last executing test programs: 30m54.478127767s ago: executing program 32 (id=121): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socket(0x2, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r2, r3, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)={0x10, 0x2c, 0x15, 0x70bd2b, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x810}, 0x44800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 29m10.342125821s ago: executing program 33 (id=328): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd7e, 0x0, 0x7, 0x2, 0x3, 0xfffffffe, 0x7ff, 0x7, 0x335}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 28m42.715877188s ago: executing program 34 (id=373): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x4008000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x7, 0x7f, 0x0, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xb, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8000008, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x3, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c97690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0x80000001, 0x100, 0x4, 0x9, 0x5, 0x4, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x82, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x27], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) 26m59.535248082s ago: executing program 35 (id=527): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 23m35.460265548s ago: executing program 36 (id=1133): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 23m22.661717006s ago: executing program 37 (id=1187): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) socket$unix(0x1, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280), 0x8602, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 23m2.296470064s ago: executing program 38 (id=1215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x200, @private0, 0x178}}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 22m16.975394308s ago: executing program 8 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) 22m14.186350167s ago: executing program 8 (id=1346): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) 22m11.460400491s ago: executing program 8 (id=1352): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x1, 0x200000}, 0x0, [0xd, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0xbc0d, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0xe720, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0xd5e4, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x4000, 0x7f36, 0x3, 0xfffffffffffffffd, 0xe20, 0x0, 0x5, 0x6, 0x3, 0x0, 0x803, 0x0, 0x0, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x9, 0x84000000000000, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0xd30, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x31, 0x5276b394, 0x0, 0x8, 0x0, 0x0, 0x6f, 0x0, 0x7fffffff, 0xfffffffffffffffe]}) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x4) socket$kcm(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) getpid() setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x76, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) 22m9.478514691s ago: executing program 8 (id=1356): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r4, 0x12) 22m6.499257755s ago: executing program 8 (id=1364): syz_emit_vhci(0x0, 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, 0x0, 0x26}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x101, 0x0) 22m3.315659521s ago: executing program 8 (id=1368): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0xfe, 0x847, &(0x7f00000001c0)="$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") io_uring_setup(0x1a8, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000010200)=""/102400, 0x19000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x2}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) 21m51.064035263s ago: executing program 39 (id=1361): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xa, &(0x7f0000000300)={0x9, 0x2}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) close(r4) 21m47.6928058s ago: executing program 40 (id=1368): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0xfe, 0x847, &(0x7f00000001c0)="$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") io_uring_setup(0x1a8, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000010200)=""/102400, 0x19000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x2}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) 21m23.303519926s ago: executing program 4 (id=1422): io_setup(0x8, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, &(0x7f0000000080)=""/179, 0xb3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000001f80)=""/4097, 0x1001) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x141c40, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380), 0x1, 0x55e, &(0x7f00000003c0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_allocate_blocks\x00', 0xffffffffffffffff, 0x0, 0x72a}, 0x18) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) 21m19.594399119s ago: executing program 4 (id=1427): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x300) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x80000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) open(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x49) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) mknod$loop(0x0, 0x6000, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 21m16.395791574s ago: executing program 4 (id=1433): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24fd, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) 21m2.209527617s ago: executing program 4 (id=1451): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(0x0, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, 0x0, r2}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f334579c0077290ad2b2c85a693afd7d8e5ffc37e1b3aebbd", 0x2e}) 21m0.103050254s ago: executing program 4 (id=1456): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x40000cc4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3008, 0x0, 0x0, 0x0, 0x200000}) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0x7fffffff}, 0x18) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r3, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x74800) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000100)) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r8, 0x0, 0xeffd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300735f7af5ff00000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000005880)={0x0, 0x2}, &(0x7f00000058c0)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000005900)={0x0, 0x4000, 0x0, 0x61c7, 0xb1, 0x140, 0x4, 0x10, {r10, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0xe8, 0xb7d9, 0x8001, 0xa2f}}, &(0x7f00000059c0)=0xb0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7, 0x20000) landlock_create_ruleset(&(0x7f00000001c0)={0x32, 0x1}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000180)={0x881}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nodiscard}, {@noflush_merge}, {@acl}, {@adaptive_mode}, {@resuid={'resuid', 0x3d, 0xee00}}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@fsync_mode_posix}, {@lfs_mode}, {@quota}, {@prjjquota={'prjjquota', 0x3d, 'mode=adaptive'}}, {@noextent_cache}, {@discard}, {@noinline_data}], [{@hash}, {@measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '\\)\x03@'}}, {@fsname}]}, 0x1, 0x5509, &(0x7f0000000340)="$eJzs3MtrY1UYAPCTPubtWMSFu7kwCC1MQtPHoLuqM/jADmXUhStNk9uQmSS3NGlau3LhUlz4n4iCK5f+DS5cuxMXijtByT03OvUBatNkOv394Oa75/Tku98JpfDdWxKAc2sh+fnHUrgeLocQZkMI10LIz0vFkduI4bniGM7PFEepmPt94kII4UoI4fowecw5Wv/prcHN9R/e+Omrby7OXf3sy2+nt2tg2p4PIXR24/lBJ8asGeODYr42aOWxszYoYvxB52ExzmI8SLfzDAe10bpaHlebcX22u98bxp12rT6MzdZOPr/bjRfsDZqjPPkbHtT28nEj3c5jq5flsXkU6zo8in/bjnr9mKdR5PsgTx/6/VGM8+lhGvez+zCP9W6/mI95s0Z6OIyDIhaXC/Ws3cjr2D7JJ/14e7PV3T9MBuler5V1k/VK9YVK9Xa5upc10n66Vq51GrfXksVme7is3E9rnY1mljXbaaWedZaSxWa9Xq5Wk8U76Xar1k2q1cpqZbm8vlSc3UpevfdO0m4ki8P4cqu732+1e8lOtpfEdywlK5XVF5eSm9Xkrc2tZOv+3bubW2+/d+fdey9tvv5KsegvZSWLK8srK+XqcnmlunSO9v9RUfQY9w8nUpp2AQBnz3/t/2880urr/4H/6/T6/737IZx+/x/0/2Nxpvrf897/n8L+4UT0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59Z385+/lp8sxPHVYv6pYuqZYlwKIcyEEH79G7PhwrGcs0We+X9YP/+nGr4uhTzD8BoXi+NKCGGjOH55+rQ/BQAAAHhyffHhjU9itx5fFqZdEJMUb9rMXHt/TPlKIYT5he/HlG1m+PLsmJLlv99z4XBM2fIbWJfGlCzecpsbV7Z/ZfZYuPRIKMUwM9FyAACAiTjeCUy2CwEAAGCSPp52AUxHKYweZY6eBef/ef/HA8HLx0YAAADAGVSadgEAAADAqcv7f9//BwAAAE+2+P1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzGzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSfbVe3F79vm6bs9u3k2c0AAAAwCXbar2o/5ml/tfm/vfm1s+mX0REGRGX5u6j+HSWOWpyqpfnb06fr17VcBdRJxzeY9JcXyLiT3M9/uj6UwAAAICPa7NczdNsPf2ZDV0QfUqLNuW3v5nyioioZg+Z0spD3q9MYfX3exz/M6XVC1jTTGFpyW2cK+1N6p/7cdVuetIUqSkvvuxYZLaxAwAAPRqdNf3OQgAAAOjTv6ELYBhFPG9lHrcCJ6lptvc+n/UAAACAd6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFNcoeIqLgQS92u62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/knEAu8ZbDHiJ4VmZ2Jjv5Aa6/ZjbJ5wNv3neHYd73zULId95LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNHp7EifZoTOO4+Lc5t7DpazfOtRnHq9tz2cti6M6kz4ZXqx+iLrNJQIAAMDZkZT1fQhhJ11fyPq4k9f/aXlNVvN/+/Q4Luv5w3V/2Ze1f9Z++Xn3+f2BOuNxspveXB4OLh1NpfX/zXK2PfOXV7TyJ5+/e0nyLyR+b/W5UZo/z+jrjY132nl4ro5sAYB/4mLZF0H5+1DW95tMDIAzo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHUar4ckyjkII861JnNnae7h0XP94bXu+bNcePVoLX07umd0iDSHcXB4OLtU6m9l27/6D24vD4eBu/cFLIYSmRn+rmP7tD6a4OIRGno/gPwri4suelXxORtDgDyUAAE6ltGhZXb+Tri9k56K5EP747mD9/2olDlPW/7sfXtusjlWt//u1zXD29VbufNq7d//B68t3Fm8Nbg0+fuNy/83+letXr17v5e9Ket6YAAAA8O+0i1at/+O5o+v/FypxmLL+/+yb/hfVsRL1/7Emi35NZwIAAHC2Pfvy779Fx5yP2u3w+eLKyt3++Lj/+fL42ECqf9u5olXr/2Su6awAAACAOoxWowPr/zcqcZhy/f+p71/4sXrPJIRwvlj/v7j0yfBGfdOZaXX8OXHTcwQAAKBZ54tWXf9P8/3/8f6WhziE8Nor47j4N4BT1f/Ju1/9UB2ruv//Sn1TnElxd/w88r4bQqvbdEYAAACcZk8ULSv2f03XFz766cL7bfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2ZwAAAP//SNM+ig==") setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000005a00)={0x2, 0x820f, 0x6, 0x4, r10}, 0x10) 20m58.380586766s ago: executing program 4 (id=1459): socket$inet6(0xa, 0x7, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x35, &(0x7f0000000040)={0x0, 0x7c}}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 20m42.984325127s ago: executing program 41 (id=1459): socket$inet6(0xa, 0x7, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x35, &(0x7f0000000040)={0x0, 0x7c}}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 4m46.279468712s ago: executing program 2 (id=3359): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4m45.970420246s ago: executing program 2 (id=3361): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000001000000100007800c000180080001000000000000000000", @ANYRES32, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x48044) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0xa4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) sendmmsg$inet(r4, &(0x7f00000047c0), 0x2, 0x119e75c40677edef) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000040), &(0x7f0000001000)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'nhpoly1305-avx2\x00'}}) 4m43.697871293s ago: executing program 2 (id=3367): r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400088d0}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x27c4}}, './file0/../file0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) io_uring_enter(r7, 0x847ba, 0x3f00, 0xe, 0x0, 0x0) 4m41.894913954s ago: executing program 2 (id=3372): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000540)=ANY=[@ANYBLOB='force,nodecompose,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x6bc, &(0x7f0000000e40)="$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") llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4269a61212", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() socket$packet(0x11, 0x2, 0x300) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 4m40.2121673s ago: executing program 2 (id=3377): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005400010026bd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00010000e00002020000637674addb335030000008"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x44080) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@ifindex, 0xffffffffffffffff, 0x11, 0x8}, 0x20) 4m38.40795044s ago: executing program 2 (id=3383): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x494002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xd6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r3, 0x0, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m37.72886037s ago: executing program 42 (id=3383): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x494002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xd6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r3, 0x0, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m12.942285651s ago: executing program 6 (id=3661): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) syz_open_dev$rtc(0x0, 0x6, 0x408002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 3m8.971684878s ago: executing program 6 (id=3676): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x1}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000740)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x2}}, 0x48) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000640)='veth1_virt_wifi\x00', 0x10) 3m7.707936156s ago: executing program 6 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3m7.183051724s ago: executing program 6 (id=3679): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sched_setscheduler(0x0, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x1, @desc1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setreuid(0x0, 0xee00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x629, &(0x7f0000001080)="$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") chdir(&(0x7f0000000240)='./file0\x00') 3m5.331451939s ago: executing program 6 (id=3682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x91, 0x1fd, 0x1, 0x1}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$unix(0x1, 0x1, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$TIPC_NL_LINK_SET(r5, 0x0, 0x4015) 3m4.763520191s ago: executing program 6 (id=3685): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) syz_open_dev$rtc(0x0, 0x6, 0x408002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 3m3.417744028s ago: executing program 43 (id=3685): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) syz_open_dev$rtc(0x0, 0x6, 0x408002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 11.798895812s ago: executing program 1 (id=4201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000085000000070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}}, 0x80) 11.032331911s ago: executing program 7 (id=4204): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc02, &(0x7f0000000600)=ANY=[], 0x4, 0x1514, &(0x7f0000001bc0)="$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") 10.983233265s ago: executing program 1 (id=4205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc02, &(0x7f0000000600)=ANY=[], 0x4, 0x1514, &(0x7f0000001bc0)="$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") 10.979755715s ago: executing program 9 (id=4207): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) io_uring_enter(r3, 0x847ba, 0x3f00, 0xe, 0x0, 0x0) 9.007362729s ago: executing program 5 (id=4216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) creat(0x0, 0xecf86c37d53049cc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(0x0, 0x0, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000240)="c84f033dc34dc7c7001a906f5a50e9aa11", 0x11, 0x20008040, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x47a}, 0x8) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000200)="e8", 0x1}], 0x1) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a143) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) write$cgroup_devices(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='c'], 0x45) syz_emit_ethernet(0xd6, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd605f106000a02f0000000000000000000000000000000000ff020000000010000000000000000001242022eb00000000000008ec295fd963bcd7a5d581b6b77db5464890dcb4ff4da0b53626fefbc0d7416f97be1e129d03d6e06d89557c0259d88528e906a070f1561f72e71143a32b07e82700ae41a627cb4fc28279cc66ba40000000080088be86ddffff100000000100000000000006080022eb000000002000e0000200000000000000000000000800655800000000"], 0x0) 8.268960854s ago: executing program 1 (id=4217): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@noblock_validity}], [{@measure}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r1, 0x5}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@delchain={0x5c, 0x65, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xf}, {0x7, 0xfff2}, {0xfff3, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x82}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010100}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) io_uring_setup(0x2059, &(0x7f0000000000)={0x0, 0xdec0, 0x0, 0x3, 0x306}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x3}, 0x10) 7.790661444s ago: executing program 9 (id=4218): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x401, 0x0, 0x4, 0xaa2, 0x31, 0x7, 0x5, 0x6}}], 0x30, 0x80}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4, 0x100000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086683, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "56d9428a8de6338a", "754386b3c5c1ac85dfc6917ffdd1b3d2", "8de649cd", "e150338268a39b38"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) chdir(&(0x7f0000000480)='./cgroup\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001240)=[{&(0x7f0000001300)=""/231, 0xe7}], 0x1, 0xe12, 0x200000c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close_range(r0, r2, 0x0) 7.555831309s ago: executing program 1 (id=4220): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x408, 0x4) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = add_key$user(0x0, 0x0, &(0x7f0000000400)="02e8ad8030050dca06854d9439b1d3a3c424aa29a844ca51703b2e5ff4f77dc975d34bbe14fdc9f95d1a08277443b6952c3077bf4d1ae5df6d339feaa3f6ac8a7d0016461e4e10bc225d903df24d453d231764d630eb52", 0x57, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') r2 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0", 0xbb, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r2, r1}, 0x0, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f33", 0x17}) 7.437912566s ago: executing program 1 (id=4221): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000410000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x2}, 0x52, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb03200002020509050412"], 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb03200002020509050412"], 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb323, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x80f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x3, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8f, 0x4, 0xc}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x9, 0xe8, 0x55, 0x20, 0x2}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x24, &(0x7f0000000500)=@string={0x24, 0x3, "39c4af5a422d8929f1c33d8cb0a8beed222639ba0d92b235ed0e4a495067581b4738"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42b}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7e4d}, 0x94) 7.327873928s ago: executing program 9 (id=4223): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = add_key$user(0x0, 0x0, &(0x7f0000000400)="02e8ad8030050dca06854d9439b1d3a3c424aa29a844ca51703b2e5ff4f77dc975d34bbe14fdc9f95d1a08277443b6952c3077bf4d1ae5df6d339feaa3f6ac8a7d0016461e4e10bc225d903df24d453d231764d630eb52", 0x57, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, 0x0, r1}, 0x0, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f33", 0x17}) 7.318222401s ago: executing program 7 (id=4224): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) flock(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x5, 0x0, &(0x7f0000000000)=0x29ea2949956312c5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="02060000000000000401"], 0x40) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x410000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0xc0f85403, 0x0) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000180)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 6.613221394s ago: executing program 3 (id=4225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 6.594002196s ago: executing program 9 (id=4226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000500)=0x2, 0x4) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000002380)="c9", 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x7, r3, 0x0, &(0x7f0000000000)="05", 0x1, 0xfffffffd}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000000380)="ee", 0x1, 0x6}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, r3, 0x0, &(0x7f00000004c0)="87", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r3, 0x0, &(0x7f0000000400)='8', 0x1, 0x8000000000000001}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000240)={0x18, r3, 0x14c0, 0x80000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0x0, {@mac, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x800, 0x1, 0x0, 'pimreg\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @rand_addr=0x1, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x0, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbee9, 0x2010, r0, 0xa3da000) 5.106866998s ago: executing program 0 (id=4227): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x47ce, &(0x7f0000000300)={0x0, 0x37b4, 0x7af53801ce9edc35, 0x0, 0xe4}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x402a80, 0x105) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./bus\x00', 0x2080, 0x124) syz_io_uring_submit(r2, r3, &(0x7f0000000b80)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r4, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)='./bus\x00', r5}) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0xd1420e2) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x7d94481) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001480)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") prctl$PR_SVE_GET_VL(0x33, 0x5745) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_begin\x00', r7}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r8 = socket(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 5.104763258s ago: executing program 9 (id=4228): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085503, &(0x7f0000000200)=0x8000006) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) 5.09553139s ago: executing program 7 (id=4229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x494002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xd6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r3, 0x0, 0x30004001) sendmsg(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r5, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) syz_open_dev$MSR(0x0, 0xfffffffffffffffe, 0x0) 5.080165675s ago: executing program 3 (id=4230): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC, @ANYBLOB=',nostrict,\x00'], 0xfd, 0xc22, &(0x7f00000002c0)="$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") symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000280)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4083, 0xff3}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/62, 0x3e}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x12041, &(0x7f0000003700)={0x77359400}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x81000, &(0x7f0000000f40)={[{@redirect_dir_on}, {@workdir={'workdir', 0x3d, './file0/file0/..'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0/..'}}], [{@fowner_lt={'fowner<', r1}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) 4.171823984s ago: executing program 1 (id=4231): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) io_uring_enter(r3, 0x847ba, 0x3f00, 0xe, 0x0, 0x0) 3.758103565s ago: executing program 0 (id=4232): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@noblock_validity}], [{@measure}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r1, 0x5}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@delchain={0x5c, 0x65, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xf}, {0x7, 0xfff2}, {0xfff3, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x82}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010100}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) io_uring_setup(0x2059, &(0x7f0000000000)={0x0, 0xdec0, 0x0, 0x3, 0x306}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x3}, 0x10) 3.742022413s ago: executing program 5 (id=4233): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x408, 0x4) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = add_key$user(0x0, 0x0, &(0x7f0000000400)="02e8ad8030050dca06854d9439b1d3a3c424aa29a844ca51703b2e5ff4f77dc975d34bbe14fdc9f95d1a08277443b6952c3077bf4d1ae5df6d339feaa3f6ac8a7d0016461e4e10bc225d903df24d453d231764d630eb52", 0x57, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') r2 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0", 0xbb, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r2, r1}, 0x0, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f33", 0x17}) 3.661161705s ago: executing program 9 (id=4234): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) syz_open_dev$rtc(0x0, 0x6, 0x408002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 3.638145421s ago: executing program 3 (id=4235): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0x96, 0x4, 0x7fe8, 0x4}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r6], 0xb) pipe(&(0x7f0000000340)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r0, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.554366304s ago: executing program 5 (id=4236): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008884) r11 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r12 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r12, &(0x7f00000003c0)=""/243, 0xf3, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04043d20", @ANYRES16=r1], 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x105000, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.211914039s ago: executing program 0 (id=4237): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r2, r1}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f334579c0077290ad2b2c85a693afd7d8e5ffc37e1b3aebbd", 0x2e}) 2.309709195s ago: executing program 3 (id=4238): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = add_key$user(0x0, 0x0, &(0x7f0000000400)="02e8ad8030050dca06854d9439b1d3a3c424aa29a844ca51703b2e5ff4f77dc975d34bbe14fdc9f95d1a08277443b6952c3077bf4d1ae5df6d339feaa3f6ac8a7d0016461e4e10bc225d903df24d453d231764d630eb52", 0x57, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, 0x0, r1}, 0x0, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f33", 0x17}) 2.283465332s ago: executing program 0 (id=4239): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x806eb1, 0xc000, 0x7, 0x20002f7}) syz_mount_image$minix(&(0x7f0000000480), &(0x7f0000000000)='./file1\x00', 0x42, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x1, 0x1a5, &(0x7f0000000180)="$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") io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_sfeatures}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb434, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x5, 0xd, {0xd, 0xa, "d0d1d264a134f2d44aecc2"}}, &(0x7f0000000180)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "afc85edccad78670bb0136c67efdca2c512789b8c4af04841820393a2c6308bffea8c2a98d89b1f4cd4c556b27b9e33d08a4b409eadd7cff22a6aa9d773c2769db5cf3f227ac6a7b499fc4e0778783e0eddce5e7a5bf2a9cb81a8991559115805761b78f95eaa6781487a93d173268bf81d22d9a468e7111ebc466be08919f6b0a4baa87bb04416936f8186a6c8dab57ee02f095e71c084fa3933d074e8b01518bad2cbd37c670627837feeeface6067fba2fc2efd39e5d17ca9dc3a851e182cddefaae3c6952cc29057b6b4a27e10b2f38b4c28946520f585246857e383b01f3d83545f081f2b0b570133992c46ef"}}, 0x0, 0x0, 0x0}, 0x0) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0xffffffffffffffff) 1.543897757s ago: executing program 5 (id=4240): r0 = io_uring_setup(0x2b6f, &(0x7f0000000100)={0x0, 0xa4e1, 0x1000, 0x0, 0x163}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x23, 0x0, 0x0) 1.37005135s ago: executing program 7 (id=4241): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) utimensat(r0, 0x0, 0x0, 0x7000000) 1.330932226s ago: executing program 3 (id=4242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 1.211627518s ago: executing program 5 (id=4243): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000002600)="054cb852eb193dae2f2824bbe640bd4839a665d77b2c2163d9933f60d3f5df92c43d2e48ecf249f60a209d3505462cce57c9fe8e473278209a468c3db13e931706a7eab94dd7eec6003bd97dd1dd8440bb4f6e95c3283118b88eca0fc3636ec681dc14973702ecf0cfaa84b7c2d33d5756d366283ff66349b563a6779d85fcea27f02737798ea98e6e8875f5a8711ee756dd58ffebab8a0f76bf34d931b3f7823891de1ce3e47dde2736e1137bda94d0648e9bd84bec100750a3af3e085e812abd964caace2f8ef0bb522c2bc7fea4df2adfe82f90c76b29a2ead180c6") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="400000001000010025fd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="0e080400038000e700001680141873555a0f63ad23a2825d42c7c9e92b8abb236238d6847e0001801000060008000000380400"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.211032114s ago: executing program 0 (id=4244): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@usrquota}, {@grpjquota}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='usrquota', 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0x2d) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x3, 0x20000000, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x840, 0x0) 1.058174013s ago: executing program 7 (id=4245): r0 = syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1e8, &(0x7f00000002c0)="$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") mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) 128.514479ms ago: executing program 5 (id=4246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000a940), 0x0, 0x4) lsm_set_self_attr(0x66, 0x0, 0x22, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e130100c90001", @ANYRES16, @ANYRES8], 0x16) ppoll(&(0x7f0000000100)=[{r4, 0x200}, {r4, 0x5716}], 0x2, 0x0, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x40003, 0x0) 94.742284ms ago: executing program 0 (id=4247): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085503, &(0x7f0000000200)=0x8000006) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) 93.255929ms ago: executing program 3 (id=4248): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000017540)="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", 0x3de}], 0x1}}], 0x1, 0xc001) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 7 (id=4249): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 1747.867130][ T8247] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1748.920088][ T8247] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1749.017836][ T9340] hfs: node 4:3 still has 1 user(s)! [ 1749.252470][ T6167] usb 7-1: USB disconnect, device number 7 [ 1751.111417][ T8706] loop6: detected capacity change from 0 to 256 [ 1751.838413][ T8706] FAT-fs (loop6): Directory bread(block 64) failed [ 1751.864390][ T8706] FAT-fs (loop6): Directory bread(block 65) failed [ 1751.903155][ T8706] FAT-fs (loop6): Directory bread(block 66) failed [ 1751.959304][ T8706] FAT-fs (loop6): Directory bread(block 67) failed [ 1751.989435][ T8706] FAT-fs (loop6): Directory bread(block 68) failed [ 1752.007339][ T8706] FAT-fs (loop6): Directory bread(block 69) failed [ 1752.031237][ T8706] FAT-fs (loop6): Directory bread(block 70) failed [ 1752.050168][ T8706] FAT-fs (loop6): Directory bread(block 71) failed [ 1752.064170][ T8706] FAT-fs (loop6): Directory bread(block 72) failed [ 1752.079618][ T8706] FAT-fs (loop6): Directory bread(block 73) failed [ 1752.206495][ T8815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1752.519278][ T8819] random: crng reseeded on system resumption [ 1752.545000][ T8819] loop7: detected capacity change from 0 to 512 [ 1752.600652][ T8813] loop9: detected capacity change from 0 to 65536 [ 1752.610096][ T8819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1752.653272][ T8813] XFS (loop9): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1752.711113][ T8813] XFS (loop9): Ending clean mount [ 1754.643162][ T9340] XFS (loop9): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1755.300569][ T8952] netlink: 'syz.3.3536': attribute type 62 has an invalid length. [ 1755.376362][ T9059] 9pnet_fd: Insufficient options for proto=fd [ 1756.823135][T24348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1757.186047][ T9280] loop3: detected capacity change from 0 to 16 [ 1757.372321][ T9280] erofs (device loop3): mounted with root inode @ nid 36. [ 1757.419067][ T9147] loop1: detected capacity change from 0 to 4096 [ 1759.567078][ T9395] æÿîÿ: entered promiscuous mode [ 1759.817547][ T9400] loop1: detected capacity change from 0 to 128 [ 1760.966211][ T9400] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1761.124921][ T9400] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1761.816448][ T9498] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.3552'. [ 1763.265012][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1763.265036][ T30] audit: type=1326 audit(2000001367.066:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1763.363574][ T30] audit: type=1326 audit(2000001367.106:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1763.417555][ T30] audit: type=1326 audit(2000001367.106:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1763.575653][ T30] audit: type=1326 audit(2000001367.106:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1763.597921][ C0] vkms_vblank_simulate: vblank timer overrun [ 1763.658194][ T30] audit: type=1326 audit(2000001367.116:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1763.680361][ C0] vkms_vblank_simulate: vblank timer overrun [ 1763.716563][ T9638] overlay: ./bus is not a directory [ 1763.835831][ T30] audit: type=1326 audit(2000001367.186:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1763.970204][ T30] audit: type=1326 audit(2000001367.186:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1764.029245][T11326] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1764.048538][ T30] audit: type=1326 audit(2000001367.196:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1764.072128][ T30] audit: type=1326 audit(2000001367.196:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1764.095210][ T30] audit: type=1326 audit(2000001367.196:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.3.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56638f749 code=0x7ffc0000 [ 1764.926229][ T9751] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3562'. [ 1767.137620][ T9974] netlink: 'syz.0.3568': attribute type 62 has an invalid length. [ 1768.858674][T10001] netlink: 'syz.6.3573': attribute type 62 has an invalid length. [ 1769.255059][T10099] Illegal XDP return value 4294967294 on prog (id 734) dev N/A, expect packet loss! [ 1770.414217][T10114] loop3: detected capacity change from 0 to 64 [ 1771.175501][T10110] loop7: detected capacity change from 0 to 2048 [ 1771.187789][T10117] loop9: detected capacity change from 0 to 512 [ 1771.209194][T10114] hfs: inconsistency in B*Tree (58880,2,0,3,0) [ 1771.240376][T10114] hfs: get root inode failed [ 1771.245528][T10110] loop7: p1 p2 < > p3 < p5 p6 > p4 [ 1771.245581][T10110] loop7: partition table partially beyond EOD, truncated [ 1771.245687][T10110] loop7: p1 size 83886080 extends beyond EOD, truncated [ 1771.247437][T10110] loop7: p2 start 4278190080 is beyond EOD, truncated [ 1771.381648][T10110] loop7: p4 size 8192 extends beyond EOD, truncated [ 1771.394954][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1771.394974][ T30] audit: type=1326 audit(2000001375.196:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1771.406849][T10110] loop7: p5 size 83886080 extends beyond EOD, truncated [ 1771.542984][T10224] overlay: ./bus is not a directory [ 1772.002522][ T30] audit: type=1326 audit(2000001375.196:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.014912][T10110] loop7: p6 size 8192 extends beyond EOD, [ 1772.049276][T10228] usb usb8: usbfs: process 10228 (syz.9.3586) did not claim interface 0 before use [ 1772.070427][T10110] truncated [ 1772.078339][ T30] audit: type=1326 audit(2000001375.236:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.138270][ T30] audit: type=1326 audit(2000001375.236:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.160632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1772.191368][ T30] audit: type=1326 audit(2000001375.236:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.215161][ T30] audit: type=1326 audit(2000001375.246:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.245305][ T30] audit: type=1326 audit(2000001375.246:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.272289][ T30] audit: type=1326 audit(2000001375.246:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.328716][ T30] audit: type=1326 audit(2000001375.246:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.485147][ T30] audit: type=1326 audit(2000001375.246:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1772.557628][T10236] FAULT_INJECTION: forcing a failure. [ 1772.557628][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.571423][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.6.3589 Not tainted syzkaller #0 PREEMPT(full) [ 1772.571455][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1772.571472][T10236] Call Trace: [ 1772.571483][T10236] [ 1772.571494][T10236] dump_stack_lvl+0x189/0x250 [ 1772.571537][T10236] ? __pfx____ratelimit+0x10/0x10 [ 1772.571574][T10236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1772.571611][T10236] ? __pfx__printk+0x10/0x10 [ 1772.571646][T10236] ? __pfx___might_resched+0x10/0x10 [ 1772.571673][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.571712][T10236] should_fail_ex+0x414/0x560 [ 1772.571760][T10236] should_failslab+0xa8/0x100 [ 1772.571789][T10236] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1772.571830][T10236] ? drm_mode_duplicate+0x61/0xe0 [ 1772.571858][T10236] ? drm_mode_duplicate+0xa8/0xe0 [ 1772.571895][T10236] drm_mode_duplicate+0x61/0xe0 [ 1772.571930][T10236] drm_add_modes_noedid+0x130/0x230 [ 1772.571990][T10236] vkms_conn_get_modes+0x20/0x40 [ 1772.572021][T10236] drm_helper_probe_single_connector_modes+0x8c8/0x17d0 [ 1772.572064][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572128][T10236] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 1772.572195][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572229][T10236] ? do_raw_spin_unlock+0x122/0x240 [ 1772.572269][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572298][T10236] ? _raw_spin_unlock+0x28/0x50 [ 1772.572332][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572361][T10236] ? drm_is_current_master+0x19f/0x200 [ 1772.572396][T10236] drm_mode_getconnector+0x659/0x1370 [ 1772.572438][T10236] ? __lock_acquire+0xab9/0xd20 [ 1772.572476][T10236] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 1772.572509][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572549][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572594][T10236] drm_ioctl_kernel+0x2cf/0x390 [ 1772.572630][T10236] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 1772.572665][T10236] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1772.572713][T10236] drm_ioctl+0x67f/0xb10 [ 1772.572754][T10236] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 1772.572796][T10236] ? __pfx_drm_ioctl+0x10/0x10 [ 1772.572847][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572877][T10236] ? __fget_files+0x3a0/0x420 [ 1772.572902][T10236] ? __fget_files+0x2a/0x420 [ 1772.572930][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572960][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.572992][T10236] ? __pfx_drm_ioctl+0x10/0x10 [ 1772.573026][T10236] __se_sys_ioctl+0xfc/0x170 [ 1772.573064][T10236] do_syscall_64+0xfa/0xfa0 [ 1772.573102][T10236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.573141][T10236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.573165][T10236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.573195][T10236] ? exc_page_fault+0xab/0x100 [ 1772.573236][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.573261][T10236] RIP: 0033:0x7f400638f749 [ 1772.573282][T10236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1772.573304][T10236] RSP: 002b:00007f4007158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1772.573331][T10236] RAX: ffffffffffffffda RBX: 00007f40065e5fa0 RCX: 00007f400638f749 [ 1772.573351][T10236] RDX: 0000200000000200 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 1772.573368][T10236] RBP: 00007f4007158090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.573385][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.573401][T10236] R13: 00007f40065e6038 R14: 00007f40065e5fa0 R15: 00007ffd0b0d3bc8 [ 1772.573452][T10236] [ 1773.072529][T10238] loop9: detected capacity change from 0 to 16 [ 1773.254617][T10238] erofs (device loop9): mounted with root inode @ nid 36. [ 1775.876194][T10472] loop9: detected capacity change from 0 to 128 [ 1775.919263][T10472] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1775.958865][T10472] ext4 filesystem being mounted at /603/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1777.245442][T10486] loop6: detected capacity change from 0 to 16 [ 1777.908542][T10486] erofs (device loop6): mounted with root inode @ nid 36. [ 1777.996381][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3604'. [ 1778.309629][T10494] loop6: detected capacity change from 0 to 128 [ 1778.362905][T10494] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1778.404096][T10494] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.433842][T10498] 9pnet_fd: Insufficient options for proto=fd [ 1779.391960][ T9340] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1779.740528][T23626] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1779.784898][T10510] netlink: 'syz.7.3609': attribute type 62 has an invalid length. [ 1780.272474][ T6154] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1780.662467][ T6154] usb 10-1: Using ep0 maxpacket: 16 [ 1780.751970][ T6154] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.896342][ T6154] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.906413][ T6154] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1780.930408][ T6154] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.058152][ T6154] usb 10-1: config 0 descriptor?? [ 1781.625449][ T6154] kye 0003:0458:5016.0016: control desc unexpectedly large [ 1781.807055][ T6154] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.0016/input/input30 [ 1781.904026][ T6154] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.0016/input/input31 [ 1781.984095][T10721] loop3: detected capacity change from 0 to 256 [ 1781.994666][ T6154] kye 0003:0458:5016.0016: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0 [ 1782.008235][T10721] exfat: Deprecated parameter 'utf8' [ 1782.014552][T10721] exfat: Deprecated parameter 'namecase' [ 1782.156175][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3608'. [ 1782.212795][T10721] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1782.239279][T10515] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3612'. [ 1782.882421][ C0] kye 0003:0458:5016.0016: usb_submit_urb(ctrl) failed: -1 [ 1782.909808][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1783.111092][T10741] loop3: detected capacity change from 0 to 128 [ 1783.145318][T10741] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1783.151388][T10741] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1783.735709][ T6154] usb 10-1: USB disconnect, device number 13 [ 1784.791623][ T6031] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1784.945414][T10857] loop1: detected capacity change from 0 to 2048 [ 1784.955629][T10857] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1784.967967][T10857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1788.139802][T11193] loop9: detected capacity change from 0 to 256 [ 1788.188356][T11193] vfat: Unknown parameter 's‹ortäjÅ@' [ 1788.266641][T11197] loop1: detected capacity change from 0 to 128 [ 1788.363831][T11197] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1788.504070][T11197] ext4 filesystem being mounted at /539/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1789.255479][T11326] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1789.888422][T11322] netlink: 'syz.1.3647': attribute type 62 has an invalid length. [ 1790.576950][T11434] netlink: 'syz.7.3649': attribute type 62 has an invalid length. [ 1790.880004][T11539] loop7: detected capacity change from 0 to 128 [ 1791.100912][T11539] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1791.272453][T11539] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1792.559437][T11662] netlink: 'syz.0.3656': attribute type 62 has an invalid length. [ 1793.564003][T11672] netlink: 'syz.9.3658': attribute type 62 has an invalid length. [ 1793.917385][T24348] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1794.981791][T11765] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.3665'. [ 1796.225017][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.231354][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.601060][ T1206] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1797.871873][ T1206] usb 2-1: Using ep0 maxpacket: 8 [ 1797.882752][ T1206] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1797.920282][T11915] loop9: detected capacity change from 0 to 1024 [ 1797.926824][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1797.942550][ T1206] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1797.957464][T11915] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1797.981863][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1797.997733][T11915] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 1798.013032][ T1206] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.237710][T11915] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1798.248604][ T1206] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1798.269585][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.950407][T11915] EXT4-fs error (device loop9): ext4_get_journal_inode:5808: inode #5: comm syz.9.3673: unexpected bad inode w/o EXT4_IGET_BAD [ 1798.982923][T11915] EXT4-fs (loop9): no journal found [ 1799.016797][ T1206] usb 2-1: GET_CAPABILITIES returned 0 [ 1799.101603][T11915] EXT4-fs (loop9): can't get journal size [ 1799.122116][ T1206] usbtmc 2-1:16.0: can't read capabilities [ 1799.138661][T11915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1799.890754][ T9340] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1800.006449][T12033] loop6: detected capacity change from 0 to 512 [ 1800.027349][T12033] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1800.176211][T12033] EXT4-fs (loop6): 1 truncate cleaned up [ 1800.187036][T12033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1800.600794][T12037] overlay: ./file1 is not a directory [ 1801.242197][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1801.242221][ T30] audit: type=1326 audit(2000001404.618:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.424479][ T30] audit: type=1326 audit(2000001404.618:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.433432][T23626] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1801.536888][ T30] audit: type=1326 audit(2000001404.618:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.636346][ T30] audit: type=1326 audit(2000001404.628:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.669602][T23626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1801.691608][ T30] audit: type=1326 audit(2000001404.628:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.704813][T12178] usb 2-1: USB disconnect, device number 10 [ 1801.714438][ T30] audit: type=1326 audit(2000001404.628:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.778431][ T30] audit: type=1326 audit(2000001404.628:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.812669][ T6154] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1801.820998][ T30] audit: type=1326 audit(2000001404.638:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.894440][ T30] audit: type=1326 audit(2000001404.638:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1801.930215][T23626] team0: Port device syz_tun removed [ 1801.974912][ T30] audit: type=1326 audit(2000001404.638:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400638f749 code=0x7ffc0000 [ 1802.003076][ T6154] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1802.043812][ T6154] usb 10-1: config 0 has no interface number 0 [ 1802.067389][ T6154] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1802.081277][ T6154] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.110228][ T6154] usb 10-1: Product: syz [ 1802.116200][ T6154] usb 10-1: Manufacturer: syz [ 1802.129687][ T6154] usb 10-1: SerialNumber: syz [ 1802.156313][ T6154] usb 10-1: config 0 descriptor?? [ 1802.171509][ T6154] yurex 10-1:0.50: Could not find endpoints [ 1802.209429][T12050] loop1: detected capacity change from 0 to 128 [ 1802.333379][T12050] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1802.411586][T12041] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1802.422895][T12041] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1802.456794][T12050] ext4 filesystem being mounted at /545/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1802.456980][T12041] evm: overlay not supported [ 1803.011445][ T9] usb 10-1: USB disconnect, device number 14 [ 1804.069754][T12062] overlay: ./bus is not a directory [ 1804.070746][T11326] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1804.398522][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1804.410214][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1804.419561][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1804.434548][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1804.446746][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1804.510377][T12091] loop9: detected capacity change from 0 to 128 [ 1804.577764][T12091] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1804.654386][T12091] ext4 filesystem being mounted at /617/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1804.770610][T12190] netlink: 'syz.7.3695': attribute type 62 has an invalid length. [ 1806.571018][ T5825] Bluetooth: hci3: command tx timeout [ 1807.461732][T12311] loop7: detected capacity change from 0 to 256 [ 1807.489542][T12311] exfat: Deprecated parameter 'namecase' [ 1807.521443][T12311] exfat: Deprecated parameter 'namecase' [ 1807.561926][T12311] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 1807.638849][T12076] chnl_net:caif_netlink_parms(): no params data found [ 1808.652281][ T5825] Bluetooth: hci3: command tx timeout [ 1808.764960][ T9340] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1808.838051][T12076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.881900][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.889293][T12076] bridge_slave_0: entered allmulticast mode [ 1808.913296][T12076] bridge_slave_0: entered promiscuous mode [ 1808.922433][T12076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.929636][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.937025][T12076] bridge_slave_1: entered allmulticast mode [ 1808.945125][T12076] bridge_slave_1: entered promiscuous mode [ 1809.380487][T12436] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3707'. [ 1809.970190][T12076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.008230][T12076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1810.731082][ T5825] Bluetooth: hci3: command tx timeout [ 1811.804342][T12076] team0: Port device team_slave_0 added [ 1811.879214][T12076] team0: Port device team_slave_1 added [ 1812.810801][ T5825] Bluetooth: hci3: command tx timeout [ 1814.087565][T12076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.260604][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.286528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1814.305663][T12076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.318887][T12076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.326146][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.352037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1814.399911][T12076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.495909][T12676] loop7: detected capacity change from 0 to 1024 [ 1814.521666][T12676] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1814.552554][T12676] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 1814.563334][T12676] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1814.603842][T12076] hsr_slave_0: entered promiscuous mode [ 1814.610760][ T6154] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1814.613346][T12676] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: inode #5: comm syz.7.3720: unexpected bad inode w/o EXT4_IGET_BAD [ 1814.634230][T12076] hsr_slave_1: entered promiscuous mode [ 1814.653636][T12076] debugfs: 'hsr0' already exists in 'hsr' [ 1814.660739][T12676] EXT4-fs (loop7): no journal found [ 1814.661052][T12076] Cannot create hsr debugfs directory [ 1814.672624][T12676] EXT4-fs (loop7): can't get journal size [ 1814.687345][T12676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1814.820099][T24348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1814.839784][ T6154] usb 4-1: Using ep0 maxpacket: 16 [ 1814.853385][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.890672][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.920718][ T6154] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1814.960433][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.010241][ T6154] usb 4-1: config 0 descriptor?? [ 1816.007069][ T6154] kye 0003:0458:5016.0017: control desc unexpectedly large [ 1816.318545][ T6154] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0017/input/input32 [ 1816.897551][T12671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3717'. [ 1816.995659][ T6154] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0017/input/input33 [ 1817.101754][ T6154] kye 0003:0458:5016.0017: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 1817.425485][ T6154] usb 4-1: USB disconnect, device number 16 [ 1817.802106][T12076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1817.830016][T12076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1817.842799][T12076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1817.863299][T12076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1818.167114][T12076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.187864][T12076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.240608][T28441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.247886][T28441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.292150][T28441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.299416][T28441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.575151][T13131] loop9: detected capacity change from 0 to 764 [ 1820.328985][T13183] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1820.956817][T13236] loop1: detected capacity change from 0 to 128 [ 1821.054812][T13236] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 1822.017323][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1822.473166][T13348] loop3: detected capacity change from 0 to 128 [ 1822.873411][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1822.884091][T13348] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1822.933084][T13348] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1823.718879][ T6031] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1824.246957][T12076] veth0_vlan: entered promiscuous mode [ 1824.446847][T12076] veth1_vlan: entered promiscuous mode [ 1824.585676][T12076] veth0_macvtap: entered promiscuous mode [ 1824.596456][T12076] veth1_macvtap: entered promiscuous mode [ 1824.628943][T12076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1824.696935][T12076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1825.248170][T12061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.413732][T12061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.438094][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1825.438113][ T30] audit: type=1326 audit(2000001429.230:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1825.477030][T12061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.497510][ T30] audit: type=1326 audit(2000001429.230:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1825.561522][T13879] overlay: ./bus is not a directory [ 1825.572596][T12061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.587573][ T30] audit: type=1326 audit(2000001429.270:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1825.672730][ T30] audit: type=1326 audit(2000001429.270:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1825.729928][ T30] audit: type=1326 audit(2000001429.270:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1825.902887][ T30] audit: type=1326 audit(2000001429.270:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1826.049797][ T30] audit: type=1326 audit(2000001429.270:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1826.099860][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1826.118633][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.276370][ T30] audit: type=1326 audit(2000001429.270:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1827.432162][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.441301][ T30] audit: type=1326 audit(2000001429.270:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1827.464406][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.513114][ T30] audit: type=1326 audit(2000001429.270:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.9.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1828.882042][T14038] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3756'. [ 1828.929070][T14042] netlink: 'syz.0.3764': attribute type 1 has an invalid length. [ 1828.968538][T14040] netlink: 'syz.1.3763': attribute type 1 has an invalid length. [ 1829.568942][T14049] loop9: detected capacity change from 0 to 2048 [ 1829.600368][T14049] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1829.620710][T14049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1830.225409][T14055] loop5: detected capacity change from 0 to 2048 [ 1830.236009][T14055] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1830.250625][T14055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1834.349354][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 1834.440051][T14248] loop5: detected capacity change from 0 to 1024 [ 1834.453137][T14248] hfsplus: Bad value for 'part' [ 1835.066061][T14248] loop5: detected capacity change from 0 to 64 [ 1835.214194][T14293] loop3: detected capacity change from 0 to 1024 [ 1835.310013][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1835.310036][ T30] audit: type=1800 audit(2000001439.100:308): pid=14248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3775" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 1835.400282][T14293] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 1835.409919][T14293] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1835.419576][T14293] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3776: Failed to acquire dquot type 0 [ 1835.480749][T14293] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1835.497260][T14293] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.3776: corrupted inode contents [ 1835.513828][T14293] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.3776: mark_inode_dirty error [ 1835.545199][T14293] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.3776: corrupted inode contents [ 1835.564414][T14293] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3776: mark_inode_dirty error [ 1835.579811][T14293] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.3776: corrupted inode contents [ 1835.592834][T14293] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3776: mark_inode_dirty error [ 1835.605434][T14293] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.3776: corrupted inode contents [ 1835.626040][T14293] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 1835.650896][T14293] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.3776: corrupted inode contents [ 1835.675906][T14293] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.3776: mark_inode_dirty error [ 1835.690260][T14293] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 1835.711076][T14293] EXT4-fs (loop3): 1 truncate cleaned up [ 1835.718784][T14293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1835.875970][T12076] hfs: node 4:3 still has 1 user(s)! [ 1836.568907][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.647872][T14304] netlink: 'syz.5.3781': attribute type 1 has an invalid length. [ 1836.710345][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3782'. [ 1836.760268][T14306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3782'. [ 1836.835654][T14362] tmpfs: Bad value for 'mpol' [ 1836.986245][T14362] loop5: detected capacity change from 0 to 4096 [ 1837.014811][T14362] ntfs3: Unknown parameter './bus' [ 1837.041134][T14417] loop3: detected capacity change from 0 to 2048 [ 1837.106917][T14417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1839.249326][T14515] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3792'. [ 1839.759120][T20573] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1840.059017][T20573] usb 4-1: Using ep0 maxpacket: 8 [ 1840.088597][T20573] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1840.111554][ T1206] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1840.179913][T20573] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1840.215187][T20573] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1840.268730][T20573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.285443][T20573] usb 4-1: Product:   [ 1840.308523][T20573] usb 4-1: Manufacturer: á‡éªãâ±ëººä‡¾Ý—뜄⢌Ōï¶ã¥“鲲ážî¾„íŒ­è¦æ“¹å„ºì¬Œç§ªã¹†êŽ ì´¦î²œì¿¨ã´²ê ¯ß¢åˆ´ç¤²ã…›ì­‚äµ¬à£èˆê“¿å”•é¯¢ã­…æ‚¯ã°æ‚ç¼è¢€î»”唱⋢æ²é´…귻镶멨 [ 1840.369046][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.142044][ T1206] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1841.152579][T20573] usb 4-1: SerialNumber: 詅鷺ﯕ爠纜⶛ἢ䲭蘇 [ 1841.160931][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.492292][T14571] netlink: 'syz.9.3798': attribute type 62 has an invalid length. [ 1841.696517][ T1206] usb 2-1: config 0 descriptor?? [ 1841.778435][ T1206] usbhid 2-1:0.0: can't add hid device: -71 [ 1841.786126][ T1206] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1841.837656][ T1206] usb 2-1: USB disconnect, device number 11 [ 1841.964273][T20573] usb 4-1: can't set config #1, error -71 [ 1842.040449][T20573] usb 4-1: USB disconnect, device number 17 [ 1842.075890][T14615] loop7: detected capacity change from 0 to 4096 [ 1842.126474][T14673] loop3: detected capacity change from 0 to 128 [ 1842.202758][T14675] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1842.434147][T14673] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1842.549031][ T1206] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1842.829101][T14673] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.978847][ T1206] usb 2-1: Using ep0 maxpacket: 8 [ 1843.020950][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.068935][ T1206] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1843.101665][T14791] loop9: detected capacity change from 0 to 16 [ 1843.111591][T14791] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1843.117478][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.147343][T14678] cramfs: Error -3 while decompressing! [ 1843.153641][T14678] cramfs: ffffffff998d0de8(453)->ffff888033b90000(4096) [ 1844.038997][ T1206] usb 2-1: config 0 descriptor?? [ 1844.473428][ T1206] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1844.703303][ T6031] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1845.538788][ T1206] gspca_vc032x: reg_w err -110 [ 1845.543671][ T1206] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1845.739611][T14808] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3810'. [ 1845.925759][T14813] loop5: detected capacity change from 0 to 1024 [ 1845.962305][T14813] hfsplus: Bad value for 'part' [ 1846.020242][T14813] loop5: detected capacity change from 0 to 64 [ 1846.084469][ T30] audit: type=1800 audit(2000001449.871:309): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3813" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 1846.124014][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.125891][T14916] loop9: detected capacity change from 0 to 764 [ 1846.143139][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.333739][T12076] hfs: node 4:3 still has 1 user(s)! [ 1846.801489][T14920] netlink: 'syz.0.3815': attribute type 62 has an invalid length. [ 1846.825784][T14922] loop1: detected capacity change from 0 to 1024 [ 1846.986832][T14924] netlink: 'syz.5.3816': attribute type 1 has an invalid length. [ 1847.038626][T14924] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3816'. [ 1847.245510][ T1206] usb 2-1: USB disconnect, device number 12 [ 1847.279980][ T6020] hfsplus: b-tree write err: -5, ino 4 [ 1847.581479][T15042] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1848.841398][T15152] batadv0: entered promiscuous mode [ 1848.882002][T15152] batadv0: left promiscuous mode [ 1849.204806][T15154] loop1: detected capacity change from 0 to 2048 [ 1849.217996][T15154] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1849.235736][T15154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1849.622204][T15157] netlink: 'syz.0.3825': attribute type 10 has an invalid length. [ 1849.998198][T15169] loop3: detected capacity change from 0 to 512 [ 1850.038915][T15169] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1850.180079][T15238] loop5: detected capacity change from 0 to 512 [ 1850.224588][T15238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1850.480344][T15274] loop3: detected capacity change from 0 to 1024 [ 1850.539571][T15274] hfsplus: Bad value for 'part' [ 1850.594897][T15280] loop1: detected capacity change from 0 to 128 [ 1850.634553][T12076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.040420][T15274] loop3: detected capacity change from 0 to 64 [ 1851.071533][T15280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1851.216375][T15280] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1851.247545][ T30] audit: type=1800 audit(2000001455.031:310): pid=15274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3831" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 1851.468085][T15353] loop5: detected capacity change from 0 to 764 [ 1852.258733][T15498] Symlink component flag not implemented [ 1852.264665][T15498] Symlink component flag not implemented [ 1852.271874][T15498] Symlink component flag not implemented (128) [ 1852.278127][T15498] Symlink component flag not implemented (122) [ 1852.752400][ T6031] hfs: node 4:3 still has 1 user(s)! [ 1853.349341][T11326] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1854.702357][T15728] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.715731][T15728] loop5: detected capacity change from 0 to 512 [ 1854.723575][T15728] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1854.795026][T15728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1854.814282][T15728] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1855.210221][T15742] ieee802154 phy0 wpan0: encryption failed: -22 [ 1855.224870][T15742] loop9: detected capacity change from 0 to 512 [ 1855.239849][T12076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.251395][T15742] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1855.352772][T15742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1855.429402][T15742] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1855.896624][T15755] loop7: detected capacity change from 0 to 128 [ 1856.942554][T15420] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1857.026759][T15755] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1857.044519][ T9340] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.078227][T15755] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1857.284789][T15420] usb 6-1: Using ep0 maxpacket: 16 [ 1857.292519][T15420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.310978][T15420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.343212][T15420] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1857.353490][T15420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.364668][T15420] usb 6-1: config 0 descriptor?? [ 1857.385506][T24348] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1857.589220][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1857.613784][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.996891][T15420] kye 0003:0458:5016.0018: control desc unexpectedly large [ 1858.022053][T15420] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0018/input/input34 [ 1858.133716][T15420] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0018/input/input35 [ 1858.176885][T15420] kye 0003:0458:5016.0018: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 1858.214538][T15936] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3858'. [ 1858.259550][T15935] loop7: detected capacity change from 0 to 2048 [ 1858.270486][T15935] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1858.282764][T15935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1858.893513][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3849'. [ 1858.908096][T15936] loop1: detected capacity change from 0 to 1024 [ 1859.168393][ C1] kye 0003:0458:5016.0018: usb_submit_urb(ctrl) failed: -1 [ 1859.209772][T15745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1859.294901][T15996] loop7: detected capacity change from 0 to 16 [ 1859.307982][T15420] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 1859.391949][T15996] erofs (device loop7): mounted with root inode @ nid 36. [ 1859.444924][T15997] loop1: detected capacity change from 0 to 4096 [ 1859.505351][T15997] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1859.609056][T15997] ntfs3(loop1): ino=1a, mi_enum_attr [ 1859.614430][T15997] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1859.657050][T15997] ntfs3(loop1): ino=1a, mi_enum_attr [ 1859.703071][T15997] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1859.747121][T16005] loop7: detected capacity change from 0 to 2048 [ 1859.759800][T16005] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1859.772820][T16005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1860.124295][T16009] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3867'. [ 1860.126850][ T5961] usb 6-1: USB disconnect, device number 5 [ 1861.095985][T16017] x_tables: duplicate underflow at hook 1 [ 1862.501852][T16027] netlink: 'syz.3.3873': attribute type 62 has an invalid length. [ 1862.650000][T16033] loop7: detected capacity change from 0 to 512 [ 1862.875489][T16037] loop3: detected capacity change from 0 to 16 [ 1864.759429][T16066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1864.769316][T20573] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1864.935736][T20573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.973165][T20573] usb 4-1: config 0 has no interfaces? [ 1864.996634][T20573] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1865.057950][T20573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.099200][T20573] usb 4-1: config 0 descriptor?? [ 1865.788933][T16064] loop3: detected capacity change from 0 to 2048 [ 1865.860445][T16064] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 1865.865699][T16064] loop3: partition table partially beyond EOD, truncated [ 1865.910379][T16149] netlink: 'syz.9.3888': attribute type 1 has an invalid length. [ 1865.921185][T16064] loop3: p1 size 83886080 extends beyond EOD, truncated [ 1865.947351][T16064] loop3: p2 start 4278190080 is beyond EOD, truncated [ 1865.984866][T16064] loop3: p4 size 8192 extends beyond EOD, truncated [ 1866.010171][T16064] loop3: p5 size 83886080 extends beyond EOD, truncated [ 1866.067882][T16064] loop3: p6 size 8192 extends beyond EOD, truncated [ 1866.124521][ T30] audit: type=1326 audit(2000001469.922:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1866.166545][T16179] overlay: ./bus is not a directory [ 1866.220204][ T30] audit: type=1326 audit(2000001469.922:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1866.242793][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3892'. [ 1866.312779][T16186] loop5: detected capacity change from 0 to 764 [ 1866.340742][ T30] audit: type=1326 audit(2000001469.922:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1867.212578][ T30] audit: type=1326 audit(2000001469.922:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1867.235215][ T30] audit: type=1326 audit(2000001469.922:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1867.271336][T16190] Symlink component flag not implemented [ 1867.277292][T16190] Symlink component flag not implemented [ 1867.287810][T16190] Symlink component flag not implemented (128) [ 1867.294193][T16190] Symlink component flag not implemented (122) [ 1867.362631][ T30] audit: type=1326 audit(2000001469.922:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1867.364209][T16193] overlay: ./bus is not a directory [ 1867.415338][ T30] audit: type=1326 audit(2000001469.922:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1867.493552][ T30] audit: type=1326 audit(2000001469.922:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1867.949904][ T30] audit: type=1326 audit(2000001469.952:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1868.006998][T20573] usb 4-1: USB disconnect, device number 18 [ 1868.061136][ T30] audit: type=1326 audit(2000001469.952:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fb78f749 code=0x7ffc0000 [ 1868.945097][T16304] loop3: detected capacity change from 0 to 2048 [ 1868.955166][T16304] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1868.967949][T16304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1869.711607][T16315] loop5: detected capacity change from 0 to 1024 [ 1869.738317][T16315] hfsplus: Bad value for 'part' [ 1869.765844][T16315] loop5: detected capacity change from 0 to 64 [ 1870.606625][T12076] hfs: node 4:3 still has 1 user(s)! [ 1870.657319][ T1206] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1870.990430][ T1206] usb 10-1: Using ep0 maxpacket: 8 [ 1871.222710][ T1206] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.327957][ T1206] usb 10-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1871.337671][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1871.337691][ T30] audit: type=1326 audit(2000001475.112:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1871.369761][ T1206] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1871.369817][ T1206] usb 10-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1871.369846][ T1206] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.372765][ T1206] usb 10-1: config 0 descriptor?? [ 1871.418695][T16435] overlay: ./bus is not a directory [ 1871.429999][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1871.477348][ T30] audit: type=1326 audit(2000001475.112:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1871.480553][ T1206] qmi_wwan 10-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1871.532897][ T30] audit: type=1326 audit(2000001475.112:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1871.787290][ T30] audit: type=1326 audit(2000001475.112:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1871.840283][ T30] audit: type=1326 audit(2000001475.112:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1872.346399][T16545] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1872.617428][ T30] audit: type=1326 audit(2000001475.112:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1872.657276][ T30] audit: type=1326 audit(2000001475.112:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1872.764911][ T30] audit: type=1326 audit(2000001475.112:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1872.801798][ T30] audit: type=1326 audit(2000001475.112:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1872.843565][ T30] audit: type=1326 audit(2000001475.112:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1872.883332][T20575] usb 10-1: USB disconnect, device number 15 [ 1873.067679][T16553] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3902'. [ 1873.971877][T16552] netlink: 'syz.0.3913': attribute type 62 has an invalid length. [ 1877.490462][T16585] loop5: detected capacity change from 0 to 1024 [ 1877.515962][T16585] hfsplus: Bad value for 'part' [ 1877.613409][T16585] loop5: detected capacity change from 0 to 64 [ 1878.379633][T16669] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3923'. [ 1878.768984][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1878.769005][ T30] audit: type=1800 audit(2000001482.572:414): pid=16585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3921" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 1878.902193][T12076] hfs: node 4:3 still has 1 user(s)! [ 1878.928133][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1878.943520][T16695] loop9: detected capacity change from 0 to 47 [ 1878.951661][T16695] minix: Unknown parameter '/dev/ptmx' [ 1879.074261][T16701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3926'. [ 1879.301865][T16703] loop1: detected capacity change from 0 to 512 [ 1879.309254][T16703] EXT4-fs: Ignoring removed mblk_io_submit option [ 1879.563352][T20575] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1879.593332][T16703] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1879.600557][T16703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1879.667350][T16703] EXT4-fs (loop1): 1 truncate cleaned up [ 1879.675043][T16703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1879.781970][T20575] usb 10-1: device descriptor read/64, error -71 [ 1879.890776][T11326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1880.104162][T20575] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1880.400825][T20575] usb 10-1: device descriptor read/64, error -71 [ 1880.521928][T20575] usb usb10-port1: attempt power cycle [ 1881.156917][T16724] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3933'. [ 1881.723594][T16726] loop7: detected capacity change from 0 to 2048 [ 1881.734741][T16726] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1881.755745][T16726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1882.177497][T20575] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1883.929568][T16948] batadv0: entered promiscuous mode [ 1883.941648][T16948] batadv0: left promiscuous mode [ 1884.302009][T16952] loop5: detected capacity change from 0 to 2048 [ 1884.312423][T16952] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1884.331215][T16952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1885.751751][T17073] netlink: 'syz.3.3946': attribute type 62 has an invalid length. [ 1886.117371][T20575] usb 10-1: device descriptor read/8, error -71 [ 1886.727791][T17081] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3947'. [ 1887.820914][T17195] loop1: detected capacity change from 0 to 2048 [ 1887.831200][T17195] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1887.859448][T17195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1889.304860][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1889.635817][T17206] batadv0: entered promiscuous mode [ 1889.668483][T17206] batadv0: left promiscuous mode [ 1889.762991][ T30] audit: type=1326 audit(2000001493.553:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1889.833980][ T30] audit: type=1326 audit(2000001493.563:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1889.920405][ T30] audit: type=1326 audit(2000001493.683:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1889.971397][T17214] overlay: ./bus is not a directory [ 1889.984183][ T30] audit: type=1326 audit(2000001493.683:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1890.125589][ T30] audit: type=1326 audit(2000001493.683:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1890.180744][ T30] audit: type=1326 audit(2000001493.683:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1890.203594][ T30] audit: type=1326 audit(2000001493.683:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1890.250820][ T30] audit: type=1326 audit(2000001493.683:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1890.300097][ T30] audit: type=1326 audit(2000001493.683:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1890.389851][ T30] audit: type=1326 audit(2000001493.683:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014378f749 code=0x7ffc0000 [ 1890.575030][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3957'. [ 1890.901064][T17227] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.3963'. [ 1893.296163][ T5961] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1893.464226][ T5961] usb 10-1: device descriptor read/64, error -71 [ 1893.704787][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'. [ 1893.763416][T17265] netlink: 'syz.1.3972': attribute type 62 has an invalid length. [ 1893.836143][ T5961] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1894.009084][ T5961] usb 10-1: device descriptor read/64, error -71 [ 1894.184562][ T5961] usb usb10-port1: attempt power cycle [ 1894.625996][ T5961] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1895.166148][ T5143] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1895.177673][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1895.177706][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1895.177725][ T5143] Workqueue: hci6 hci_rx_work [ 1895.177765][ T5143] Call Trace: [ 1895.177777][ T5143] [ 1895.177788][ T5143] dump_stack_lvl+0x189/0x250 [ 1895.177832][ T5143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1895.177869][ T5143] ? __pfx__printk+0x10/0x10 [ 1895.177897][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.177933][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.177962][ T5143] ? kernfs_path_from_node+0x250/0x290 [ 1895.177995][ T5143] ? kernfs_path_from_node+0x2f/0x290 [ 1895.178035][ T5143] sysfs_create_dir_ns+0x259/0x280 [ 1895.178072][ T5143] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1895.178108][ T5143] ? do_raw_spin_unlock+0x122/0x240 [ 1895.178151][ T5143] kobject_add_internal+0x59f/0xb40 [ 1895.178190][ T5143] kobject_add+0x155/0x220 [ 1895.178226][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.178262][ T5143] ? __pfx_kobject_add+0x10/0x10 [ 1895.178287][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.178318][ T5143] ? _raw_spin_unlock+0x3f/0x50 [ 1895.178351][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.178386][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.178416][ T5143] ? get_device_parent+0x366/0x3a0 [ 1895.178458][ T5143] device_add+0x408/0xb50 [ 1895.178496][ T5143] hci_conn_add_sysfs+0xd5/0x1e0 [ 1895.178531][ T5143] le_conn_complete_evt+0xf39/0x1500 [ 1895.178588][ T5143] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1895.178635][ T5143] ? irqentry_exit+0x74/0x90 [ 1895.178672][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.178702][ T5143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1895.178742][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.178782][ T5143] hci_le_conn_complete_evt+0x187/0x450 [ 1895.178831][ T5143] hci_event_packet+0x78f/0x1200 [ 1895.178869][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1895.178915][ T5143] ? __pfx_hci_event_packet+0x10/0x10 [ 1895.178959][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.178989][ T5143] ? hci_send_to_monitor+0xe2/0x570 [ 1895.179036][ T5143] hci_rx_work+0x46a/0xe80 [ 1895.179079][ T5143] ? process_scheduled_works+0x9ef/0x17b0 [ 1895.179112][ T5143] process_scheduled_works+0xae1/0x17b0 [ 1895.179178][ T5143] ? __pfx_process_scheduled_works+0x10/0x10 [ 1895.179225][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.179266][ T5143] worker_thread+0x8a0/0xda0 [ 1895.179329][ T5143] kthread+0x711/0x8a0 [ 1895.179371][ T5143] ? __pfx_worker_thread+0x10/0x10 [ 1895.179400][ T5143] ? __pfx_kthread+0x10/0x10 [ 1895.179433][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.179467][ T5143] ? _raw_spin_unlock_irq+0x23/0x50 [ 1895.179502][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1895.179532][ T5143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1895.179569][ T5143] ? __pfx_kthread+0x10/0x10 [ 1895.179607][ T5143] ret_from_fork+0x4bc/0x870 [ 1895.179639][ T5143] ? __pfx_ret_from_fork+0x10/0x10 [ 1895.179677][ T5143] ? __switch_to_asm+0x39/0x70 [ 1895.179699][ T5143] ? __switch_to_asm+0x33/0x70 [ 1895.179720][ T5143] ? __pfx_kthread+0x10/0x10 [ 1895.179758][ T5143] ret_from_fork_asm+0x1a/0x30 [ 1895.179803][ T5143] [ 1895.180162][ T5143] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1895.411245][ T5961] usb 10-1: device not accepting address 22, error -71 [ 1895.456001][ T5143] Bluetooth: hci6: failed to register connection device [ 1899.088341][T17650] loop5: detected capacity change from 0 to 764 [ 1899.306545][T17711] Symlink component flag not implemented [ 1899.312273][T17711] Symlink component flag not implemented [ 1899.324262][T17711] Symlink component flag not implemented (128) [ 1899.330840][T17711] Symlink component flag not implemented (122) [ 1900.897933][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3989'. [ 1901.620380][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1901.620402][ T30] audit: type=1326 audit(2000001505.414:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1902.938130][T17835] overlay: ./bus is not a directory [ 1902.994060][T17838] loop7: detected capacity change from 0 to 1024 [ 1903.001052][ T30] audit: type=1326 audit(2000001505.434:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1903.080917][ T30] audit: type=1326 audit(2000001505.634:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1903.121578][T17841] overlay: ./bus is not a directory [ 1903.139386][ T30] audit: type=1326 audit(2000001505.634:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1903.163454][ T30] audit: type=1326 audit(2000001505.634:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1903.196253][T17838] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1903.236439][ T30] audit: type=1326 audit(2000001505.654:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1903.449153][ T30] audit: type=1326 audit(2000001505.654:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1903.471808][ T30] audit: type=1326 audit(2000001505.654:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1903.727615][T17856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1904.686171][ T30] audit: type=1326 audit(2000001505.654:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1904.864373][ T30] audit: type=1326 audit(2000001505.654:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f97b018f749 code=0x7ffc0000 [ 1905.300540][T24348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1906.938649][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'. [ 1907.035570][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4002'. [ 1907.693141][T17971] ieee802154 phy0 wpan0: encryption failed: -22 [ 1907.751119][T17971] loop1: detected capacity change from 0 to 512 [ 1907.779009][T17971] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1907.797795][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4005'. [ 1907.841378][T17971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1907.861682][T17971] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1907.922685][T11326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1908.099016][T17982] loop5: detected capacity change from 0 to 1024 [ 1908.767220][T18090] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4008'. [ 1910.008098][T17964] syz.9.4002 (17964): drop_caches: 2 [ 1910.124147][T18095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4011'. [ 1910.423518][T18104] batadv0: entered promiscuous mode [ 1910.671127][ T5961] IPVS: starting estimator thread 0... [ 1910.694703][T18104] batadv0: left promiscuous mode [ 1910.714156][T18093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1910.805633][T18105] IPVS: using max 24 ests per chain, 57600 per kthread [ 1910.830750][T18100] loop7: detected capacity change from 0 to 4096 [ 1910.930800][T18100] ntfs3(loop7): ino=b, Correct links count -> 1. [ 1910.941563][T18100] ntfs3(loop7): ino=18, mi_enum_attr [ 1910.946960][T18100] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1911.113359][T18111] ntfs3(loop7): failed to convert "0080" to koi8-r [ 1911.453667][ T1206] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1912.087159][T18123] loop3: detected capacity change from 0 to 1024 [ 1912.167481][T18155] loop5: detected capacity change from 0 to 1024 [ 1912.191667][T18123] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1912.217100][T18123] hfsplus: xattr searching failed [ 1912.277369][ T1206] usb 2-1: Using ep0 maxpacket: 8 [ 1912.283494][T18123] vlan2: entered promiscuous mode [ 1912.290974][ T1206] usb 2-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 1912.291243][T18123] bond0: entered promiscuous mode [ 1912.329745][ T1206] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1912.336599][T18123] bond_slave_0: entered promiscuous mode [ 1912.336843][T18123] bond_slave_1: entered promiscuous mode [ 1912.394773][ T1206] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1912.404022][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.439328][ T1206] usb 2-1: Product: syz [ 1912.460168][ T1206] usb 2-1: Manufacturer: syz [ 1912.974080][ T1206] usb 2-1: SerialNumber: syz [ 1913.082542][T18240] loop5: detected capacity change from 0 to 512 [ 1913.101404][T18240] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1913.456892][T18240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 1913.486042][T18240] System zones: 1-12 [ 1913.495156][T18240] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1913.555285][T18240] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4025: invalid indirect mapped block 12 (level 1) [ 1913.657570][T18240] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4025: invalid indirect mapped block 2 (level 2) [ 1913.736649][T18240] EXT4-fs (loop5): 1 truncate cleaned up [ 1913.759855][T18240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1913.920620][T12076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1914.018717][T18403] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4027'. [ 1914.616379][T18456] loop3: detected capacity change from 0 to 16 [ 1914.649124][T18456] erofs (device loop3): mounted with root inode @ nid 36. [ 1914.734541][ T1206] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input36 [ 1914.896644][ T5178] bcm5974 2-1:1.0: could not read from device [ 1914.907626][T18460] netlink: 'syz.0.4032': attribute type 62 has an invalid length. [ 1914.935888][ T1206] usb 2-1: USB disconnect, device number 13 [ 1914.955313][ T5178] bcm5974 2-1:1.0: could not read from device [ 1915.231230][T18469] loop1: detected capacity change from 0 to 47 [ 1915.356916][T18469] minix: Unknown parameter '0xffffffffffffffff' [ 1917.385529][T18586] loop7: detected capacity change from 0 to 128 [ 1917.517105][T18586] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1917.658300][T18586] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1917.759561][T18586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1917.938108][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4040'. [ 1918.157093][T18697] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4043'. [ 1918.970300][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1918.977715][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.009029][T18700] loop3: detected capacity change from 0 to 128 [ 1919.256412][T24348] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1919.351453][T18699] loop3: detected capacity change from 0 to 512 [ 1919.426501][T18699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1919.733291][T18812] loop5: detected capacity change from 0 to 764 [ 1919.765952][T18815] loop9: detected capacity change from 0 to 16 [ 1919.772981][T18815] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 1920.049034][T18820] Symlink component flag not implemented [ 1920.085239][T18820] Symlink component flag not implemented [ 1920.234581][ T1206] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1920.244835][T18820] Symlink component flag not implemented (128) [ 1920.275098][T18820] Symlink component flag not implemented (122) [ 1920.577823][ T1206] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1920.780611][ T1206] usb 10-1: config 0 has no interface number 0 [ 1921.614994][ T1206] usb 10-1: too many endpoints for config 0 interface 2 altsetting 46: 221, using maximum allowed: 30 [ 1921.637044][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1921.654727][ T1206] usb 10-1: config 0 interface 2 altsetting 46 has 0 endpoint descriptors, different from the interface descriptor's value: 221 [ 1921.676598][ T1206] usb 10-1: config 0 interface 2 has no altsetting 0 [ 1921.709885][ T1206] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1921.751154][ T1206] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.780160][ T1206] usb 10-1: Product: syz [ 1921.813467][ T1206] usb 10-1: Manufacturer: syz [ 1921.916477][ T1206] usb 10-1: SerialNumber: syz [ 1922.159766][ T1206] usb 10-1: config 0 descriptor?? [ 1922.487557][T18838] loop3: detected capacity change from 0 to 128 [ 1922.509976][T18814] sctp: [Deprecated]: syz.9.4050 (pid 18814) Use of int in max_burst socket option. [ 1922.509976][T18814] Use struct sctp_assoc_value instead [ 1922.547114][T18838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1922.581883][ T1206] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1922.610895][ T1206] gspca_sunplus: reg_r err -71 [ 1922.616054][T18838] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1922.659031][ T1206] usb 10-1: USB disconnect, device number 24 [ 1923.085053][T18849] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1924.328702][T18863] loop5: detected capacity change from 0 to 128 [ 1924.360314][T18863] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1924.387556][T18866] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4068'. [ 1924.672151][T18863] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1926.876650][T18875] netlink: 'syz.1.4070': attribute type 62 has an invalid length. [ 1927.256966][T18982] batadv0: entered promiscuous mode [ 1927.321716][T18982] batadv0: left promiscuous mode [ 1928.332701][T19088] batadv0: entered promiscuous mode [ 1928.354661][T19088] batadv0: left promiscuous mode [ 1928.497213][T19194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1928.518128][T12076] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1928.978513][ T6031] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1929.043775][T19297] netlink: 'syz.1.4076': attribute type 62 has an invalid length. [ 1929.301570][T19299] loop5: detected capacity change from 0 to 128 [ 1929.433333][T19299] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1929.602913][T19299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1930.054717][T19305] loop3: detected capacity change from 0 to 764 [ 1930.665209][T19409] Symlink component flag not implemented [ 1930.670878][T19409] Symlink component flag not implemented [ 1930.687436][T19409] Symlink component flag not implemented (128) [ 1930.693613][T19409] Symlink component flag not implemented (122) [ 1931.295739][T12023] Bluetooth: hci3: command 0x0406 tx timeout [ 1932.115085][ T5143] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1932.125015][ T5143] CPU: 1 UID: 0 PID: 5143 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1932.125049][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1932.125067][ T5143] Workqueue: hci2 hci_rx_work [ 1932.125104][ T5143] Call Trace: [ 1932.125116][ T5143] [ 1932.125128][ T5143] dump_stack_lvl+0x189/0x250 [ 1932.125173][ T5143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1932.125214][ T5143] ? __pfx__printk+0x10/0x10 [ 1932.125281][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.125316][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.125346][ T5143] ? kernfs_path_from_node+0x250/0x290 [ 1932.125381][ T5143] ? kernfs_path_from_node+0x2f/0x290 [ 1932.125421][ T5143] sysfs_create_dir_ns+0x259/0x280 [ 1932.125457][ T5143] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1932.125492][ T5143] ? do_raw_spin_unlock+0x122/0x240 [ 1932.125539][ T5143] kobject_add_internal+0x59f/0xb40 [ 1932.125578][ T5143] kobject_add+0x155/0x220 [ 1932.125605][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.125640][ T5143] ? __pfx_kobject_add+0x10/0x10 [ 1932.125666][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.125696][ T5143] ? _raw_spin_unlock+0x3f/0x50 [ 1932.125729][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.125764][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.125794][ T5143] ? get_device_parent+0x366/0x3a0 [ 1932.125833][ T5143] device_add+0x408/0xb50 [ 1932.125870][ T5143] hci_conn_add_sysfs+0xd5/0x1e0 [ 1932.125906][ T5143] le_conn_complete_evt+0xf39/0x1500 [ 1932.125946][ T5143] ? trace_irq_disable+0x37/0x110 [ 1932.125972][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126017][ T5143] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1932.126055][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126085][ T5143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1932.126128][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126168][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126197][ T5143] ? skb_pull_data+0xfb/0x200 [ 1932.126244][ T5143] hci_le_conn_complete_evt+0x187/0x450 [ 1932.126293][ T5143] hci_event_packet+0x78f/0x1200 [ 1932.126330][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1932.126372][ T5143] ? __pfx_hci_event_packet+0x10/0x10 [ 1932.126417][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126447][ T5143] ? hci_send_to_monitor+0xe2/0x570 [ 1932.126493][ T5143] hci_rx_work+0x46a/0xe80 [ 1932.126536][ T5143] ? process_scheduled_works+0x9ef/0x17b0 [ 1932.126569][ T5143] process_scheduled_works+0xae1/0x17b0 [ 1932.126635][ T5143] ? __pfx_process_scheduled_works+0x10/0x10 [ 1932.126674][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126715][ T5143] worker_thread+0x8a0/0xda0 [ 1932.126779][ T5143] kthread+0x711/0x8a0 [ 1932.126821][ T5143] ? __pfx_worker_thread+0x10/0x10 [ 1932.126850][ T5143] ? __pfx_kthread+0x10/0x10 [ 1932.126882][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126918][ T5143] ? _raw_spin_unlock_irq+0x23/0x50 [ 1932.126952][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1932.126982][ T5143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1932.127018][ T5143] ? __pfx_kthread+0x10/0x10 [ 1932.127056][ T5143] ret_from_fork+0x4bc/0x870 [ 1932.127087][ T5143] ? __pfx_ret_from_fork+0x10/0x10 [ 1932.127125][ T5143] ? __switch_to_asm+0x39/0x70 [ 1932.127147][ T5143] ? __switch_to_asm+0x33/0x70 [ 1932.127168][ T5143] ? __pfx_kthread+0x10/0x10 [ 1932.127206][ T5143] ret_from_fork_asm+0x1a/0x30 [ 1932.127258][ T5143] [ 1932.127503][ T5143] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1932.495001][T19454] loop3: detected capacity change from 0 to 256 [ 1932.510317][T19426] loop1: detected capacity change from 0 to 764 [ 1932.524724][ T5143] Bluetooth: hci2: failed to register connection device [ 1932.716936][T19533] Symlink component flag not implemented [ 1932.722756][T19533] Symlink component flag not implemented [ 1932.731897][T19533] Symlink component flag not implemented (128) [ 1932.739102][T19533] Symlink component flag not implemented (122) [ 1933.001198][T19454] FAT-fs (loop3): Directory bread(block 64) failed [ 1933.008827][T19454] FAT-fs (loop3): Directory bread(block 65) failed [ 1933.015534][T19454] FAT-fs (loop3): Directory bread(block 66) failed [ 1933.022103][T19454] FAT-fs (loop3): Directory bread(block 67) failed [ 1933.028761][T19454] FAT-fs (loop3): Directory bread(block 68) failed [ 1933.035386][T19454] FAT-fs (loop3): Directory bread(block 69) failed [ 1933.042022][T19454] FAT-fs (loop3): Directory bread(block 70) failed [ 1933.048741][T19454] FAT-fs (loop3): Directory bread(block 71) failed [ 1933.055399][T19454] FAT-fs (loop3): Directory bread(block 72) failed [ 1933.061950][T19454] FAT-fs (loop3): Directory bread(block 73) failed [ 1933.789819][T19541] tmpfs: Unknown parameter 'mountinfo' [ 1934.224258][T19541] tmpfs: Unknown parameter 'mountinfo' [ 1934.298862][T19541] tmpfs: Unknown parameter 'mountinfo' [ 1934.422986][T19541] tmpfs: Unknown parameter 'mountinfo' [ 1937.144955][T19563] loop3: detected capacity change from 0 to 512 [ 1938.143667][T19563] EXT4-fs: Ignoring removed mblk_io_submit option [ 1938.942799][T19568] æÿîÿ: entered promiscuous mode [ 1939.584498][T19563] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1939.635119][T19563] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1939.809324][T19563] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1940.243447][T12023] Bluetooth: hci2: command 0x0406 tx timeout [ 1940.652504][T12023] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1940.662285][T12023] CPU: 1 UID: 0 PID: 12023 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1940.662317][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1940.662336][T12023] Workqueue: hci4 hci_rx_work [ 1940.662371][T12023] Call Trace: [ 1940.662383][T12023] [ 1940.662394][T12023] dump_stack_lvl+0x189/0x250 [ 1940.662439][T12023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1940.662476][T12023] ? __pfx__printk+0x10/0x10 [ 1940.662504][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.662540][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.662570][T12023] ? kernfs_path_from_node+0x250/0x290 [ 1940.662604][T12023] ? kernfs_path_from_node+0x2f/0x290 [ 1940.662644][T12023] sysfs_create_dir_ns+0x259/0x280 [ 1940.662680][T12023] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1940.662717][T12023] ? do_raw_spin_unlock+0x122/0x240 [ 1940.662765][T12023] kobject_add_internal+0x59f/0xb40 [ 1940.662804][T12023] kobject_add+0x155/0x220 [ 1940.662830][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.662865][T12023] ? __pfx_kobject_add+0x10/0x10 [ 1940.662892][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.662921][T12023] ? _raw_spin_unlock+0x3f/0x50 [ 1940.662956][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.662990][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.663020][T12023] ? get_device_parent+0x366/0x3a0 [ 1940.663059][T12023] device_add+0x408/0xb50 [ 1940.663097][T12023] hci_conn_add_sysfs+0xd5/0x1e0 [ 1940.663132][T12023] le_conn_complete_evt+0xf39/0x1500 [ 1940.663190][T12023] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1940.663237][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.663269][T12023] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1940.663317][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.663347][T12023] ? skb_pull_data+0xfb/0x200 [ 1940.663388][T12023] hci_le_conn_complete_evt+0x187/0x450 [ 1940.663438][T12023] hci_event_packet+0x78f/0x1200 [ 1940.663476][T12023] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1940.663517][T12023] ? __pfx_hci_event_packet+0x10/0x10 [ 1940.663562][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.663592][T12023] ? hci_send_to_monitor+0xe2/0x570 [ 1940.663639][T12023] hci_rx_work+0x46a/0xe80 [ 1940.663682][T12023] ? process_scheduled_works+0x9ef/0x17b0 [ 1940.663715][T12023] process_scheduled_works+0xae1/0x17b0 [ 1940.663781][T12023] ? __pfx_process_scheduled_works+0x10/0x10 [ 1940.663819][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.663860][T12023] worker_thread+0x8a0/0xda0 [ 1940.663894][T12023] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1940.663943][T12023] ? __kthread_parkme+0x7b/0x200 [ 1940.663987][T12023] kthread+0x711/0x8a0 [ 1940.664027][T12023] ? __pfx_worker_thread+0x10/0x10 [ 1940.664057][T12023] ? __pfx_kthread+0x10/0x10 [ 1940.664089][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.664124][T12023] ? _raw_spin_unlock_irq+0x23/0x50 [ 1940.664159][T12023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1940.664188][T12023] ? lockdep_hardirqs_on+0x9c/0x150 [ 1940.664225][T12023] ? __pfx_kthread+0x10/0x10 [ 1940.664276][T12023] ret_from_fork+0x4bc/0x870 [ 1940.664307][T12023] ? __pfx_ret_from_fork+0x10/0x10 [ 1940.664345][T12023] ? __switch_to_asm+0x39/0x70 [ 1940.664367][T12023] ? __switch_to_asm+0x33/0x70 [ 1940.664388][T12023] ? __pfx_kthread+0x10/0x10 [ 1940.664426][T12023] ret_from_fork_asm+0x1a/0x30 [ 1940.664472][T12023] [ 1941.039424][T19584] loop7: detected capacity change from 0 to 256 [ 1941.158886][T12023] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1941.173304][T12023] Bluetooth: hci4: failed to register connection device [ 1941.256846][T19563] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4097: Invalid block bitmap block 0 in block_group 0 [ 1941.342863][T19563] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4097: Invalid block bitmap block 0 in block_group 0 [ 1941.365674][T19563] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4097: Invalid block bitmap block 0 in block_group 0 [ 1941.366662][T19584] FAT-fs (loop7): Directory bread(block 64) failed [ 1941.393486][T19584] FAT-fs (loop7): Directory bread(block 65) failed [ 1941.397465][T19686] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1941.409508][T19584] FAT-fs (loop7): Directory bread(block 66) failed [ 1941.409542][T19584] FAT-fs (loop7): Directory bread(block 67) failed [ 1941.409631][T19584] FAT-fs (loop7): Directory bread(block 68) failed [ 1941.409661][T19584] FAT-fs (loop7): Directory bread(block 69) failed [ 1941.416781][T19584] FAT-fs (loop7): Directory bread(block 70) failed [ 1941.463756][T19584] FAT-fs (loop7): Directory bread(block 71) failed [ 1941.480288][T19584] FAT-fs (loop7): Directory bread(block 72) failed [ 1941.485783][T19563] __quota_error: 65 callbacks suppressed [ 1941.485801][T19563] Quota error (device loop3): write_blk: dquota write failed [ 1941.495875][T19584] FAT-fs (loop7): Directory bread(block 73) failed [ 1941.560009][T19563] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1941.578368][T19686] loop5: detected capacity change from 0 to 512 [ 1941.586580][T19576] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1941.615029][T19563] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4097: Failed to acquire dquot type 1 [ 1941.643091][T19563] EXT4-fs (loop3): 1 orphan inode deleted [ 1941.986850][T19686] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1942.043548][T19686] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1942.360562][T19686] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4101: bad orphan inode 131083 [ 1942.485313][T19696] tmpfs: Bad value for 'mpol' [ 1942.557417][ T6020] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 1942.569464][ T6020] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 1 [ 1942.593031][T19686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1942.731869][T19563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1942.838754][T19799] loop7: detected capacity change from 0 to 764 [ 1942.848416][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1942.893418][T19800] netlink: 'syz.0.4106': attribute type 62 has an invalid length. [ 1944.083839][T12076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1944.468021][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1944.531647][T19815] loop3: detected capacity change from 0 to 2048 [ 1944.583632][ T30] audit: type=1326 audit(2000001548.396:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1944.642825][ T30] audit: type=1326 audit(2000001548.426:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1944.665213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1944.695373][T19815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1944.713113][ T30] audit: type=1326 audit(2000001548.426:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1944.735636][ C0] vkms_vblank_simulate: vblank timer overrun [ 1944.742580][T19815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1944.804468][ T30] audit: type=1326 audit(2000001548.426:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1944.829618][T19827] overlay: ./bus is not a directory [ 1944.845094][ T30] audit: type=1326 audit(2000001548.426:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1944.868064][ T30] audit: type=1326 audit(2000001548.426:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1944.897438][ T30] audit: type=1326 audit(2000001548.426:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1946.821319][T12023] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1946.838437][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1946.838498][ T30] audit: type=1326 audit(2000001550.626:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1946.938008][T19846] loop3: detected capacity change from 0 to 256 [ 1947.236426][T19846] FAT-fs (loop3): Directory bread(block 64) failed [ 1947.244085][T19846] FAT-fs (loop3): Directory bread(block 65) failed [ 1947.251953][T19846] FAT-fs (loop3): Directory bread(block 66) failed [ 1947.258724][T19846] FAT-fs (loop3): Directory bread(block 67) failed [ 1947.265951][T19846] FAT-fs (loop3): Directory bread(block 68) failed [ 1947.272675][T19846] FAT-fs (loop3): Directory bread(block 69) failed [ 1947.280064][T19846] FAT-fs (loop3): Directory bread(block 70) failed [ 1947.286911][T19846] FAT-fs (loop3): Directory bread(block 71) failed [ 1947.294464][T19846] FAT-fs (loop3): Directory bread(block 72) failed [ 1947.301163][T19846] FAT-fs (loop3): Directory bread(block 73) failed [ 1947.588567][T19848] netlink: 'syz.1.4118': attribute type 62 has an invalid length. [ 1947.893305][ T30] audit: type=1326 audit(2000001550.626:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.9.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aa38f749 code=0x7ffc0000 [ 1947.922983][T19845] Bluetooth: hci4: command 0x0406 tx timeout [ 1950.859716][ T30] audit: type=1326 audit(2000001554.667:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1951.008680][ T30] audit: type=1326 audit(2000001554.697:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1951.132882][ T30] audit: type=1326 audit(2000001554.727:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1951.563374][ T30] audit: type=1326 audit(2000001555.367:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1951.618643][ T30] audit: type=1326 audit(2000001555.367:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1951.972154][ T30] audit: type=1326 audit(2000001555.397:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1952.009557][ T30] audit: type=1326 audit(2000001555.397:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1952.037252][ T30] audit: type=1326 audit(2000001555.397:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1952.113753][ T30] audit: type=1326 audit(2000001555.407:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1952.137061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.171704][ T30] audit: type=1326 audit(2000001555.407:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1952.208160][ T30] audit: type=1326 audit(2000001555.407:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1952.490949][T20087] FAULT_INJECTION: forcing a failure. [ 1952.490949][T20087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1952.504286][T20087] CPU: 1 UID: 0 PID: 20087 Comm: syz.1.4131 Not tainted syzkaller #0 PREEMPT(full) [ 1952.504318][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1952.504335][T20087] Call Trace: [ 1952.504346][T20087] [ 1952.504357][T20087] dump_stack_lvl+0x189/0x250 [ 1952.504399][T20087] ? __pfx____ratelimit+0x10/0x10 [ 1952.504436][T20087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1952.504472][T20087] ? __pfx__printk+0x10/0x10 [ 1952.504521][T20087] should_fail_ex+0x414/0x560 [ 1952.504568][T20087] strncpy_from_user+0x36/0x290 [ 1952.504613][T20087] __se_sys_memfd_create+0x244/0x780 [ 1952.504650][T20087] do_syscall_64+0xfa/0xfa0 [ 1952.504687][T20087] ? lockdep_hardirqs_on+0x9c/0x150 [ 1952.504726][T20087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.504751][T20087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1952.504780][T20087] ? exc_page_fault+0xab/0x100 [ 1952.504821][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.504846][T20087] RIP: 0033:0x7f97b018f749 [ 1952.504868][T20087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1952.504890][T20087] RSP: 002b:00007f97ae3abe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1952.504917][T20087] RAX: ffffffffffffffda RBX: 0000000000000227 RCX: 00007f97b018f749 [ 1952.504936][T20087] RDX: 00007f97ae3abef0 RSI: 0000000000000000 RDI: 00007f97b0214960 [ 1952.504954][T20087] RBP: 0000200000000580 R08: 00007f97ae3abbb7 R09: 00007f97ae3abe40 [ 1952.504973][T20087] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 1952.504991][T20087] R13: 00007f97ae3abef0 R14: 00007f97ae3abeb0 R15: 00002000000001c0 [ 1952.505033][T20087] [ 1952.962724][ T30] audit: type=1326 audit(2000001555.407:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1953.273281][ T30] audit: type=1326 audit(2000001555.407:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1953.792927][ T30] audit: type=1326 audit(2000001555.407:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1954.654829][ T30] audit: type=1326 audit(2000001555.407:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.7.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1956.418713][T20203] overlay: ./bus is not a directory [ 1956.593572][T20319] fuse: Bad value for 'fd' [ 1956.632475][T21871] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1956.812470][T20324] loop1: detected capacity change from 0 to 2048 [ 1956.828212][T20324] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1956.840916][T20324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1956.852405][T21871] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1956.869843][T21871] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1956.912715][T12178] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1956.939320][T21871] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1956.949158][T21871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.973029][T12178] usb 10-1: Using ep0 maxpacket: 16 [ 1958.343845][T12178] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.346680][T21871] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1958.387136][T12178] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1958.426439][T12178] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1958.453666][T12178] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.464153][T20209] loop5: detected capacity change from 0 to 2048 [ 1958.512058][T20334] loop7: detected capacity change from 0 to 2048 [ 1958.537162][T20334] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1958.551940][T20334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1958.561595][T12178] usb 10-1: Product: syz [ 1958.581314][T12178] usb 10-1: Manufacturer: syz [ 1958.586140][T12178] usb 10-1: SerialNumber: syz [ 1959.193539][T21871] gspca_sn9c2028: read1 error -110 [ 1959.219015][T21871] gspca_sn9c2028: read1 error -32 [ 1959.227290][T20209] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 1959.234595][T20209] loop5: partition table partially beyond EOD, truncated [ 1959.242100][T20209] loop5: p1 size 83886080 extends beyond EOD, truncated [ 1959.254471][T12178] usb 10-1: 0:2 : does not exist [ 1959.280196][T20209] loop5: p2 start 4278190080 is beyond EOD, truncated [ 1959.311771][T20209] loop5: p4 size 8192 extends beyond EOD, truncated [ 1959.413434][T20209] loop5: p5 size 83886080 extends beyond EOD, truncated [ 1959.602834][T12178] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1959.742965][T21871] gspca_sn9c2028: read1 error -110 [ 1959.748816][T21871] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -110 [ 1960.420855][T20340] loop3: detected capacity change from 0 to 128 [ 1960.430683][T20209] loop5: p6 size 8192 extends beyond EOD, truncated [ 1960.499206][T12178] usb 10-1: USB disconnect, device number 25 [ 1960.919707][T20348] loop3: detected capacity change from 0 to 512 [ 1961.775620][T21871] usb 6-1: USB disconnect, device number 6 [ 1962.097326][T20348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1962.554875][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1963.643084][ T5961] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1963.973141][ T5961] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1963.995892][ T5961] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1964.019603][ T5961] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1964.024417][T20366] fuse: Bad value for 'fd' [ 1964.052513][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.099707][T20370] loop3: detected capacity change from 0 to 2048 [ 1964.110546][T20370] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1964.123252][T20370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1964.536755][T20374] TCP: TCP_TX_DELAY enabled [ 1964.925953][ T5961] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1965.065040][T20363] loop1: detected capacity change from 0 to 2048 [ 1965.128852][T20378] loop7: detected capacity change from 0 to 2048 [ 1965.140857][T20378] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1965.151973][T20363] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 1965.158937][T20363] loop1: partition table partially beyond EOD, truncated [ 1965.178133][T20378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1965.543426][ T5961] gspca_sn9c2028: read1 error -110 [ 1965.598717][ T5961] gspca_sn9c2028: read1 error -32 [ 1965.760238][T20363] loop1: p1 size 83886080 extends beyond EOD, truncated [ 1965.781948][ T5961] gspca_sn9c2028: read1 error -32 [ 1965.787101][ T5961] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -32 [ 1965.813933][T20363] loop1: p2 start 4278190080 is beyond EOD, truncated [ 1966.420648][T20363] loop1: p4 size 8192 extends beyond EOD, truncated [ 1966.482607][T20363] loop1: p5 size 83886080 extends beyond EOD, truncated [ 1966.503958][T20363] loop1: p6 size 8192 extends beyond EOD, truncated [ 1967.561880][ T5961] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1967.729104][T12178] usb 2-1: USB disconnect, device number 14 [ 1967.739817][ T5961] usb 10-1: Using ep0 maxpacket: 16 [ 1967.814330][ T5961] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.836315][ T5961] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1967.853966][T20393] loop3: detected capacity change from 0 to 47 [ 1967.864854][ T5961] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1967.888782][ T5961] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.901794][ T5961] usb 10-1: Product: syz [ 1967.906100][ T5961] usb 10-1: Manufacturer: syz [ 1967.922280][T20392] loop7: detected capacity change from 0 to 512 [ 1967.929582][T20392] ext4: Unknown parameter 'measure' [ 1967.941816][ T5961] usb 10-1: SerialNumber: syz [ 1967.952655][T20393] minix: Unknown parameter '0xffffffffffffffff' [ 1968.139950][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1968.139972][ T30] audit: type=1326 audit(2000001571.947:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1968.172753][ T30] audit: type=1326 audit(2000001571.987:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1968.195128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.286963][ T5961] usb 10-1: 0:2 : does not exist [ 1968.557147][ T5961] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1968.803203][ T30] audit: type=1326 audit(2000001572.108:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1968.851562][ T5961] usb 10-1: USB disconnect, device number 26 [ 1968.879720][ T30] audit: type=1326 audit(2000001572.198:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1968.960705][ T30] audit: type=1326 audit(2000001572.198:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1969.029595][ T30] audit: type=1326 audit(2000001572.298:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1969.055432][ T30] audit: type=1326 audit(2000001572.318:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1969.078834][ T30] audit: type=1326 audit(2000001572.318:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1969.102286][ T30] audit: type=1326 audit(2000001572.368:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1969.127039][ T30] audit: type=1326 audit(2000001572.368:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.7.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf89b8f749 code=0x7ffc0000 [ 1969.547385][T20417] netlink: 'syz.5.4177': attribute type 62 has an invalid length. [ 1970.103389][T20529] fuse: Bad value for 'fd' [ 1971.657393][T20641] loop7: detected capacity change from 0 to 512 [ 1971.717042][T20641] ext4: Unknown parameter 'measure' [ 1973.520336][T20761] loop9: detected capacity change from 0 to 128 [ 1973.798386][T20768] loop1: detected capacity change from 0 to 1024 [ 1973.822927][T20768] hfsplus: Bad value for 'part' [ 1973.968577][T20773] loop9: detected capacity change from 0 to 512 [ 1974.552850][T20773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1974.571580][T21871] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1974.799021][ T9340] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1975.044850][T21871] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1975.120593][T20779] FAULT_INJECTION: forcing a failure. [ 1975.120593][T20779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1975.134188][T20779] CPU: 1 UID: 0 PID: 20779 Comm: syz.7.4199 Not tainted syzkaller #0 PREEMPT(full) [ 1975.134224][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1975.134241][T20779] Call Trace: [ 1975.134252][T20779] [ 1975.134270][T20779] dump_stack_lvl+0x189/0x250 [ 1975.134312][T20779] ? __pfx____ratelimit+0x10/0x10 [ 1975.134349][T20779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1975.134384][T20779] ? __pfx__printk+0x10/0x10 [ 1975.134426][T20779] should_fail_ex+0x414/0x560 [ 1975.134472][T20779] _copy_to_user+0x31/0xb0 [ 1975.134509][T20779] simple_read_from_buffer+0xe1/0x170 [ 1975.134555][T20779] proc_fail_nth_read+0x1b3/0x220 [ 1975.134593][T20779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1975.134629][T20779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1975.134659][T20779] ? rw_verify_area+0x2a6/0x4d0 [ 1975.134694][T20779] ? __lock_acquire+0xab9/0xd20 [ 1975.134718][T20779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1975.134754][T20779] vfs_read+0x200/0xa30 [ 1975.134791][T20779] ? fdget_pos+0x247/0x320 [ 1975.134822][T20779] ? __pfx___mutex_lock+0x10/0x10 [ 1975.134863][T20779] ? __pfx_vfs_read+0x10/0x10 [ 1975.134901][T20779] ? __fget_files+0x2a/0x420 [ 1975.134931][T20779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1975.134959][T20779] ? __fget_files+0x3a0/0x420 [ 1975.134983][T20779] ? __fget_files+0x2a/0x420 [ 1975.135012][T20779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1975.135047][T20779] ksys_read+0x145/0x250 [ 1975.135085][T20779] ? __pfx_ksys_read+0x10/0x10 [ 1975.135127][T20779] ? do_syscall_64+0xbe/0xfa0 [ 1975.135169][T20779] do_syscall_64+0xfa/0xfa0 [ 1975.135208][T20779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.135233][T20779] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1975.135269][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.135295][T20779] RIP: 0033:0x7fdf89b8e15c [ 1975.135316][T20779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1975.135339][T20779] RSP: 002b:00007fdf8aa9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1975.135365][T20779] RAX: ffffffffffffffda RBX: 00007fdf89de6180 RCX: 00007fdf89b8e15c [ 1975.135385][T20779] RDX: 000000000000000f RSI: 00007fdf8aa9f0a0 RDI: 0000000000000008 [ 1975.135402][T20779] RBP: 00007fdf8aa9f090 R08: 0000000000000000 R09: fffffffffffffd25 [ 1975.135420][T20779] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000001 [ 1975.135437][T20779] R13: 00007fdf89de6218 R14: 00007fdf89de6180 R15: 00007fff82ab2898 [ 1975.135479][T20779] [ 1975.546561][T21871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.561938][T21871] usb 4-1: Product: syz [ 1975.566121][T21871] usb 4-1: Manufacturer: syz [ 1975.570711][T21871] usb 4-1: SerialNumber: syz [ 1975.638094][T20781] loop7: detected capacity change from 0 to 512 [ 1975.648713][T20781] ext4: Unknown parameter 'measure' [ 1976.067522][T21871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1976.165284][T20798] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1976.174971][T20801] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1976.194624][T20802] loop5: detected capacity change from 0 to 136 [ 1976.201475][T21871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1976.504389][T20806] loop1: detected capacity change from 0 to 256 [ 1976.528010][T20803] loop7: detected capacity change from 0 to 256 [ 1976.578260][T20798] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1976.596650][T20803] exFAT-fs (loop7): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 1976.663729][T20798] overlayfs: failed to look up (tracing) for ino (-66) [ 1976.850308][T21871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1976.856611][T20811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4210'. [ 1976.891276][T21871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1976.938098][T21871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1976.994753][T21871] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1977.083301][T21871] usb 4-1: USB disconnect, device number 19 [ 1977.094293][T20806] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 1977.671781][T20921] netlink: 'syz.3.4214': attribute type 62 has an invalid length. [ 1978.353544][T20925] netlink: 'syz.0.4215': attribute type 62 has an invalid length. [ 1978.800144][T21017] loop1: detected capacity change from 0 to 512 [ 1978.832799][T21017] ext4: Unknown parameter 'measure' [ 1979.569266][T21038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.101308][T21038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.111610][T12178] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1980.306199][T12178] usb 2-1: device descriptor read/all, error -61 [ 1980.452310][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.458790][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.629416][T12178] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1981.012795][T12178] usb 2-1: device descriptor read/64, error -71 [ 1981.165192][T21119] xt_NFQUEUE: number of total queues is 0 [ 1981.185546][T12178] usb usb2-port1: attempt power cycle [ 1981.858556][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4228'. [ 1981.900712][T21169] loop3: detected capacity change from 0 to 2048 [ 1981.911495][T21169] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1981.924551][T21169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1981.981298][T12178] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1982.583700][T12178] usb 2-1: device descriptor read/8, error -71 [ 1982.675990][T21232] netlink: 'syz.7.4229': attribute type 62 has an invalid length. [ 1984.549692][ T5143] Bluetooth: hci3: unexpected event for opcode 0x203d [ 1985.909895][T21415] loop7: detected capacity change from 0 to 1 [ 1985.917593][T21415] syz.7.4245: attempt to access beyond end of device [ 1985.917593][T21415] loop7: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1985.931142][T21415] SQUASHFS error: Failed to read block 0x0: -5 [ 1985.938049][T21415] unable to read squashfs_super_block [ 1986.005024][T21416] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4243'. [ 1986.828583][T21423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4247'. [ 1987.316592][ T5143] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1987.326648][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1987.326681][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1987.326700][ T5143] Workqueue: hci3 hci_rx_work [ 1987.326735][ T5143] Call Trace: [ 1987.326746][ T5143] [ 1987.326758][ T5143] dump_stack_lvl+0x189/0x250 [ 1987.326802][ T5143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1987.326839][ T5143] ? __pfx__printk+0x10/0x10 [ 1987.326867][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.326903][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.326933][ T5143] ? kernfs_path_from_node+0x250/0x290 [ 1987.326967][ T5143] ? kernfs_path_from_node+0x2f/0x290 [ 1987.327007][ T5143] sysfs_create_dir_ns+0x259/0x280 [ 1987.327044][ T5143] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1987.327080][ T5143] ? do_raw_spin_unlock+0x122/0x240 [ 1987.327125][ T5143] kobject_add_internal+0x59f/0xb40 [ 1987.327164][ T5143] kobject_add+0x155/0x220 [ 1987.327190][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.327226][ T5143] ? __pfx_kobject_add+0x10/0x10 [ 1987.327259][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.327288][ T5143] ? _raw_spin_unlock+0x3f/0x50 [ 1987.327322][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.327357][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.327388][ T5143] ? get_device_parent+0x366/0x3a0 [ 1987.327426][ T5143] device_add+0x408/0xb50 [ 1987.327464][ T5143] hci_conn_add_sysfs+0xd5/0x1e0 [ 1987.327498][ T5143] le_conn_complete_evt+0xf39/0x1500 [ 1987.327540][ T5143] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1987.327595][ T5143] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1987.327634][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.327672][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1987.327723][ T5143] hci_le_conn_complete_evt+0x187/0x450 [ 1987.327775][ T5143] hci_event_packet+0x78f/0x1200 [ 1987.327812][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1987.327853][ T5143] ? __pfx_hci_event_packet+0x10/0x10 [ 1987.327898][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.327928][ T5143] ? hci_send_to_monitor+0xe2/0x570 [ 1987.327975][ T5143] hci_rx_work+0x46a/0xe80 [ 1987.328018][ T5143] ? process_scheduled_works+0x9ef/0x17b0 [ 1987.328051][ T5143] process_scheduled_works+0xae1/0x17b0 [ 1987.328116][ T5143] ? __pfx_process_scheduled_works+0x10/0x10 [ 1987.328156][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.328198][ T5143] worker_thread+0x8a0/0xda0 [ 1987.328267][ T5143] kthread+0x711/0x8a0 [ 1987.328309][ T5143] ? __pfx_worker_thread+0x10/0x10 [ 1987.328338][ T5143] ? __pfx_kthread+0x10/0x10 [ 1987.328371][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.328406][ T5143] ? _raw_spin_unlock_irq+0x23/0x50 [ 1987.328441][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.328471][ T5143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1987.328508][ T5143] ? __pfx_kthread+0x10/0x10 [ 1987.328545][ T5143] ret_from_fork+0x4bc/0x870 [ 1987.328577][ T5143] ? __pfx_ret_from_fork+0x10/0x10 [ 1987.328615][ T5143] ? __switch_to_asm+0x39/0x70 [ 1987.328637][ T5143] ? __switch_to_asm+0x33/0x70 [ 1987.328658][ T5143] ? __pfx_kthread+0x10/0x10 [ 1987.328696][ T5143] ret_from_fork_asm+0x1a/0x30 [ 1987.328741][ T5143] [ 1987.329061][ T5143] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1987.655638][ T5143] Bluetooth: hci3: failed to register connection device [ 1987.677423][ T5143] ================================================================== [ 1987.685506][ T5143] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040 [ 1987.693576][ T5143] Read of size 8 at addr ffff88806d5e5480 by task kworker/u9:1/5143 [ 1987.701552][ T5143] [ 1987.703875][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1987.703907][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1987.703926][ T5143] Workqueue: hci3 hci_rx_work [ 1987.703959][ T5143] Call Trace: [ 1987.703970][ T5143] [ 1987.703981][ T5143] dump_stack_lvl+0x189/0x250 [ 1987.704018][ T5143] ? __kasan_check_byte+0x12/0x40 [ 1987.704045][ T5143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1987.704081][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.704112][ T5143] ? lock_release+0x4b/0x3e0 [ 1987.704142][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.704172][ T5143] ? __virt_addr_valid+0x4a5/0x5c0 [ 1987.704211][ T5143] print_report+0xca/0x240 [ 1987.704253][ T5143] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1987.704278][ T5143] kasan_report+0x118/0x150 [ 1987.704304][ T5143] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1987.704331][ T5143] l2cap_connect_cfm+0x6e4/0x1040 [ 1987.704358][ T5143] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1987.704385][ T5143] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1987.704408][ T5143] hci_connect_cfm+0x95/0x140 [ 1987.704443][ T5143] le_conn_complete_evt+0xfb8/0x1500 [ 1987.704479][ T5143] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1987.704519][ T5143] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1987.704554][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.704585][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1987.704623][ T5143] hci_le_conn_complete_evt+0x187/0x450 [ 1987.704662][ T5143] hci_event_packet+0x78f/0x1200 [ 1987.704693][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1987.704727][ T5143] ? __pfx_hci_event_packet+0x10/0x10 [ 1987.704760][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.704787][ T5143] ? hci_send_to_monitor+0xe2/0x570 [ 1987.704826][ T5143] hci_rx_work+0x46a/0xe80 [ 1987.704859][ T5143] ? process_scheduled_works+0x9ef/0x17b0 [ 1987.704886][ T5143] process_scheduled_works+0xae1/0x17b0 [ 1987.704926][ T5143] ? __pfx_process_scheduled_works+0x10/0x10 [ 1987.704956][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.704988][ T5143] worker_thread+0x8a0/0xda0 [ 1987.705034][ T5143] kthread+0x711/0x8a0 [ 1987.705068][ T5143] ? __pfx_worker_thread+0x10/0x10 [ 1987.705097][ T5143] ? __pfx_kthread+0x10/0x10 [ 1987.705127][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.705156][ T5143] ? _raw_spin_unlock_irq+0x23/0x50 [ 1987.705188][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.705215][ T5143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1987.705254][ T5143] ? __pfx_kthread+0x10/0x10 [ 1987.705287][ T5143] ret_from_fork+0x4bc/0x870 [ 1987.705312][ T5143] ? __pfx_ret_from_fork+0x10/0x10 [ 1987.705340][ T5143] ? __switch_to_asm+0x39/0x70 [ 1987.705359][ T5143] ? __switch_to_asm+0x33/0x70 [ 1987.705378][ T5143] ? __pfx_kthread+0x10/0x10 [ 1987.705411][ T5143] ret_from_fork_asm+0x1a/0x30 [ 1987.705441][ T5143] [ 1987.705449][ T5143] [ 1987.975519][ T5143] Allocated by task 5143: [ 1987.979830][ T5143] kasan_save_track+0x3e/0x80 [ 1987.984514][ T5143] __kasan_kmalloc+0x93/0xb0 [ 1987.989116][ T5143] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1987.994493][ T5143] l2cap_chan_create+0x50/0x760 [ 1987.999343][ T5143] l2cap_sock_new_connection_cb+0x182/0x2b0 [ 1988.005317][ T5143] l2cap_connect_cfm+0x37a/0x1040 [ 1988.010335][ T5143] hci_connect_cfm+0x95/0x140 [ 1988.015024][ T5143] le_conn_complete_evt+0xfb8/0x1500 [ 1988.020323][ T5143] hci_le_conn_complete_evt+0x187/0x450 [ 1988.025957][ T5143] hci_event_packet+0x78f/0x1200 [ 1988.030896][ T5143] hci_rx_work+0x46a/0xe80 [ 1988.035306][ T5143] process_scheduled_works+0xae1/0x17b0 [ 1988.040845][ T5143] worker_thread+0x8a0/0xda0 [ 1988.045430][ T5143] kthread+0x711/0x8a0 [ 1988.049498][ T5143] ret_from_fork+0x4bc/0x870 [ 1988.054079][ T5143] ret_from_fork_asm+0x1a/0x30 [ 1988.058917][ T5143] [ 1988.061225][ T5143] Freed by task 21428: [ 1988.065281][ T5143] kasan_save_track+0x3e/0x80 [ 1988.069968][ T5143] __kasan_save_free_info+0x46/0x50 [ 1988.075163][ T5143] __kasan_slab_free+0x5c/0x80 [ 1988.079933][ T5143] kfree+0x19a/0x6d0 [ 1988.083824][ T5143] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 1988.089370][ T5143] l2cap_sock_release+0x6a/0x210 [ 1988.094300][ T5143] sock_close+0xc3/0x240 [ 1988.098548][ T5143] __fput+0x44c/0xa70 [ 1988.102527][ T5143] task_work_run+0x1d4/0x260 [ 1988.107167][ T5143] exit_to_user_mode_loop+0xe9/0x130 [ 1988.112438][ T5143] do_syscall_64+0x2bd/0xfa0 [ 1988.117030][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.122920][ T5143] [ 1988.125234][ T5143] The buggy address belongs to the object at ffff88806d5e5000 [ 1988.125234][ T5143] which belongs to the cache kmalloc-2k of size 2048 [ 1988.139280][ T5143] The buggy address is located 1152 bytes inside of [ 1988.139280][ T5143] freed 2048-byte region [ffff88806d5e5000, ffff88806d5e5800) [ 1988.153255][ T5143] [ 1988.155568][ T5143] The buggy address belongs to the physical page: [ 1988.161963][ T5143] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6d5e0 [ 1988.170713][ T5143] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1988.179202][ T5143] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1988.187178][ T5143] page_type: f5(slab) [ 1988.191150][ T5143] raw: 00fff00000000040 ffff88801a027000 0000000000000000 dead000000000001 [ 1988.199734][ T5143] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1988.208317][ T5143] head: 00fff00000000040 ffff88801a027000 0000000000000000 dead000000000001 [ 1988.216982][ T5143] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1988.225645][ T5143] head: 00fff00000000003 ffffea0001b57801 00000000ffffffff 00000000ffffffff [ 1988.234309][ T5143] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1988.242963][ T5143] page dumped because: kasan: bad access detected [ 1988.249360][ T5143] page_owner tracks the page as allocated [ 1988.255058][ T5143] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 97495429702, free_ts 97484371888 [ 1988.276423][ T5143] post_alloc_hook+0x234/0x290 [ 1988.281199][ T5143] get_page_from_freelist+0x2365/0x2440 [ 1988.286741][ T5143] __alloc_frozen_pages_noprof+0x181/0x370 [ 1988.292541][ T5143] alloc_pages_mpol+0x232/0x4a0 [ 1988.297384][ T5143] allocate_slab+0x96/0x350 [ 1988.301904][ T5143] ___slab_alloc+0xf56/0x1990 [ 1988.306575][ T5143] __slab_alloc+0x65/0x100 [ 1988.310983][ T5143] __kmalloc_cache_noprof+0x411/0x6f0 [ 1988.316358][ T5143] device_create+0x12f/0x2f0 [ 1988.320947][ T5143] mac80211_hwsim_new_radio+0x41b/0x5220 [ 1988.326589][ T5143] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1988.331705][ T5143] genl_family_rcv_msg_doit+0x215/0x300 [ 1988.337250][ T5143] genl_rcv_msg+0x60e/0x790 [ 1988.341751][ T5143] netlink_rcv_skb+0x208/0x470 [ 1988.346505][ T5143] genl_rcv+0x28/0x40 [ 1988.350484][ T5143] netlink_unicast+0x82f/0x9e0 [ 1988.355342][ T5143] page last free pid 5193 tgid 5193 stack trace: [ 1988.361651][ T5143] __free_frozen_pages+0xbc4/0xd30 [ 1988.366766][ T5143] __put_partials+0x146/0x170 [ 1988.371433][ T5143] put_cpu_partial+0x1f2/0x2e0 [ 1988.376194][ T5143] __slab_free+0x2b9/0x390 [ 1988.380609][ T5143] qlist_free_all+0x97/0x140 [ 1988.385203][ T5143] kasan_quarantine_reduce+0x148/0x160 [ 1988.390669][ T5143] __kasan_slab_alloc+0x22/0x80 [ 1988.395534][ T5143] kmem_cache_alloc_noprof+0x367/0x6e0 [ 1988.400996][ T5143] anon_vma_fork+0xde/0x500 [ 1988.405511][ T5143] dup_mmap+0x9e2/0x1b10 [ 1988.409757][ T5143] copy_mm+0x13c/0x4b0 [ 1988.413820][ T5143] copy_process+0x1706/0x3c00 [ 1988.418488][ T5143] kernel_clone+0x21e/0x840 [ 1988.422992][ T5143] __x64_sys_clone+0x18b/0x1e0 [ 1988.427754][ T5143] do_syscall_64+0xfa/0xfa0 [ 1988.432261][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.438147][ T5143] [ 1988.440455][ T5143] Memory state around the buggy address: [ 1988.446068][ T5143] ffff88806d5e5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1988.454121][ T5143] ffff88806d5e5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1988.462171][ T5143] >ffff88806d5e5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1988.470303][ T5143] ^ [ 1988.474354][ T5143] ffff88806d5e5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1988.482489][ T5143] ffff88806d5e5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1988.490541][ T5143] ================================================================== [ 1988.551401][ T5143] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1988.558637][ T5143] CPU: 1 UID: 0 PID: 5143 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1988.568114][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1988.578174][ T5143] Workqueue: hci3 hci_rx_work [ 1988.582923][ T5143] Call Trace: [ 1988.586211][ T5143] [ 1988.589146][ T5143] dump_stack_lvl+0x99/0x250 [ 1988.593752][ T5143] ? __asan_memcpy+0x40/0x70 [ 1988.598355][ T5143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1988.603568][ T5143] ? __pfx__printk+0x10/0x10 [ 1988.608171][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1988.613818][ T5143] vpanic+0x237/0x6d0 [ 1988.617823][ T5143] ? __pfx_vpanic+0x10/0x10 [ 1988.622348][ T5143] ? preempt_schedule+0xae/0xc0 [ 1988.627218][ T5143] ? __pfx_preempt_schedule+0x10/0x10 [ 1988.632618][ T5143] panic+0xb9/0xc0 [ 1988.636365][ T5143] ? __pfx_panic+0x10/0x10 [ 1988.640803][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1988.646445][ T5143] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1988.652363][ T5143] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1988.657568][ T5143] check_panic_on_warn+0x89/0xb0 [ 1988.662527][ T5143] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1988.667731][ T5143] end_report+0x78/0x160 [ 1988.671979][ T5143] kasan_report+0x129/0x150 [ 1988.676504][ T5143] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1988.681700][ T5143] l2cap_connect_cfm+0x6e4/0x1040 [ 1988.686730][ T5143] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1988.692182][ T5143] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1988.697627][ T5143] hci_connect_cfm+0x95/0x140 [ 1988.702312][ T5143] le_conn_complete_evt+0xfb8/0x1500 [ 1988.707605][ T5143] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1988.713361][ T5143] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1988.719105][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1988.724733][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1988.730027][ T5143] hci_le_conn_complete_evt+0x187/0x450 [ 1988.735578][ T5143] hci_event_packet+0x78f/0x1200 [ 1988.740515][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1988.745824][ T5143] ? __pfx_hci_event_packet+0x10/0x10 [ 1988.751202][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1988.756853][ T5143] ? hci_send_to_monitor+0xe2/0x570 [ 1988.762059][ T5143] hci_rx_work+0x46a/0xe80 [ 1988.766496][ T5143] ? process_scheduled_works+0x9ef/0x17b0 [ 1988.772243][ T5143] process_scheduled_works+0xae1/0x17b0 [ 1988.777830][ T5143] ? __pfx_process_scheduled_works+0x10/0x10 [ 1988.783911][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1988.789541][ T5143] worker_thread+0x8a0/0xda0 [ 1988.794137][ T5143] kthread+0x711/0x8a0 [ 1988.798204][ T5143] ? __pfx_worker_thread+0x10/0x10 [ 1988.803306][ T5143] ? __pfx_kthread+0x10/0x10 [ 1988.807887][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1988.813548][ T5143] ? _raw_spin_unlock_irq+0x23/0x50 [ 1988.818746][ T5143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1988.824370][ T5143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1988.829571][ T5143] ? __pfx_kthread+0x10/0x10 [ 1988.834197][ T5143] ret_from_fork+0x4bc/0x870 [ 1988.838779][ T5143] ? __pfx_ret_from_fork+0x10/0x10 [ 1988.843885][ T5143] ? __switch_to_asm+0x39/0x70 [ 1988.848642][ T5143] ? __switch_to_asm+0x33/0x70 [ 1988.853418][ T5143] ? __pfx_kthread+0x10/0x10 [ 1988.858008][ T5143] ret_from_fork_asm+0x1a/0x30 [ 1988.862768][ T5143] [ 1988.866060][ T5143] Kernel Offset: disabled [ 1988.870373][ T5143] Rebooting in 86400 seconds..