.480158][T11038] hsr_slave_1: entered promiscuous mode [ 936.481114][T11038] debugfs: 'hsr0' already exists in 'hsr' [ 936.481132][T11038] Cannot create hsr debugfs directory [ 936.981714][ C1] net_ratelimit: 45 callbacks suppressed [ 937.509287][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 941.732019][T11025] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 941.766349][T11025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 941.767374][T11025] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 942.191569][ C1] net_ratelimit: 106 callbacks suppressed [ 942.789837][T11025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.790230][T11429] netlink: 'syz.6.990': attribute type 49 has an invalid length. [ 942.791705][T11025] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 942.994105][T11025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.979051][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.102202][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.144270][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.212168][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.244947][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.149149][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 945.697881][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 945.723266][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 945.725177][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 945.729012][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 945.730150][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 946.162892][ T51] bridge_slave_1: left allmulticast mode [ 946.162958][ T51] bridge_slave_1: left promiscuous mode [ 946.163967][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.534338][ T51] bridge_slave_0: left allmulticast mode [ 946.534359][ T51] bridge_slave_0: left promiscuous mode [ 946.534599][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.671416][ T5616] Bluetooth: hci0: command tx timeout [ 948.021556][ C1] net_ratelimit: 44 callbacks suppressed [ 948.022240][ T5616] Bluetooth: hci5: command tx timeout [ 948.277665][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.442437][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.561938][ T51] bond0 (unregistering): Released all slaves [ 948.744859][ T5616] Bluetooth: hci0: command tx timeout [ 949.063682][ T51] hsr_slave_0: left promiscuous mode [ 949.105397][ T51] hsr_slave_1: left promiscuous mode [ 949.106745][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.183483][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.103236][ T5616] Bluetooth: hci5: command tx timeout [ 950.941674][ T5616] Bluetooth: hci0: command tx timeout [ 952.181616][ T5616] Bluetooth: hci5: command tx timeout [ 952.981811][ T5616] Bluetooth: hci0: command tx timeout [ 953.391690][ C1] net_ratelimit: 67 callbacks suppressed [ 953.813499][ T51] team0 (unregistering): Port device team_slave_1 removed [ 953.953021][ T51] team0 (unregistering): Port device team_slave_0 removed [ 954.263725][ T5616] Bluetooth: hci5: command tx timeout [ 954.356745][T11540] Line length is too long: Should be less than 4094 [ 954.746475][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16 [ 955.880403][T11556] loop7: detected capacity change from 0 to 8 [ 956.951928][T11556] SQUASHFS error: zlib decompression failed, data probably corrupt [ 956.951952][T11556] SQUASHFS error: Failed to read block 0x9b: -5 [ 956.951973][T11556] SQUASHFS error: Unable to read metadata cache entry [99] [ 956.951981][T11556] SQUASHFS error: Unable to read inode 0x127 ** 95622 printk messages dropped ** ** 5386 printk messages dropped ** [ 958.741558][ C0] net_ratelimit: 81 callbacks suppressed [ 962.494933][ T71] IPVS: starting estimator thread 0... [ 962.631743][T11596] IPVS: using max 24 ests per chain, 57600 per kthread [ 962.763510][T11601] Line length is too long: Should be less than 4094 [ 962.999744][T11612] batman_adv: batadv0: Adding interface: veth0 [ 962.999754][T11612] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.999784][T11612] batman_adv: batadv0: Interface activated: veth0 [ 963.725126][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.725154][T11605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.023192][ T1021] net_ratelimit: 70 callbacks suppressed [ 964.302788][ T5730] hid_parser_main: 396 callbacks suppressed [ 964.302837][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.302869][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.302893][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.302917][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.302940][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.302964][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.302987][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.303011][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.303034][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.303057][ T5730] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 964.389919][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.389936][T11605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.404596][T11605] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 964.404615][T11605] batman_adv: batadv0: Removing interface: ip6gretap1 [ 964.474776][T11605] batman_adv: batadv0: Interface deactivated: veth0 [ 964.474795][T11605] batman_adv: batadv0: Removing interface: veth0 [ 964.515979][ T5730] hid-generic 0005:10CF:0005.0002: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 964.742481][T11618] tipc: Enabling of bearer rejected, failed to enable media [ 964.869727][T11636] udevd[11636]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 966.527338][T11652] sctp: [Deprecated]: syz.7.1027 (pid 11652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.527338][T11652] Use struct sctp_sack_info instead [ 969.147771][ T45] net_ratelimit: 42 callbacks suppressed [ 970.396255][T11682] kvm_do_msr_access: 260 callbacks suppressed [ 970.413911][T11682] kvm [11680]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 970.414397][T11682] kvm [11680]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 970.452030][T11682] kvm_intel: kvm [11680]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x76 [ 972.228432][T11709] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1037'. [ 972.229830][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'. [ 973.143696][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.143818][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.144030][T11441] bridge_slave_0: entered allmulticast mode [ 973.164966][T11441] bridge_slave_0: entered promiscuous mode [ 973.190605][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.190923][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.191171][T11441] bridge_slave_1: entered allmulticast mode [ 973.209490][T11441] bridge_slave_1: entered promiscuous mode [ 973.601739][T11713] loop7: detected capacity change from 0 to 40427 [ 973.604858][T11713] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 973.604883][T11713] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 973.636639][T11713] F2FS-fs (loop7): invalid crc value [ 973.769730][T11713] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 973.818302][T11713] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 973.818335][T11713] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 973.845753][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.871405][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.182284][ C1] net_ratelimit: 38 callbacks suppressed [ 975.520903][T11441] team0: Port device team_slave_0 added [ 975.903733][T11441] team0: Port device team_slave_1 added [ 978.221814][ T51] bridge_slave_1: left allmulticast mode [ 978.221836][ T51] bridge_slave_1: left promiscuous mode [ 978.222135][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.447557][ T51] bridge_slave_0: left allmulticast mode [ 978.447588][ T51] bridge_slave_0: left promiscuous mode [ 978.447819][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.343101][T10349] net_ratelimit: 35 callbacks suppressed [ 981.186409][T11770] kvm_do_msr_access: 1421 callbacks suppressed [ 982.248441][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.617186][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.686591][T11770] kvm [11769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100000000 [ 982.714858][T11770] kvm_intel: kvm [11769]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x76 [ 982.795155][ T51] bond0 (unregistering): Released all slaves [ 982.927694][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.927706][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.927731][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.985006][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.985018][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.985044][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.479900][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.480079][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.480262][T11461] bridge_slave_0: entered allmulticast mode [ 983.516445][T11461] bridge_slave_0: entered promiscuous mode [ 984.453792][T10351] net_ratelimit: 37 callbacks suppressed [ 984.503463][T11780] sctp: [Deprecated]: syz.4.1048 (pid 11780) Use of int in max_burst socket option. [ 984.503463][T11780] Use struct sctp_assoc_value instead [ 984.649921][ T51] hsr_slave_0: left promiscuous mode [ 984.682928][ T51] hsr_slave_1: left promiscuous mode [ 984.685907][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.715914][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.760009][T11791] loop7: detected capacity change from 0 to 128 [ 987.894177][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 987.894199][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 987.894218][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x547a instead [ 987.894238][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5a6a instead [ 987.894254][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 987.894270][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 987.894288][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 987.894344][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 987.894378][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 987.894411][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 987.894427][T11805] jffs2: Further such events for this erase block will not be printed [ 987.894776][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 987.894795][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 987.894813][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x547a instead [ 987.894833][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5a6a instead [ 987.894851][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 987.894868][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 987.894885][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 987.894915][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 987.894949][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 987.894980][T11805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 987.894996][T11805] jffs2: Further such events for this erase block will not be printed [ 987.895414][T11805] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 987.895425][T11805] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 988.874454][ T51] team0 (unregistering): Port device team_slave_1 removed [ 988.924478][ T51] team0 (unregistering): Port device team_slave_0 removed [ 989.240598][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.240809][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.241114][T11461] bridge_slave_1: entered allmulticast mode [ 989.268396][T11461] bridge_slave_1: entered promiscuous mode [ 989.368429][T11810] loop7: detected capacity change from 0 to 1024 [ 989.387200][T11810] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 989.407581][T11810] JBD2: no valid journal superblock found [ 989.435539][T11810] EXT4-fs (loop7): Could not load journal inode [ 989.541521][ C1] net_ratelimit: 35 callbacks suppressed [ 989.973417][T11812] netlink: 'syz.6.1056': attribute type 1 has an invalid length. [ 989.973995][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1056'. [ 990.716646][T11441] hsr_slave_0: entered promiscuous mode [ 990.729153][T11441] hsr_slave_1: entered promiscuous mode [ 990.974718][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.018424][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.857647][T11461] team0: Port device team_slave_0 added [ 992.419982][T11461] team0: Port device team_slave_1 added [ 992.972800][T11840] loop7: detected capacity change from 0 to 32768 [ 993.004217][T11840] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1060 (11840) [ 993.465800][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.465866][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.963898][T11847] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 993.964284][T11847] udc dummy_udc.0: failed to start g1: -19 [ 994.080303][T11847] UDC core: g1: couldn't find an available UDC or it's busy [ 994.219587][T11840] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 994.219626][T11840] BTRFS info (device loop7): using sha256 checksum algorithm [ 995.170574][ T13] net_ratelimit: 41 callbacks suppressed [ 995.318365][T11840] BTRFS info (device loop7): enabling ssd optimizations [ 995.318389][T11840] BTRFS info (device loop7): turning on sync discard [ 995.318406][T11840] BTRFS info (device loop7): enabling free space tree [ 995.318426][T11840] BTRFS info (device loop7): use zlib compression, level 3 [ 995.469469][ T33] audit: type=1800 audit(1790144500.310:2430): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1060" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 995.478451][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.478462][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.478484][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.638171][ T51] bridge_slave_1: left allmulticast mode [ 995.638189][ T51] bridge_slave_1: left promiscuous mode [ 995.638425][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.755349][ T51] bridge_slave_0: left allmulticast mode [ 995.755368][ T51] bridge_slave_0: left promiscuous mode [ 995.755628][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.575380][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.687300][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.755592][ T51] bond0 (unregistering): Released all slaves [ 996.817358][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.817371][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.817397][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.818001][T11874] 8021q: VLANs not supported on wg0 [ 996.846696][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 997.259598][ T51] hsr_slave_0: left promiscuous mode [ 997.331379][ T51] hsr_slave_1: left promiscuous mode [ 997.357076][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.405691][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.192716][T10135] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1000.175359][T10352] net_ratelimit: 33 callbacks suppressed [ 1000.909746][ T52] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1001.183957][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 1001.188005][ T52] usb 5-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1001.198971][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.199059][ T52] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1001.199398][ T52] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1001.199764][ T52] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1001.200071][ T52] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1001.200120][ T52] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1001.376772][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.376792][ T52] usb 5-1: Product: syz [ 1001.376806][ T52] usb 5-1: Manufacturer: syz [ 1001.376820][ T52] usb 5-1: SerialNumber: syz [ 1001.664082][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1001.762749][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1003.326578][ T52] usb 5-1: selecting invalid altsetting 0 [ 1003.358099][ T52] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 1003.392213][ T52] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1003.574700][ T52] usb 5-1: USB disconnect, device number 14 [ 1004.125456][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1004.148902][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1004.151352][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1004.172869][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1004.176521][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1004.270317][T11919] udevd[11919]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1004.503353][T11461] hsr_slave_0: entered promiscuous mode [ 1004.515249][T11461] hsr_slave_1: entered promiscuous mode [ 1004.523113][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 1004.523131][T11461] Cannot create hsr debugfs directory [ 1005.542611][ T4385] net_ratelimit: 45 callbacks suppressed [ 1006.101955][ T5730] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1006.258670][ T5730] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1006.274444][ T5616] Bluetooth: hci1: command tx timeout [ 1006.286264][ T5730] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.286283][ T5730] usb 8-1: Product: syz [ 1006.286298][ T5730] usb 8-1: Manufacturer: syz [ 1006.286312][ T5730] usb 8-1: SerialNumber: syz [ 1006.364193][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1006.383448][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1006.385862][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1006.387788][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1006.418872][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1006.503431][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1007.028260][ T5730] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1007.028286][ T5730] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1007.844485][ T5730] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1007.852389][ T5730] usb 8-1: USB disconnect, device number 2 [ 1008.346504][ T5616] Bluetooth: hci1: command tx timeout [ 1008.499956][T11978] netlink: 'syz.4.1082': attribute type 22 has an invalid length. [ 1008.499988][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 1008.501588][ T5616] Bluetooth: hci2: command tx timeout [ 1008.868192][T11978] bond0: option ad_select: unable to set because the bond device is up [ 1009.362138][T12002] 9pnet_virtio: no channels available for device syz [ 1010.473422][ T5616] Bluetooth: hci1: command tx timeout [ 1010.575947][ T51] bridge_slave_1: left allmulticast mode [ 1010.575969][ T51] bridge_slave_1: left promiscuous mode [ 1010.576218][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.664009][ T51] bridge_slave_0: left allmulticast mode [ 1010.664031][ T51] bridge_slave_0: left promiscuous mode [ 1010.664208][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.746199][ T71] net_ratelimit: 62 callbacks suppressed [ 1011.041803][T12016] overlayfs: failed to clone upperpath [ 1011.722488][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.842276][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.923611][ T51] bond0 (unregistering): Released all slaves [ 1012.287336][ T51] hsr_slave_0: left promiscuous mode [ 1012.322014][ T51] hsr_slave_1: left promiscuous mode [ 1012.325595][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.357068][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.502058][ T5616] Bluetooth: hci1: command tx timeout [ 1014.318522][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1014.484980][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1015.862578][ T1021] net_ratelimit: 69 callbacks suppressed [ 1016.772451][ T5714] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1016.906132][ T5714] usb 8-1: device descriptor read/64, error -71 [ 1017.143936][ T5714] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1017.172935][T12065] overlayfs: failed to clone upperpath [ 1017.201762][ T52] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1017.298531][ T5714] usb 8-1: device descriptor read/64, error -71 [ 1017.332464][ T52] usb 5-1: device descriptor read/64, error -71 [ 1017.402893][ T5714] usb usb8-port1: attempt power cycle [ 1017.571664][ T52] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1017.704738][ T52] usb 5-1: device descriptor read/64, error -71 [ 1017.741559][ T5714] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1017.765210][ T5714] usb 8-1: device descriptor read/8, error -71 [ 1017.816481][ T52] usb usb5-port1: attempt power cycle [ 1018.002558][ T5714] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1018.022919][ T5714] usb 8-1: device descriptor read/8, error -71 [ 1018.149105][ T5714] usb usb8-port1: unable to enumerate USB device [ 1018.204281][ T52] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1018.226416][ T52] usb 5-1: device descriptor read/8, error -71 [ 1018.404380][ T7875] bridge_slave_1: left allmulticast mode [ 1018.404401][ T7875] bridge_slave_1: left promiscuous mode [ 1018.404691][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.453057][ T7875] bridge_slave_0: left allmulticast mode [ 1018.453186][ T7875] bridge_slave_0: left promiscuous mode [ 1018.453436][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.462844][ T52] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1018.482337][ T52] usb 5-1: device descriptor read/8, error -71 [ 1018.592113][ T52] usb usb5-port1: unable to enumerate USB device [ 1020.296022][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.413341][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.487093][ T7875] bond0 (unregistering): Released all slaves [ 1021.100402][ T1021] net_ratelimit: 76 callbacks suppressed [ 1022.541751][ T7875] hsr_slave_0: left promiscuous mode [ 1022.791664][ T7875] hsr_slave_1: left promiscuous mode [ 1022.821123][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.863564][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.010427][T12133] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1111'. [ 1023.255522][T12138] Invalid ELF header magic: != ELF [ 1023.382503][T12138] overlayfs: failed to clone lowerpath [ 1023.541966][ T5714] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1023.681797][ T5714] usb 5-1: device descriptor read/64, error -71 [ 1023.845551][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1111'. [ 1023.895588][T12135] nbd: nbd64 already in use [ 1024.101568][ T5714] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1024.123277][ T33] audit: type=1326 audit(1790144528.970:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.123818][ T33] audit: type=1326 audit(1790144528.970:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.126892][ T33] audit: type=1326 audit(1790144528.970:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.126942][ T33] audit: type=1326 audit(1790144528.970:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.126988][ T33] audit: type=1326 audit(1790144528.970:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.128970][ T33] audit: type=1326 audit(1790144528.970:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.129407][ T33] audit: type=1326 audit(1790144528.970:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.131215][ T33] audit: type=1326 audit(1790144528.970:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a56b9e159 code=0x7ffc0000 [ 1024.278990][ T5714] usb 5-1: device descriptor read/64, error -71 [ 1024.280604][ T33] audit: type=1326 audit(1790144529.130:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a56b5e98e code=0x7ffc0000 [ 1024.280652][ T33] audit: type=1326 audit(1790144529.130:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.7.1112" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a56b9ddeb code=0x7ffc0000 [ 1024.404914][ T5714] usb usb5-port1: attempt power cycle [ 1024.572049][ T5738] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1024.790172][ T5738] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1024.842014][ T5714] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1024.874603][ T5714] usb 5-1: device descriptor read/8, error -71 [ 1024.960430][ T5738] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.960488][ T5738] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1024.999903][ T5738] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.999924][ T5738] usb 8-1: Product: syz [ 1024.999939][ T5738] usb 8-1: Manufacturer: syz [ 1024.999954][ T5738] usb 8-1: SerialNumber: syz [ 1025.112220][ T5714] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1025.303529][ T5738] sisusb 8-1:1.0: Invalid USB2VGA device [ 1025.303549][ T5738] sisusb 8-1:1.0: probe with driver sisusb failed with error -22 [ 1025.304692][ T5714] usb 5-1: device descriptor read/8, error -71 [ 1025.426584][ T5714] usb usb5-port1: unable to enumerate USB device [ 1026.044856][ T5738] usb 8-1: USB disconnect, device number 7 [ 1026.138852][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 1026.182848][ T1021] net_ratelimit: 356 callbacks suppressed [ 1026.252470][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 1026.891976][ T5738] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1027.031527][ T5738] usb 8-1: device descriptor read/64, error -71 [ 1027.281900][ T5738] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1027.337318][T11916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.337485][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.337663][T11916] bridge_slave_0: entered allmulticast mode [ 1027.370945][T11916] bridge_slave_0: entered promiscuous mode [ 1027.430314][ T5738] usb 8-1: device descriptor read/64, error -71 [ 1027.512383][T11916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.512710][T11916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.512893][T11916] bridge_slave_1: entered allmulticast mode [ 1027.516652][T11916] bridge_slave_1: entered promiscuous mode [ 1027.522052][ T5738] usb usb8-port1: attempt power cycle [ 1028.742668][ T5738] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1028.763673][ T5738] usb 8-1: device descriptor read/8, error -71 [ 1028.937031][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.940229][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.940437][T11948] bridge_slave_0: entered allmulticast mode [ 1028.947268][T11948] bridge_slave_0: entered promiscuous mode [ 1028.987291][T11916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.988393][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.988564][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.988772][T11948] bridge_slave_1: entered allmulticast mode [ 1029.003647][T11948] bridge_slave_1: entered promiscuous mode [ 1029.042140][ T5738] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1029.063640][ T5738] usb 8-1: device descriptor read/8, error -71 [ 1029.130236][T11916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.173621][ T5738] usb usb8-port1: unable to enumerate USB device [ 1029.627413][T11948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.214599][T11916] team0: Port device team_slave_0 added [ 1030.219305][T11948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.318828][T12191] nvmet_rdma: address family 255 not supported [ 1030.341236][T11916] team0: Port device team_slave_1 added [ 1030.531660][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1030.582426][T11948] team0: Port device team_slave_0 added [ 1030.590719][T11916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.590733][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.590759][T11916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.600730][T11948] team0: Port device team_slave_1 added [ 1030.677523][T11916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.677535][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.677560][T11916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.742298][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1030.743246][ T10] usb 5-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1030.745237][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.745260][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.749254][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.749275][ T10] usb 5-1: Product: syz [ 1030.749289][ T10] usb 5-1: Manufacturer: syz [ 1030.749304][ T10] usb 5-1: SerialNumber: syz [ 1030.888295][T11948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.888308][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.888364][T11948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.977386][T11948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.977398][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.977423][T11948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.017011][T11916] hsr_slave_0: entered promiscuous mode [ 1031.023916][T11916] hsr_slave_1: entered promiscuous mode [ 1031.136181][ T10] usb 5-1: USB disconnect, device number 23 [ 1031.221708][ C1] net_ratelimit: 35 callbacks suppressed [ 1034.787603][T11948] hsr_slave_0: entered promiscuous mode [ 1034.795225][T11948] hsr_slave_1: entered promiscuous mode [ 1034.799632][T11948] debugfs: 'hsr0' already exists in 'hsr' [ 1034.799652][T11948] Cannot create hsr debugfs directory [ 1036.242002][ T5274] net_ratelimit: 33 callbacks suppressed [ 1037.989225][T12225] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1037.989256][T12225] overlayfs: failed to set xattr on upper [ 1037.989261][T12225] overlayfs: ...falling back to redirect_dir=nofollow. [ 1037.989266][T12225] overlayfs: ...falling back to index=off. [ 1037.989271][T12225] overlayfs: ...falling back to uuid=null. [ 1041.381597][ T71] net_ratelimit: 69 callbacks suppressed [ 1041.577062][ T5730] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1041.741571][ T5730] usb 8-1: device descriptor read/64, error -71 [ 1042.062911][ T5730] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1042.369092][ T5730] usb 8-1: device descriptor read/64, error -71 [ 1042.471981][ T5730] usb usb8-port1: attempt power cycle [ 1042.522144][T11916] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1042.614657][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1042.630276][T11916] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1042.680321][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1042.690332][T11916] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1042.763528][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.765307][T11916] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1042.834196][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1042.850080][ T5730] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1042.877813][ T5730] usb 8-1: device descriptor read/8, error -71 [ 1043.111830][ T5730] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1043.143278][ T5730] usb 8-1: device descriptor read/8, error -71 [ 1043.264185][ T5730] usb usb8-port1: unable to enumerate USB device [ 1043.560606][T11948] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1043.662200][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.682716][T11948] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1043.777256][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1043.804282][T11948] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1043.948418][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1043.956107][T11948] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1044.029527][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.846846][T11916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.897273][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.984455][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.984572][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.029839][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.029947][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.262416][ T5714] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1046.347052][T11948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.413025][ T5714] usb 8-1: Using ep0 maxpacket: 32 [ 1046.413858][ T5714] usb 8-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1046.420503][ T5714] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.420528][ T5714] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.432190][T11948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.473703][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.473724][ T5714] usb 8-1: Product: syz [ 1046.473738][ T5714] usb 8-1: Manufacturer: syz [ 1046.473753][ T5714] usb 8-1: SerialNumber: syz [ 1046.476627][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.476746][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.505772][ T71] net_ratelimit: 41 callbacks suppressed [ 1046.538981][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.539096][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.945800][ T5714] usb 8-1: USB disconnect, device number 16 [ 1047.060664][T12241] udevd[12241]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1048.273260][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.379208][T11948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.043060][T12344] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1050.983986][T11948] veth0_vlan: entered promiscuous mode [ 1051.049911][T11948] veth1_vlan: entered promiscuous mode [ 1051.534033][T11948] veth0_macvtap: entered promiscuous mode [ 1051.544871][ T7880] net_ratelimit: 48 callbacks suppressed [ 1051.550906][T11916] veth0_vlan: entered promiscuous mode [ 1051.638472][T12369] ubi0: attaching mtd0 [ 1051.661287][T12369] ubi0: scanning is finished [ 1051.695657][T11948] veth1_macvtap: entered promiscuous mode [ 1052.147004][T11916] veth1_vlan: entered promiscuous mode [ 1052.277487][T12369] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1052.379748][T11948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.395742][T11916] veth0_macvtap: entered promiscuous mode [ 1052.448958][T11948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.498619][ T4385] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.509632][ T7880] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.520315][T11916] veth1_macvtap: entered promiscuous mode [ 1052.702301][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.703466][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.754660][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.761076][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.094582][ T71] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.095674][ T71] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.095716][ T71] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.237405][ T1021] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.919991][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1150'. [ 1053.941924][T12390] syzkaller0: entered promiscuous mode [ 1053.941943][T12390] syzkaller0: entered allmulticast mode [ 1054.334909][T12400] kAFS: No cell specified [ 1054.887296][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.887307][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.917802][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.917850][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.297051][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.297068][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.795172][T12412] loop7: detected capacity change from 0 to 32768 [ 1055.821057][T12412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1160 (12412) [ 1055.853857][T12412] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1055.853893][T12412] BTRFS info (device loop7): using sha256 checksum algorithm [ 1056.126796][T12412] BTRFS info (device loop7): enabling ssd optimizations [ 1056.126812][T12412] BTRFS info (device loop7): turning on sync discard [ 1056.126821][T12412] BTRFS info (device loop7): enabling free space tree [ 1056.126833][T12412] BTRFS info (device loop7): use zlib compression, level 3 [ 1056.742485][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.742527][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.823382][ C1] net_ratelimit: 294 callbacks suppressed [ 1057.419731][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.419749][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.714395][ T33] kauditd_printk_skb: 86 callbacks suppressed [ 1057.714632][ T33] audit: type=1800 audit(1790144562.480:2527): pid=12433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1160" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1060.122800][T10135] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1060.531823][T12451] Line length is too long: Should be less than 4094 [ 1060.891771][ T5730] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1061.072030][ T5730] usb 5-1: Using ep0 maxpacket: 8 [ 1061.082043][ T5730] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1061.086470][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.086498][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25417, setting to 1024 [ 1061.086560][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.143334][ T5730] usb 5-1: config 0 descriptor?? [ 1062.031454][ C1] net_ratelimit: 318 callbacks suppressed [ 1062.223961][ T5730] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1062.604924][T12209] usb 5-1: USB disconnect, device number 24 [ 1066.986998][T12489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.072270][ T1021] net_ratelimit: 115 callbacks suppressed [ 1068.913773][ T5730] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1069.061915][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 1069.063459][ T5730] usb 5-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1069.071874][T12511] bridge0: port 3(syz_tun) entered blocking state [ 1069.071951][T12511] bridge0: port 3(syz_tun) entered disabled state [ 1069.072260][T12511] syz_tun: entered allmulticast mode [ 1069.073833][T12511] syz_tun: entered promiscuous mode [ 1069.074407][T12511] bridge0: port 3(syz_tun) entered blocking state [ 1069.074504][T12511] bridge0: port 3(syz_tun) entered forwarding state [ 1069.106183][ T5730] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.106212][ T5730] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1069.159301][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.159321][ T5730] usb 5-1: Product: syz [ 1069.159335][ T5730] usb 5-1: Manufacturer: syz [ 1069.159349][ T5730] usb 5-1: SerialNumber: syz [ 1069.559508][T12515] Line length is too long: Should be less than 4094 [ 1069.604682][ T5730] usb 5-1: USB disconnect, device number 25 [ 1069.693565][T12453] udevd[12453]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1072.101468][ C1] net_ratelimit: 87 callbacks suppressed [ 1073.189631][T12531] loop9: detected capacity change from 0 to 64 [ 1073.357054][T12529] Process accounting resumed [ 1073.666933][T12536] Line length is too long: Should be less than 4094 [ 1074.638762][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1185'. [ 1074.641353][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1185'. [ 1077.301483][ C0] net_ratelimit: 85 callbacks suppressed [ 1079.231157][T12561] tipc: Started in network mode [ 1079.231180][T12561] tipc: Node identity 4, cluster identity 4711 [ 1079.231194][T12561] tipc: Node number set to 4 [ 1079.269791][T12561] tipc: Enabled bearer , priority 0 [ 1079.286754][T12561] tipc: Resetting bearer [ 1079.487564][T12561] tipc: Disabling bearer [ 1080.687842][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1080.711826][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1080.724575][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1080.804405][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1080.852251][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1082.341510][ C0] net_ratelimit: 83 callbacks suppressed [ 1082.354722][T12573] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1085.661682][T10824] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1085.741615][T12609] loop8: detected capacity change from 0 to 256 [ 1085.812137][T10824] usb 5-1: device descriptor read/64, error -71 [ 1085.843177][T12609] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1086.247592][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.229724][T10824] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1087.381808][ C0] net_ratelimit: 118 callbacks suppressed [ 1087.401519][T10824] usb 5-1: device descriptor read/64, error -71 [ 1087.512258][T10824] usb usb5-port1: attempt power cycle [ 1087.704307][T12620] Line length is too long: Should be less than 4094 [ 1087.765671][T11666] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.561810][T10824] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1088.710081][T10824] usb 5-1: device descriptor read/8, error -71 [ 1090.696798][T11666] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.741848][ C1] net_ratelimit: 88 callbacks suppressed [ 1093.797359][T11666] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.051264][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1215'. [ 1094.404505][T12655] tunl0: entered promiscuous mode [ 1094.409048][T12655] netlink: 'syz.9.1215': attribute type 4 has an invalid length. [ 1094.409098][T12655] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1215'. [ 1094.497122][T12662] loop8: detected capacity change from 0 to 4096 [ 1094.877575][T12662] ntfs3(loop8): Primary boot: invalid bytes per index 3072(3). [ 1095.241339][T12662] ntfs3(loop8): try to read out of volume at offset 0x1ffe00 [ 1097.296681][T11666] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.781534][ C0] net_ratelimit: 69 callbacks suppressed [ 1097.791859][T10391] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1098.390646][T12683] Line length is too long: Should be less than 4094 [ 1098.502156][T10391] usb 5-1: Using ep0 maxpacket: 32 [ 1098.503027][T10391] usb 5-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1098.504820][T10391] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.504843][T10391] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1098.504928][T10391] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1098.504967][T10391] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1098.504993][T10391] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1098.505013][T10391] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1098.508998][T10391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.509020][T10391] usb 5-1: Product: syz [ 1098.509035][T10391] usb 5-1: Manufacturer: syz [ 1098.509050][T10391] usb 5-1: SerialNumber: syz [ 1098.623781][T12689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.635271][T10391] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1099.852364][T11666] bridge_slave_1: left allmulticast mode [ 1099.852385][T11666] bridge_slave_1: left promiscuous mode [ 1099.852645][T11666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.857865][T10391] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1099.894360][T10391] usb 5-1: USB disconnect, device number 30 [ 1099.936105][T12301] udevd[12301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1099.952974][T11666] bridge_slave_0: left allmulticast mode [ 1099.952994][T11666] bridge_slave_0: left promiscuous mode [ 1099.953250][T11666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.072381][T12706] loop8: detected capacity change from 0 to 256 [ 1100.076845][T12706] exfat: Deprecated parameter 'namecase' [ 1100.076908][T12706] exfat: Deprecated parameter 'namecase' [ 1100.154249][T12706] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1102.903199][ T12] net_ratelimit: 62 callbacks suppressed [ 1104.565005][T11666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.183541][T11666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.228866][T11666] bond0 (unregistering): Released all slaves [ 1105.640579][T12730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.045299][T12741] netlink: 'syz.9.1230': attribute type 1 has an invalid length. [ 1106.045326][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1230'. [ 1107.912918][T10349] net_ratelimit: 54 callbacks suppressed [ 1110.771798][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.771921][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.772132][T12568] bridge_slave_0: entered allmulticast mode [ 1110.780039][T12568] bridge_slave_0: entered promiscuous mode [ 1110.819458][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.819569][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.819730][T12568] bridge_slave_1: entered allmulticast mode [ 1110.844025][T12568] bridge_slave_1: entered promiscuous mode [ 1111.045185][T11916] ffs_data_put(): freeing [ 1111.267282][T12781] loop9: detected capacity change from 0 to 8 [ 1111.310624][T12781] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1111.310652][T12781] SQUASHFS error: Failed to read block 0x9b: -5 [ 1111.310685][T12781] SQUASHFS error: Unable to read metadata cache entry [99] [ 1111.310699][T12781] SQUASHFS error: Unable to read inode 0x127 [ 1111.636297][T12781] loop9: detected capacity change from 0 to 4096 [ 1112.374085][T12789] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1113.287428][T12272] net_ratelimit: 59 callbacks suppressed [ 1113.364666][T12768] batman_adv: batadv0: Adding interface: veth0 [ 1113.364678][T12768] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.364706][T12768] batman_adv: batadv0: Interface activated: veth0 [ 1113.370374][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.428638][T12775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.428666][T12775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.461216][T12775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.461236][T12775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.509773][T12775] batman_adv: batadv0: Interface deactivated: veth0 [ 1113.509792][T12775] batman_adv: batadv0: Removing interface: veth0 [ 1113.707709][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1113.871986][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.179637][T12568] team0: Port device team_slave_0 added [ 1114.209365][T12568] team0: Port device team_slave_1 added [ 1115.049761][T11666] hsr_slave_0: left promiscuous mode [ 1115.159360][T12818] loop9: detected capacity change from 0 to 512 [ 1115.175188][T12818] EXT4-fs (loop9): unable to read superblock [ 1115.217225][T11666] hsr_slave_1: left promiscuous mode [ 1115.328540][T11666] veth1_macvtap: left promiscuous mode [ 1115.338279][T11666] veth0_macvtap: left promiscuous mode [ 1115.353023][T11666] veth1_vlan: left promiscuous mode [ 1115.353134][T11666] veth0_vlan: left promiscuous mode [ 1116.083761][T12825] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 1116.439789][T12826] overlayfs: missing 'lowerdir' [ 1116.441471][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.441613][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.664599][T10391] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1118.001492][T10391] usb 10-1: Using ep0 maxpacket: 32 [ 1118.077992][T10391] usb 10-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1118.145165][T10391] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.145411][T10391] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1118.147182][T10391] usb 10-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1118.147694][T10391] usb 10-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1118.148101][T10391] usb 10-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1118.148383][T10391] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1118.455618][T10391] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.455662][T10391] usb 10-1: Product: syz [ 1118.455873][T10391] usb 10-1: Manufacturer: syz [ 1118.456052][T10391] usb 10-1: SerialNumber: syz [ 1118.535079][T12256] net_ratelimit: 89 callbacks suppressed [ 1120.177748][T10391] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1120.355556][T12859] overlayfs: failed to resolve './file1': -2 [ 1121.363610][T10391] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1121.376823][T10391] usb 10-1: USB disconnect, device number 2 [ 1121.487060][T12792] udevd[12792]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1121.749039][T11666] team0 (unregistering): Port device team_slave_1 removed [ 1121.985095][T11666] team0 (unregistering): Port device team_slave_0 removed [ 1122.721202][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.721212][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.721234][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.777377][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.777385][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.777401][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.925385][T12568] hsr_slave_0: entered promiscuous mode [ 1122.927099][T12568] hsr_slave_1: entered promiscuous mode [ 1122.928274][T12568] debugfs: 'hsr0' already exists in 'hsr' [ 1122.928292][T12568] Cannot create hsr debugfs directory [ 1123.247327][T12867] loop8: detected capacity change from 0 to 256 [ 1123.256588][T12867] exfat: Deprecated parameter 'utf8' [ 1123.346871][T12867] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1123.799274][T12880] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 1123.861529][ C1] net_ratelimit: 70 callbacks suppressed [ 1125.375734][T12568] PM: Adding info for No Bus:macsec0 [ 1125.375744][ C1] virtqueue callback for ffff88802638a200 (ffffffff86718d10) [ 1125.375760][T12568] kobject: 'macsec0' (ffff88803303c7c0): kobject_uevent_env [ 1125.375777][T12568] kobject: 'macsec0' (ffff88803303c7c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1125.375777][ C1] sd 0:0:1:0: cmd ffff88802b9f8f90 response 0 status 0x0 sense_len 0 [ 1125.375804][ C1] No more buffers in queue [ 1125.376406][ C1] virtqueue callback for ffff88802680e600 (ffffffff86c2eff0) [ 1125.376439][ C1] No more buffers in queue [ 1125.377163][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 1125.377188][ C1] No more buffers in queue [ 1125.377381][ C1] eth0: xmit ffff8880594f8140 42:01:0a:80:00:01 [ 1125.377411][ C1] Added buffer head 25 to ffff88802680e400 [ 1125.377470][ C1] virtqueue callback for ffff88802680e400 (ffffffff86c2f130) [ 1125.377514][ C1] Sent skb ffff8880594f8140 [ 1125.377581][ C1] No more buffers in queue [ 1125.380808][T12568] kobject: 'queues' (ffff8880298e7250): kobject_add_internal: parent: 'macsec0', set: '' [ 1125.380893][T12568] kobject: 'queues' (ffff8880298e7250): kobject_uevent_env [ 1125.380910][T12568] kobject: 'queues' (ffff8880298e7250): kobject_uevent_env: filter function caused the event to drop! [ 1125.380992][T12568] kobject: 'rx-0' (ffff888074447050): kobject_add_internal: parent: 'queues', set: 'queues' [ 1125.381166][T12568] kobject: 'rx-0' (ffff888074447050): kobject_uevent_env [ 1125.381223][T12568] kobject: 'rx-0' (ffff888074447050): fill_kobj_path: path = '/devices/virtual/net/macsec0/queues/rx-0' [ 1125.381664][T12568] kobject: 'rx-1' (ffff888074447150): kobject_add_internal: parent: 'queues', set: 'queues' [ 1125.381812][T12568] kobject: 'rx-1' (ffff888074447150): kobject_uevent_env [ 1125.381862][T12568] kobject: 'rx-1' (ffff888074447150): fill_kobj_path: path = '/devices/virtual/net/macsec0/queues/rx-1' [ 1125.382047][T12568] kobject: 'tx-0' (ffff8880774e2820): kobject_add_internal: parent: 'queues', set: 'queues' [ 1125.382303][T12568] kobject: 'tx-0' (ffff8880774e2820): kobject_uevent_env [ 1125.382348][T12568] kobject: 'tx-0' (ffff8880774e2820): fill_kobj_path: path = '/devices/virtual/net/macsec0/queues/tx-0' [ 1125.384723][ C1] ================================================================== [ 1125.384739][ C1] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1125.384848][ C1] Read of size 1 at addr ffff88803b36e010 by task syz.8.1263/12874 [ 1125.384867][ C1] [ 1125.384883][ C1] CPU: 1 UID: 0 PID: 12874 Comm: syz.8.1263 Tainted: G L syzkaller #0 PREEMPT(full) [ 1125.384915][ C1] Tainted: [L]=SOFTLOCKUP [ 1125.384923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.384937][ C1] Call Trace: [ 1125.384946][ C1] [ 1125.384957][ C1] dump_stack_lvl+0xe8/0x150 [ 1125.384991][ C1] print_address_description+0x55/0x1e0 [ 1125.385035][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1125.385058][ C1] print_report+0x58/0x70 [ 1125.385078][ C1] kasan_report+0x117/0x150 [ 1125.385105][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1125.385133][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1125.385157][ C1] llc_conn_state_process+0x4fb/0x1380 [ 1125.385188][ C1] llc_conn_tmr_common_cb+0x34a/0x780 [ 1125.385216][ C1] call_timer_fn+0x18d/0x5f0 [ 1125.385264][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1125.385290][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1125.385321][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1125.385358][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1125.385387][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1125.385413][ C1] __run_timer_base+0x652/0x8b0 [ 1125.385447][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1125.385483][ C1] run_timer_softirq+0xb7/0x170 [ 1125.385511][ C1] handle_softirqs+0x223/0x840 [ 1125.385543][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1125.385584][ C1] __irq_exit_rcu+0xcb/0x220 [ 1125.385613][ C1] irq_exit_rcu+0x9/0x30 [ 1125.385639][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1125.385668][ C1] [ 1125.385678][ C1] [ 1125.385687][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1125.385712][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 1125.385741][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d b4 cd a6 0c 48 89 de 5b e9 f3 94 65 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 48 2d ce 11 65 48 8b 15 48 2d [ 1125.385759][ C1] RSP: 0018:ffffc90004157a58 EFLAGS: 00000246 [ 1125.385781][ C1] RAX: ffffffff89ab36a6 RBX: 0000000000000000 RCX: 0000000000000002 [ 1125.385797][ C1] RDX: ffff8880270a3e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1125.385812][ C1] RBP: ffffc90004157c50 R08: 0000000000000005 R09: 0000000000000003 [ 1125.385822][ C1] R10: ffffc90004157d13 R11: fffff5200082afa4 R12: ffffc90004157d00 [ 1125.385839][ C1] R13: 0000000000000000 R14: 1ffff9200082af54 R15: dffffc0000000000 [ 1125.385860][ C1] ? ___sys_recvmsg+0x1e6/0x5a0 [ 1125.385929][ C1] ___sys_recvmsg+0x1ef/0x5a0 [ 1125.385962][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1125.386010][ C1] do_recvmmsg+0x31a/0x7f0 [ 1125.386045][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1125.386073][ C1] ? __pfx___schedule+0x10/0x10 [ 1125.386097][ C1] ? do_futex+0x3e7/0x4e0 [ 1125.386129][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 1125.386162][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1125.386199][ C1] do_syscall_64+0x166/0x520 [ 1125.386227][ C1] ? trace_irq_disable+0x3b/0x140 [ 1125.386253][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.386275][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1125.386299][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.386321][ C1] RIP: 0033:0x7fd764b9e159 [ 1125.386341][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.386359][ C1] RSP: 002b:00007fd765a3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1125.386382][ C1] RAX: ffffffffffffffda RBX: 00007fd764e26090 RCX: 00007fd764b9e159 [ 1125.386399][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1125.386414][ C1] RBP: 00007fd764c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1125.386429][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1125.386443][ C1] R13: 00007fd764e26128 R14: 00007fd764e26090 R15: 00007fff024e46a8 [ 1125.386468][ C1] [ 1125.386477][ C1] [ 1125.386483][ C1] Allocated by task 12882: [ 1125.386495][ C1] kasan_save_track+0x3e/0x80 [ 1125.386518][ C1] __kasan_kmalloc+0x93/0xb0 [ 1125.386540][ C1] __kmalloc_cache_noprof+0x31c/0x600 [ 1125.386572][ C1] llc_sap_open+0xe1/0x3b0 [ 1125.386621][ C1] llc_ui_autobind+0x1f1/0x560 [ 1125.386663][ C1] llc_ui_connect+0x1dc/0xe40 [ 1125.386691][ C1] __sys_connect+0x316/0x450 [ 1125.386713][ C1] __x64_sys_connect+0x7a/0x90 [ 1125.386737][ C1] do_syscall_64+0x166/0x520 [ 1125.386762][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.386783][ C1] [ 1125.386789][ C1] Freed by task 12877: [ 1125.386799][ C1] kasan_save_track+0x3e/0x80 [ 1125.386820][ C1] kasan_save_free_info+0x40/0x50 [ 1125.386848][ C1] __kasan_slab_free+0x5c/0x80 [ 1125.386869][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 1125.386891][ C1] rcu_free_sheaf+0x31/0x200 [ 1125.386906][ C1] rcu_core+0x926/0x1260 [ 1125.386930][ C1] handle_softirqs+0x223/0x840 [ 1125.386953][ C1] __irq_exit_rcu+0xcb/0x220 [ 1125.386977][ C1] irq_exit_rcu+0x9/0x30 [ 1125.386999][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1125.387021][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1125.387039][ C1] [ 1125.387045][ C1] The buggy address belongs to the object at ffff88803b36e000 [ 1125.387045][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 1125.387061][ C1] The buggy address is located 16 bytes inside of [ 1125.387061][ C1] freed 2048-byte region [ffff88803b36e000, ffff88803b36e800) [ 1125.387082][ C1] [ 1125.387088][ C1] The buggy address belongs to the physical page: [ 1125.387127][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3b368 [ 1125.387147][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1125.387164][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1125.387184][ C1] page_type: f5(slab) [ 1125.387204][ C1] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1125.387221][ C1] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1125.387239][ C1] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1125.387256][ C1] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1125.387271][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1125.387289][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1125.387300][ C1] page dumped because: kasan: bad access detected [ 1125.387310][ C1] page_owner tracks the page as allocated [ 1125.387317][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11284, tgid 11284 (dhcpcd), ts 919940435300 [ 1125.387351][ C1] post_alloc_hook+0x1f9/0x250 [ 1125.387378][ C1] get_page_from_freelist+0x2209/0x2280 [ 1125.387399][ C1] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 1125.387420][ C1] allocate_slab+0x7d/0x620 [ 1125.387439][ C1] refill_objects+0x2d5/0x350 [ 1125.387460][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1125.387481][ C1] __kvmalloc_node_noprof+0x637/0x820 [ 1125.387499][ C1] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1125.387518][ C1] bpf_int_jit_compile+0xa11/0x17d0 [ 1125.387544][ C1] __bpf_prog_select_runtime+0x53d/0xc30 [ 1125.387575][ C1] bpf_prepare_filter+0x10df/0x12d0 [ 1125.387625][ C1] bpf_prog_create_from_user+0x2c6/0x440 [ 1125.387646][ C1] do_seccomp+0x78e/0xdc0 [ 1125.387673][ C1] __se_sys_prctl+0x2a5/0x1910 [ 1125.387704][ C1] do_syscall_64+0x166/0x520 [ 1125.387729][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.387749][ C1] page last free pid 11038 tgid 11038 ts 913719975742 stack trace: [ 1125.387764][ C1] __free_frozen_pages+0xc93/0xd90 [ 1125.387793][ C1] __slab_free+0x269/0x2c0 [ 1125.387810][ C1] qlist_free_all+0x99/0x100 [ 1125.387829][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1125.387849][ C1] __kasan_slab_alloc+0x22/0x80 [ 1125.387868][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 1125.387895][ C1] __alloc_skb+0x1db/0x7a0 [ 1125.387961][ C1] netlink_ack+0x136/0xb30 [ 1125.388004][ C1] netlink_rcv_skb+0x2a4/0x4a0 [ 1125.388019][ C1] netlink_unicast+0x7bd/0x940 [ 1125.388067][ C1] netlink_sendmsg+0x7c3/0xae0 [ 1125.388084][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 1125.388103][ C1] __sys_sendto+0x408/0x5a0 [ 1125.388127][ C1] __x64_sys_sendto+0xde/0x100 [ 1125.388150][ C1] do_syscall_64+0x166/0x520 [ 1125.388176][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.388195][ C1] [ 1125.388201][ C1] Memory state around the buggy address: [ 1125.388235][ C1] ffff88803b36df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1125.388251][ C1] ffff88803b36df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1125.388265][ C1] >ffff88803b36e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1125.388277][ C1] ^ [ 1125.388289][ C1] ffff88803b36e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1125.388303][ C1] ffff88803b36e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1125.388315][ C1] ================================================================== [ 1125.388330][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1126.519863][ C1] CPU: 1 UID: 0 PID: 12874 Comm: syz.8.1263 Tainted: G L syzkaller #0 PREEMPT(full) [ 1126.530896][ C1] Tainted: [L]=SOFTLOCKUP [ 1126.535394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1126.545558][ C1] Call Trace: [ 1126.548848][ C1] [ 1126.551699][ C1] vpanic+0x26f/0x710 [ 1126.555964][ C1] panic+0xc5/0xd0 [ 1126.559784][ C1] ? __pfx_panic+0x10/0x10 [ 1126.564215][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1126.571090][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1126.577702][ C1] check_panic_on_warn+0x89/0xb0 [ 1126.582651][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1126.589710][ C1] end_report+0x73/0x170 [ 1126.593964][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1126.600557][ C1] kasan_report+0x128/0x150 [ 1126.605080][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1126.611938][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 1126.618713][ C1] llc_conn_state_process+0x4fb/0x1380 [ 1126.624192][ C1] llc_conn_tmr_common_cb+0x34a/0x780 [ 1126.629572][ C1] call_timer_fn+0x18d/0x5f0 [ 1126.634169][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1126.639806][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1126.644492][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1126.649705][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.654909][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1126.660553][ C1] __run_timer_base+0x652/0x8b0 [ 1126.665433][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1126.670825][ C1] run_timer_softirq+0xb7/0x170 [ 1126.675685][ C1] handle_softirqs+0x223/0x840 [ 1126.680565][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1126.685357][ C1] __irq_exit_rcu+0xcb/0x220 [ 1126.689960][ C1] irq_exit_rcu+0x9/0x30 [ 1126.694307][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1126.700046][ C1] [ 1126.702982][ C1] [ 1126.705918][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1126.711992][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 1126.718090][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d b4 cd a6 0c 48 89 de 5b e9 f3 94 65 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 48 2d ce 11 65 48 8b 15 48 2d [ 1126.737721][ C1] RSP: 0018:ffffc90004157a58 EFLAGS: 00000246 [ 1126.743811][ C1] RAX: ffffffff89ab36a6 RBX: 0000000000000000 RCX: 0000000000000002 [ 1126.751886][ C1] RDX: ffff8880270a3e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1126.759954][ C1] RBP: ffffc90004157c50 R08: 0000000000000005 R09: 0000000000000003 [ 1126.767942][ C1] R10: ffffc90004157d13 R11: fffff5200082afa4 R12: ffffc90004157d00 [ 1126.775924][ C1] R13: 0000000000000000 R14: 1ffff9200082af54 R15: dffffc0000000000 [ 1126.783905][ C1] ? ___sys_recvmsg+0x1e6/0x5a0 [ 1126.788786][ C1] ___sys_recvmsg+0x1ef/0x5a0 [ 1126.793995][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1126.799317][ C1] do_recvmmsg+0x31a/0x7f0 [ 1126.803750][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1126.808703][ C1] ? __pfx___schedule+0x10/0x10 [ 1126.813569][ C1] ? do_futex+0x3e7/0x4e0 [ 1126.817912][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 1126.822992][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1126.828743][ C1] do_syscall_64+0x166/0x520 [ 1126.833405][ C1] ? trace_irq_disable+0x3b/0x140 [ 1126.838469][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.844546][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1126.849237][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.855134][ C1] RIP: 0033:0x7fd764b9e159 [ 1126.859556][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.879170][ C1] RSP: 002b:00007fd765a3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1126.887595][ C1] RAX: ffffffffffffffda RBX: 00007fd764e26090 RCX: 00007fd764b9e159 [ 1126.895577][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1126.903554][ C1] RBP: 00007fd764c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1126.911543][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1126.919537][ C1] R13: 00007fd764e26128 R14: 00007fd764e26090 R15: 00007fff024e46a8 [ 1126.927577][ C1] [ 1126.930932][ C1] Kernel Offset: disabled [ 1126.935286][ C1] Rebooting in 86400 seconds..