last executing test programs: 19m10.937124295s ago: executing program 32 (id=90): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/93, 0x5d) 18m52.76628262s ago: executing program 33 (id=143): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="062a", 0x2}], 0x1}, 0x50041) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000400)='U', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 18m51.721092971s ago: executing program 34 (id=147): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x180) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 18m12.074084407s ago: executing program 35 (id=200): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) 17m58.371834216s ago: executing program 36 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000600)=ANY=[], 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x5b}}, 0x40) 17m7.996255654s ago: executing program 5 (id=475): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r4 = dup(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xba, 0xaf, 0x2d, 0x10, 0x4b3, 0x4016, 0xa1fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x51, 0x2, 0x0, 0xf7, 0x9f, 0x3f, 0x7}}]}}]}}, 0x0) sendfile(r4, r0, 0x0, 0x8001) 17m6.200026089s ago: executing program 5 (id=482): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) write$tun(r0, &(0x7f0000000cc0)={@val={0x0, 0x16}, @void, @x25={0x2, 0x3, 0x27}}, 0x7) 17m5.700706598s ago: executing program 5 (id=483): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @remote, 0x9, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r4}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="02034a64022895f20506ab5a048a", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x17, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 17m5.327224806s ago: executing program 5 (id=484): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x11) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) fallocate(r1, 0x20, 0x0, 0x8000) 17m3.57988188s ago: executing program 5 (id=487): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0x6, 0x1, 0xff, 0x6, 0xc, 0x3, 0x9}, {0x8, 0xaef2, 0x6, 0x6, 0x5, 0xff, 0x8, 0x3, 0x4, 0x13, 0x1, 0x6, 0x10005}, {0x20000, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x3, 0x4, 0x15, 0x1, 0x3, 0x40000000000000}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17m1.988055601s ago: executing program 5 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2000080, 0x0) 16m58.324669783s ago: executing program 37 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2000080, 0x0) 16m9.341886343s ago: executing program 8 (id=597): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000002c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000300)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c6e6f646f74732c636865636b3d7374726963742c666c7573682c6e6f646f74732c6e6f646f74732c71756965742c00a8f43e0a9765c2419bbc93d3bb042cde7dc609bd874b9221aab9404318121ead7505cda193a13e6d2fd30034c9c4f457dc798a67d4d30285c0590475ba33482c83a51b42d7f7ea92b35388ec28309e3b4b8a758575baa63a8679030bf6423a4759c2bb9f9353f43cc4c825234e791353a87ed0bcade85e0808d879b38514fafbba"], 0x1, 0x168, &(0x7f0000000a40)="$eJzs27GK1FAUBuAzJqurNluLRcDGalArS0VWEAOKMoVWCrs2Gxlwmmg1z+AT+GI+gihTTXdFo5OZiDgoMbrzfU0O+RM4t0guJ5Bnl1+eHE1nL6YPF7E/GkV+K4pYjuIgzkQWjXkAAKfJMqX4lFJK5+Zx/l2klIbuCADom/0fAHbPL/f/mwM1BgD0xvwPALvn8ZOn92+X5eGjotiP+DCvJ/WkOTb53Xvl4bXiq4P2rkVdT7JVfr3Js818Ly58y280ebGZn42rV5r8S3bnQdnJL8ZR/8sHAACAnTBeje5r8/3Hdr4fj4vvOvN/U619H+jM73lcyv/eOgCA7c1evzl5XlXHrxT/Q5G3Z96//Qf6UfxQ5FV1vDd8G39cDP1mAvrWPvRDdwIAAAAAAAAAAAAAAPzM7/4hFNn2Fw+9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOj6HAAA//8nKlEY") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) unlink(&(0x7f0000000180)='./file1\x00') syz_open_procfs(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x5, 0x6, 0xfffa}, 0x1d, [0x2, 0xc95a, 0x6, 0x9, 0x7f, 0x401, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d3b, 0x1dd2, 0x5, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x5, 0x7fff, 0x4c74, 0x23, 0x4, 0x7, 0xa, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3d, 0x91, 0x6, 0xfffffff9, 0x3, 0xb, 0x4, 0x8, 0x0, 0x80, 0x0, 0xa, 0x6, 0x8, 0xfffffff9, 0x1, 0x40], [0x10000007, 0xc, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xf, 0xf9, 0x3, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x7695, 0xe4, 0x5, 0x80, 0xe, 0x312, 0x8000, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0xb, 0x401, 0x39f, 0x6, 0xfffffffd, 0x100, 0x1005, 0x2, 0x5f31, 0x3, 0x0, 0x6, 0x8, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x8, 0x8, 0x1, 0x7, 0xb, 0x9, 0x48c92690, 0x3, 0xff], [0x7, 0x6, 0x4, 0x64e, 0xfffffdfe, 0x80010002, 0x8d2, 0x9, 0x1, 0x7eff, 0x0, 0x5, 0xb, 0x0, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7f, 0x86, 0x3, 0x10000009, 0x3e7, 0x80000b, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x200, 0x200, 0x80, 0x3, 0x0, 0x14, 0x0, 0x60000000, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0x0, 0x200, 0xffffffff, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0x3e, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x800], [0x2, 0xbb2f, 0x0, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x401, 0x7, 0x3, 0x800, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7fff7ffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x10000, 0x0, 0x8, 0x100, 0x9602, 0x7fff, 0x2, 0x4, 0x6, 0x100, 0x10000, 0x5, 0x184d99e8, 0x2b91, 0xa1f, 0x7f, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x28, 0xb1c, 0x4c400000, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 16m6.759863853s ago: executing program 8 (id=608): pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="cd77996baaf73b97e83538e6205893e21a0b352a2be58f320fa8aa950e9b3350b3c4d484a86bccacc58b26e211224f8067d04dd2d92820681de979da1a0ac53ed9f1d4c46d919b48ffac8763c7b3bcf5cecacc0a4f1e00ac2a44a56fac4276eb9860c9076b6020d5bb60", 0x6a}], 0x1, 0x6, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x68}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 16m6.094907856s ago: executing program 8 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r0, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 16m5.723962394s ago: executing program 8 (id=612): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000007c0)={[{@map_off}, {@check_strict}, {@check_strict}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 16m4.837252791s ago: executing program 8 (id=616): symlink(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003b, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x100, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x1, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x4, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x4da5, 0x8100, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x6, 0x7, 0x2, 0xfffffff8, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0xff, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x1, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1002, 0x8, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x9, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x5, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x110, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x4000100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x224, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16m4.019825647s ago: executing program 8 (id=618): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xf88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_int(r0, &(0x7f0000000200)=0x5, 0x12) 16m3.627426424s ago: executing program 38 (id=618): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xf88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_int(r0, &(0x7f0000000200)=0x5, 0x12) 14m30.118644347s ago: executing program 3 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 14m28.900043401s ago: executing program 3 (id=1088): connect$vsock_stream(0xffffffffffffffff, 0x0, 0xffffffffffffff25) syz_open_dev$MSR(0x0, 0x4, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) modify_ldt$write(0x1, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 14m28.155268485s ago: executing program 3 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200404c1}, 0x40000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 14m24.81404006s ago: executing program 3 (id=1096): msgsnd(0x0, 0x0, 0xff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140), 0xfc, 0x474, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xffffffffffffffda, 0x0, {0x2000000000000001, 0x3, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffbfffffff, 0x6, 0xffffffffffff592c, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x78) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) epoll_create(0xeed) inotify_add_watch(0xffffffffffffffff, 0x0, 0x203) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 14m23.281423461s ago: executing program 3 (id=1101): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x178, 0xc, 0x0, 0x178, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7fff, 0x836, 0x0, 0x0, 0x2, 0xfffffffc}}, @common=@unspec=@addrtype1={{0x28}, {0x428, 0x140}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @local, [0x0, 0x0, 0x0, 0xff], [], 'vlan1\x00', 'hsr0\x00', {}, {0xff}, 0x32}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 14m21.903833118s ago: executing program 3 (id=1105): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x6) 14m21.353066649s ago: executing program 39 (id=1105): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x6) 9m36.457263011s ago: executing program 6 (id=1686): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x2040, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r3, 0x0, r3, &(0x7f0000000640)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 9m35.183496506s ago: executing program 6 (id=1688): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x24, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r4, 0x4c00, r4) dup2(r3, r0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 9m34.861322272s ago: executing program 6 (id=1689): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = syz_io_uring_setup(0xd5, &(0x7f0000000640)={0x0, 0xc12b, 0x0, 0x0, 0x1f8}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9m33.699845215s ago: executing program 6 (id=1691): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x9, {0xa, 0xff, 0x7, 0x800, 0x800}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 9m32.579974037s ago: executing program 6 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) 9m31.349160061s ago: executing program 6 (id=1695): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f00007cc000/0x4000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB], 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 9m15.673991588s ago: executing program 40 (id=1695): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f00007cc000/0x4000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB], 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 2m43.103985422s ago: executing program 2 (id=2935): syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x881b, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYBLOB="fa9267da64fbc560a3037d6abd6309ae16a0f9044da6a395e4aa2a436e3ea65f492ed513ca9de011bcbf408b95ec2fc08d9fe189756afe83d95a69635ebe8f0d8461f4ed65237aa55496675bdcabe46efd9e7dcc35e8e52f9407d668e6e6fa0a8ec66f212e3e2dee446df825db7fdbf5ff2d4eb7505e82f00e5586b1895eb13bb0749d2ac29401c02ab92249b6902a1b6368f8d7cab801cedd78e0b370678fecd81e6159f3cbb30f82bd836eed40e89605cc0b7cb76bcbc866147735bb1b30ad6065e7dda76144bc8b4580e193706e8aea6ffd551de18575b23f17fbb62657cb7aea3dddd3721e4b1d8c95ed211e0ce89b02f0a5"], 0x1, 0x127f8, &(0x7f0000019180)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004980)={0x2020}, 0x2020) 2m41.6508195s ago: executing program 2 (id=2950): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.424025225s ago: executing program 2 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x5, 0x10002, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m41.188207639s ago: executing program 2 (id=2956): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x108) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 2m41.004089153s ago: executing program 2 (id=2959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x6, 0x80, [@supported_rates]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x80}}, 0xc010) 2m40.474677193s ago: executing program 2 (id=2963): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x8) 2m39.952564224s ago: executing program 41 (id=2963): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x8) 1m35.920063851s ago: executing program 0 (id=3595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 1m35.804929554s ago: executing program 0 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xca, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r2, 0x0, 0x0}, 0x10) 1m35.626444767s ago: executing program 0 (id=3599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) fanotify_init(0x8, 0x101000) 1m34.284149704s ago: executing program 0 (id=3604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x101042, 0x1) fallocate(r1, 0x0, 0xfff, 0x5) 1m34.079076207s ago: executing program 0 (id=3608): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m33.680156575s ago: executing program 0 (id=3612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.254270494s ago: executing program 42 (id=3612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.633656599s ago: executing program 9 (id=4186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000002c0)={r3, 0x0, 0x8, 0x0, 0x1000000000003}) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.398129393s ago: executing program 9 (id=4188): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a0101000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d"], 0x144}}, 0x20000000) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x0, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.310881935s ago: executing program 9 (id=4197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) 7.207805877s ago: executing program 1 (id=4190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r4, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xa4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x80) 6.244643426s ago: executing program 9 (id=4191): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 5.184167897s ago: executing program 4 (id=4196): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) 4.876994273s ago: executing program 7 (id=4198): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r3}) 4.815558854s ago: executing program 4 (id=4199): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040), &(0x7f0000000280)) syz_open_dev$media(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 4.650028678s ago: executing program 7 (id=4200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x104, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @remote, 0x8}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffffff, 0xff, 0xa, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x184}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x101, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 4.5280831s ago: executing program 4 (id=4201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x669, &(0x7f0000000140)={0x0, 0x0, 0x400}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) 4.486501141s ago: executing program 1 (id=4202): mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="b12ccadf52ed222671bfcf26cef53d9ad49498", 0x13, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.087408219s ago: executing program 7 (id=4203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x7, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, r3, 0x0) 2.836928244s ago: executing program 9 (id=4204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) 2.739202155s ago: executing program 1 (id=4205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 2.667916167s ago: executing program 4 (id=4206): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.667412767s ago: executing program 7 (id=4207): socket(0x2b, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6013c07200183a000000000000000000000000001600000000ffffac1e00010000907800000000fe80"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000207000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.538846169s ago: executing program 9 (id=4208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x4, 0x4) 1.454628301s ago: executing program 1 (id=4209): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.176006816s ago: executing program 7 (id=4210): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 1.090874528s ago: executing program 1 (id=4211): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20400008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 135.200267ms ago: executing program 7 (id=4212): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 134.953337ms ago: executing program 4 (id=4213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) accept4$llc(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 60.135578ms ago: executing program 1 (id=4214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=4215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$dir(0xffffffffffffff9c, 0x0, 0x208483, 0x5) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000440)=[{r1, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): ion failed: -22 [ 441.392738][T11845] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 445.161829][T11911] loop1: detected capacity change from 0 to 8 [ 445.169787][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1207'. [ 449.756467][T11963] loop1: detected capacity change from 0 to 32768 [ 460.059811][T12032] overlayfs: failed to clone lowerpath [ 460.071124][T12037] overlayfs: failed to clone upperpath [ 463.889501][T12081] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1239'. [ 467.000138][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1247'. [ 470.449733][T12169] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 482.313506][T12275] netlink: 'syz.7.1280': attribute type 27 has an invalid length. [ 483.977100][T12298] loop1: detected capacity change from 0 to 1024 [ 484.018139][T12298] ext4: Unknown parameter 'uid<00000000000000000000' [ 484.190208][T12310] overlayfs: failed to clone upperpath [ 485.944952][T12345] 9pnet_fd: Insufficient options for proto=fd [ 485.998874][T12341] loop1: detected capacity change from 0 to 4096 [ 486.046112][T12341] ntfs: (device loop1): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 486.085517][T12341] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 486.110709][T12341] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 486.160399][T12341] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 486.229624][T12341] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 486.292797][T12341] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 486.307054][T12341] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 486.329777][T12341] ntfs: volume version 3.1. [ 486.334413][T12341] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 486.383992][T12341] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 486.495335][T12341] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 487.197151][T12359] overlayfs: failed to clone upperpath [ 489.439074][T12396] overlayfs: failed to clone upperpath [ 490.039923][T12411] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 490.067922][T12411] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 491.398073][T12421] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1316'. [ 498.157701][T12515] loop1: detected capacity change from 0 to 32768 [ 498.165377][T12515] XFS: ikeep mount option is deprecated. [ 498.243905][T12515] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.380592][T12515] XFS (loop1): Ending clean mount [ 498.411037][T12515] XFS (loop1): Quotacheck needed: Please wait. [ 498.617273][T12515] XFS (loop1): Quotacheck: Done. [ 501.142309][T11447] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 501.999172][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.005665][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.288248][T12588] binder: 12575:12588 ioctl c0306201 200000000080 returned -14 [ 509.363565][T12614] tipc: Enabling of bearer rejected, failed to enable media [ 509.702048][T12618] loop1: detected capacity change from 0 to 4096 [ 510.538330][T12625] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.601168][T12666] loop1: detected capacity change from 0 to 8192 [ 515.695398][T12666] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 515.783506][T12666] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 515.821894][T12666] REISERFS (device loop1): using ordered data mode [ 515.867386][T12666] reiserfs: using flush barriers [ 516.389911][T12666] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 516.507910][T12666] REISERFS (device loop1): checking transaction log (loop1) [ 517.393811][T12666] REISERFS (device loop1): Using r5 hash to sort names [ 517.507718][T12666] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 517.679694][T12742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.487354][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 518.704017][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.727328][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.757452][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.791226][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.817111][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.846840][ T9] usb 2-1: config 0 descriptor?? [ 519.688259][ T9] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 520.714357][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 522.793680][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.807374][ T968] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 522.817962][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.946219][ T28] usb 2-1: USB disconnect, device number 5 [ 524.673011][T12804] loop1: detected capacity change from 0 to 512 [ 524.734761][T12804] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 527.679438][T12836] ceph: No mds server is up or the cluster is laggy [ 527.701660][ T9] libceph: connect (1)[c::]:6789 error -101 [ 527.717747][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 528.817312][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 528.857326][T12851] capability: warning: `syz.7.1389' uses 32-bit capabilities (legacy support in use) [ 529.032257][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.073671][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 529.112858][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.190149][ T9] usb 2-1: config 0 descriptor?? [ 529.260930][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 530.162380][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 530.181897][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 530.200915][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 530.219821][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 530.238251][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 530.256559][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 530.276799][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 530.298632][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 530.320639][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 530.342823][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 530.362788][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 530.384281][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 530.607390][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 530.631694][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 530.657966][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 530.747943][ T9] pwc: Registered as video103. [ 530.770785][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 530.857724][ T9] usb 2-1: USB disconnect, device number 6 [ 534.743717][T12940] netlink: 'syz.6.1407': attribute type 4 has an invalid length. [ 535.110919][T12913] Bluetooth: hci0: command 0x0406 tx timeout [ 536.875468][T12954] xt_TPROXY: Can be used only with -p tcp or -p udp [ 538.654143][T12983] tipc: Enabling of bearer rejected, failed to enable media [ 545.188885][T13069] netlink: 'syz.9.1422': attribute type 4 has an invalid length. [ 546.784960][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 546.784973][ T27] audit: type=1326 audit(1758334770.278:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.7.1423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x0 [ 550.147425][T12913] Bluetooth: hci0: command 0x0406 tx timeout [ 550.471476][T13128] tipc: Enabling of bearer rejected, failed to enable media [ 550.510746][T13129] binder: 13126:13129 ioctl c0306201 2000000003c0 returned -14 [ 552.256719][T13129] syz.1.1433 (13129): drop_caches: 2 [ 552.632765][T13151] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 555.381289][T13156] loop1: detected capacity change from 0 to 32768 [ 555.443097][T13156] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 555.443097][T13156] [ 555.477958][T13156] ERROR: (device loop1): remounting filesystem as read-only [ 555.497575][T13156] xtLookup: xtSearch returned -5 [ 555.503486][T13156] read_mapping_page failed! [ 555.515033][T13156] jfs_mount: dbMount failed w/rc = -5 [ 555.524019][T13156] Mount JFS Failure: -5 [ 555.541811][T13156] jfs_mount failed w/return code = -5 [ 560.272257][T13234] tipc: Started in network mode [ 560.281723][T13234] tipc: Node identity 6a5dd71b97f4, cluster identity 4711 [ 560.292253][T13234] tipc: Enabled bearer , priority 0 [ 560.303501][T13234] syzkaller0: entered promiscuous mode [ 560.309554][T13234] syzkaller0: entered allmulticast mode [ 560.330664][T13236] tipc: Enabling of bearer rejected, failed to enable media [ 560.466093][T13234] tipc: Resetting bearer [ 560.516090][T13233] tipc: Resetting bearer [ 560.589829][T13233] tipc: Disabling bearer [ 561.311844][T12913] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 562.536567][T13277] overlayfs: failed to clone upperpath [ 563.447934][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.454518][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.548029][T13298] tipc: Enabled bearer , priority 0 [ 564.582195][T13298] syzkaller0: entered promiscuous mode [ 564.607465][T13298] syzkaller0: entered allmulticast mode [ 564.781833][T13298] tipc: Resetting bearer [ 564.807999][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.853095][T13297] tipc: Resetting bearer [ 564.979483][T13297] tipc: Disabling bearer [ 566.421809][T13331] tipc: Enabled bearer , priority 0 [ 566.449516][T13331] syzkaller0: entered promiscuous mode [ 566.455075][T13331] syzkaller0: entered allmulticast mode [ 566.511454][T13331] tipc: Resetting bearer [ 566.594127][T13330] tipc: Resetting bearer [ 566.731693][T13330] tipc: Disabling bearer [ 567.138776][T13350] tipc: Enabling of bearer rejected, failed to enable media [ 585.229202][T13507] tipc: Enabled bearer , priority 0 [ 585.237070][T13507] syzkaller0: entered promiscuous mode [ 585.243202][T13507] syzkaller0: entered allmulticast mode [ 585.305820][T13507] tipc: Resetting bearer [ 585.337451][T13504] tipc: Resetting bearer [ 585.488041][T13504] tipc: Disabling bearer [ 585.534654][T13513] tipc: Enabling of bearer rejected, failed to enable media [ 590.121078][T13539] warn_alloc: 1 callbacks suppressed [ 590.121098][T13539] syz.1.1514: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 590.216955][T13539] CPU: 0 PID: 13539 Comm: syz.1.1514 Not tainted syzkaller #0 [ 590.224495][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 590.234681][T13539] Call Trace: [ 590.238065][T13539] [ 590.241008][T13539] dump_stack_lvl+0x16c/0x230 [ 590.245738][T13539] ? show_regs_print_info+0x20/0x20 [ 590.250966][T13539] ? load_image+0x3b0/0x3b0 [ 590.255480][T13539] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 590.261932][T13539] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 590.268450][T13539] warn_alloc+0x210/0x300 [ 590.272809][T13539] ? zone_watermark_ok_safe+0x230/0x230 [ 590.278384][T13539] ? _raw_spin_unlock+0x28/0x40 [ 590.283271][T13539] __vmalloc_node_range+0x662/0x1320 [ 590.288594][T13539] ? __asan_memset+0x22/0x40 [ 590.293408][T13539] ? free_vm_area+0x50/0x50 [ 590.298024][T13539] ? kvmalloc_node+0x70/0x180 [ 590.302728][T13539] ? rcu_is_watching+0x15/0xb0 [ 590.307503][T13539] ? kvmalloc_node+0x70/0x180 [ 590.312206][T13539] ? trace_kmalloc+0x1f/0xa0 [ 590.316819][T13539] kvmalloc_node+0x13f/0x180 [ 590.321430][T13539] ? xp_alloc_tx_descs+0x68/0xc0 [ 590.326400][T13539] xp_alloc_tx_descs+0x68/0xc0 [ 590.331199][T13539] xsk_bind+0xa11/0xc70 [ 590.335483][T13539] __sys_bind+0x31a/0x410 [ 590.339839][T13539] ? __ia32_sys_socketpair+0xb0/0xb0 [ 590.345165][T13539] __x64_sys_bind+0x7a/0x90 [ 590.349684][T13539] do_syscall_64+0x55/0xb0 [ 590.354140][T13539] ? clear_bhb_loop+0x40/0x90 [ 590.358844][T13539] ? clear_bhb_loop+0x40/0x90 [ 590.363549][T13539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.369480][T13539] RIP: 0033:0x7fc2f978ec29 [ 590.373916][T13539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.393555][T13539] RSP: 002b:00007fc2fa650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 590.401993][T13539] RAX: ffffffffffffffda RBX: 00007fc2f99d6180 RCX: 00007fc2f978ec29 [ 590.410076][T13539] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 590.418279][T13539] RBP: 00007fc2f9811e41 R08: 0000000000000000 R09: 0000000000000000 [ 590.426281][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.434280][T13539] R13: 00007fc2f99d6218 R14: 00007fc2f99d6180 R15: 00007ffeb2b4fc78 [ 590.442364][T13539] [ 590.532753][T13539] Mem-Info: [ 590.539417][T13539] active_anon:9977 inactive_anon:1 isolated_anon:0 [ 590.539417][T13539] active_file:17719 inactive_file:40141 isolated_file:0 [ 590.539417][T13539] unevictable:0 dirty:122 writeback:0 [ 590.539417][T13539] slab_reclaimable:11503 slab_unreclaimable:97695 [ 590.539417][T13539] mapped:35583 shmem:1431 pagetables:894 [ 590.539417][T13539] sec_pagetables:0 bounce:0 [ 590.539417][T13539] kernel_misc_reclaimable:0 [ 590.539417][T13539] free:1314634 free_pcp:10978 free_cma:0 [ 590.635748][T13568] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1524'. [ 590.667470][T13539] Node 0 active_anon:38672kB inactive_anon:4kB active_file:70876kB inactive_file:160368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146432kB dirty:484kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12888kB pagetables:3676kB sec_pagetables:0kB all_unreclaimable? no [ 590.759509][T13539] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 590.804226][T13539] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.857369][T13539] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 590.870248][T13539] Node 0 DMA32 free:1343664kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:39024kB inactive_anon:4kB active_file:70876kB inactive_file:159048kB unevictable:0kB writepending:484kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:27496kB local_pcp:11920kB free_cma:0kB [ 590.976655][T13539] lowmem_reserve[]: 0 0 1 1 1 [ 590.992202][T13539] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.083835][T13539] lowmem_reserve[]: 0 0 0 0 0 [ 591.102624][T13539] Node 1 Normal free:3899048kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16192kB local_pcp:5632kB free_cma:0kB [ 591.184200][T13539] lowmem_reserve[]: 0 0 0 0 0 [ 591.204775][T13539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 591.237766][T13539] Node 0 DMA32: 2*4kB (UM) 784*8kB (UME) 797*16kB (UME) 378*32kB (ME) 211*64kB (UME) 115*128kB (UME) 39*256kB (UM) 26*512kB (M) 33*1024kB (M) 15*2048kB (UME) 292*4096kB (M) = 1343192kB [ 591.257078][T13539] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 591.270219][T13539] Node 1 Normal: 242*4kB (UME) 44*8kB (UME) 46*16kB (UME) 131*32kB (UME) 31*64kB (UM) 9*128kB (UE) 0*256kB 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3899048kB [ 591.326704][T13539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.348044][T13539] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.360341][T13539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.370315][T13539] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.381068][T13539] 59263 total pagecache pages [ 591.387492][T13539] 1 pages in swap cache [ 591.392220][T13539] Free swap = 124440kB [ 591.396562][T13539] Total swap = 124996kB [ 591.401358][T13539] 2097051 pages RAM [ 591.405426][T13539] 0 pages HighMem/MovableOnly [ 591.415304][T13539] 416137 pages reserved [ 591.422341][T13539] 0 pages cma reserved [ 591.489389][T13563] tipc: Enabling of bearer rejected, failed to enable media [ 593.303953][T13602] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1528'. [ 594.444054][T13601] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 595.048594][T13622] overlayfs: missing 'lowerdir' [ 595.365869][T13622] loop1: detected capacity change from 0 to 4096 [ 595.386701][T13622] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 595.440362][T13622] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 595.475727][T13622] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 595.601159][T13622] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 595.610321][T13622] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 595.631182][T13622] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 595.640289][T13622] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 595.660845][T13622] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 595.671212][T13622] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 595.691598][T13622] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 595.790312][T13622] ntfs: volume version 3.1. [ 602.647093][T13676] tipc: Enabling of bearer rejected, failed to enable media [ 606.978706][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 607.867067][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1556'. [ 607.941823][T13730] bond_slave_0: entered promiscuous mode [ 607.950086][T13730] bond_slave_1: entered promiscuous mode [ 607.971107][T13730] macvtap1: entered promiscuous mode [ 607.986795][T13730] bond0: entered promiscuous mode [ 608.007956][T13730] macvtap1: entered allmulticast mode [ 608.016105][T13730] bond0: entered allmulticast mode [ 608.035418][T13730] bond_slave_0: entered allmulticast mode [ 608.064244][T13730] bond_slave_1: entered allmulticast mode [ 608.086807][T13730] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 608.106801][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1557'. [ 608.240624][T13737] bond0: left allmulticast mode [ 608.252322][T13737] bond_slave_0: left allmulticast mode [ 608.265574][T13737] bond_slave_1: left allmulticast mode [ 608.277534][T13737] bond0: left promiscuous mode [ 608.289081][T13737] bond_slave_0: left promiscuous mode [ 608.295448][T13737] bond_slave_1: left promiscuous mode [ 608.466196][T13747] netlink: 'syz.9.1558': attribute type 3 has an invalid length. [ 608.478693][T13747] netlink: 'syz.9.1558': attribute type 3 has an invalid length. [ 613.317368][T13776] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1562'. [ 624.110495][T13873] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1582'. [ 624.130491][T13873] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 625.688097][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.694470][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.263619][T13948] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1596'. [ 633.332880][T13948] openvswitch: netlink: Flow key attr not present in new flow. [ 633.625135][T13953] syz.6.1595 (13953) used greatest stack depth: 17960 bytes left [ 633.715642][T13962] loop1: detected capacity change from 0 to 1024 [ 633.822857][T13962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.105914][T11447] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.819039][T13999] overlayfs: failed to clone upperpath [ 647.839509][T14073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.389586][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'. [ 661.334313][T14193] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 668.558183][T14262] tipc: Enabling of bearer rejected, failed to enable media [ 668.698740][T14270] loop1: detected capacity change from 0 to 1024 [ 680.454051][T14364] tipc: Enabled bearer , priority 10 [ 681.585225][ T5863] tipc: Node number set to 4255766299 [ 685.288889][T14400] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 686.314501][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.337493][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.588942][T14431] tipc: Enabling of bearer rejected, failed to enable media [ 690.018154][T14442] befs: (nbd1): No write support. Marking filesystem read-only [ 690.032037][T14442] bio_check_eod: 4 callbacks suppressed [ 690.032056][T14442] syz.1.1684: attempt to access beyond end of device [ 690.032056][T14442] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 690.059316][T14442] befs: (nbd1): unable to read superblock [ 696.395775][T14491] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1693'. [ 696.572065][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.169273][T14521] ptrace attach of "./syz-executor exec"[8611] was attempted by " [ 707.667303][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 710.873308][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1711'. [ 711.748842][T14601] loop1: detected capacity change from 0 to 164 [ 711.905199][T14601] Unable to read rock-ridge attributes [ 713.378356][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1714'. [ 716.464848][T12913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.485820][T12913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.498819][T12913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.525500][T12913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.533996][T12913] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 716.541473][T12913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 717.714205][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.891251][T14692] loop1: detected capacity change from 0 to 4096 [ 718.025228][T14692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.076152][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.472673][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.570320][T14706] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1724'. [ 718.634287][T12913] Bluetooth: hci2: command tx timeout [ 718.736370][T14709] overlayfs: failed to clone upperpath [ 719.434739][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.162638][T12913] Bluetooth: hci2: command tx timeout [ 723.645846][T14680] chnl_net:caif_netlink_parms(): no params data found [ 725.187347][T12913] Bluetooth: hci2: command tx timeout [ 727.006329][T14680] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.030334][T14680] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.052507][T14680] bridge_slave_0: entered allmulticast mode [ 727.061173][T14680] bridge_slave_0: entered promiscuous mode [ 727.144900][T14680] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.785019][T12913] Bluetooth: hci2: command tx timeout [ 727.823330][T14680] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.857573][T14680] bridge_slave_1: entered allmulticast mode [ 727.865746][T14680] bridge_slave_1: entered promiscuous mode [ 728.245769][T14680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.403277][T14680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.845596][T14680] team0: Port device team_slave_0 added [ 732.866206][T14680] team0: Port device team_slave_1 added [ 732.916803][ T23] IPVS: starting estimator thread 0... [ 733.030915][T14799] IPVS: using max 20 ests per chain, 48000 per kthread [ 733.580170][T14680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.689248][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.965066][T14680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.997463][T14680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.004488][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.207275][T14680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.477899][T14680] hsr_slave_0: entered promiscuous mode [ 738.700237][T14680] hsr_slave_1: entered promiscuous mode [ 738.726392][T14680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.985765][T14680] Cannot create hsr debugfs directory [ 739.631850][T14832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 739.638385][T14832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 739.656772][T14832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 739.662964][T14832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 739.672574][T14832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 741.586920][ T11] hsr_slave_0: left promiscuous mode [ 741.677620][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 741.677645][T12913] Bluetooth: hci0: command 0x0406 tx timeout [ 741.700056][ T11] hsr_slave_1: left promiscuous mode [ 741.711710][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.765244][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.834060][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.877431][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.019958][ T11] bridge_slave_1: left allmulticast mode [ 742.025692][ T11] bridge_slave_1: left promiscuous mode [ 742.047441][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 742.117866][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.217295][ T11] bridge_slave_0: left allmulticast mode [ 742.223029][ T11] bridge_slave_0: left promiscuous mode [ 742.259301][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.307423][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 742.397045][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.550587][ T11] veth1_macvtap: left promiscuous mode [ 742.556255][ T11] veth0_macvtap: left promiscuous mode [ 742.592800][ T11] veth1_vlan: left promiscuous mode [ 742.606214][ T11] veth0_vlan: left promiscuous mode [ 742.611671][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.786685][ T8] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 742.988180][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.002159][ T8] usb 2-1: Product: syz [ 743.006611][ T8] usb 2-1: Manufacturer: syz [ 743.012243][ T8] usb 2-1: SerialNumber: syz [ 743.020692][ T8] usb 2-1: config 0 descriptor?? [ 743.877735][T12913] Bluetooth: hci2: command 0x0c1a tx timeout [ 743.877745][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 745.937862][T12913] Bluetooth: hci2: command 0x0c1a tx timeout [ 746.320012][T14894] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 747.319646][ T11] bond1 (unregistering): Released all slaves [ 747.850302][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.856820][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.062177][T12913] Bluetooth: hci2: command 0x0c1a tx timeout [ 748.544778][ T5863] usb 2-1: USB disconnect, device number 7 [ 758.446153][ T11] team0 (unregistering): Port device team_slave_1 removed [ 758.571968][ T11] team0 (unregistering): Port device team_slave_0 removed [ 758.659061][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.805384][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.273881][ T11] bond0 (unregistering): Released all slaves [ 762.275592][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1782'. [ 762.476642][T15049] netlink: 'syz.7.1781': attribute type 10 has an invalid length. [ 762.521821][T15049] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 763.876428][T14680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 764.029071][T14680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 764.061841][T14680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 764.250178][T14680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 766.019574][ T5795] Bluetooth: hci4: command 0x1003 tx timeout [ 766.137452][T12913] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 767.540980][T14680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.892517][T14680] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.989599][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.996876][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.703168][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.710484][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.877271][T15119] overlayfs: failed to clone upperpath [ 769.919993][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 769.920006][ T27] audit: type=1326 audit(1758334993.408:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 770.126132][ T27] audit: type=1326 audit(1758334993.408:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 771.465045][T14680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.660504][T14680] veth0_vlan: entered promiscuous mode [ 771.705420][T14680] veth1_vlan: entered promiscuous mode [ 771.822953][T14680] veth0_macvtap: entered promiscuous mode [ 771.863947][T14680] veth1_macvtap: entered promiscuous mode [ 772.078051][T14680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.275306][T14680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.285868][T14680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.296753][T14680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.309155][T14680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.349588][T14680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.365171][T14680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.375249][T14680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.391201][T14680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.430877][T14680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.480508][T14680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.517767][T14680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.526553][T14680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.567903][T14680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.178044][T15174] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 778.478438][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 778.492655][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 778.504372][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 778.517428][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 778.525464][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 778.533625][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.629695][ T5795] Bluetooth: hci2: command tx timeout [ 780.927933][T15227] UBIFS error (pid: 15227): cannot open "./file0", error -22 [ 781.049571][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.791601][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.056813][T15189] chnl_net:caif_netlink_parms(): no params data found [ 782.231131][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.686463][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.707400][ T5795] Bluetooth: hci2: command tx timeout [ 784.246553][T15189] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.295286][T15189] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.302935][T15189] bridge_slave_0: entered allmulticast mode [ 784.311103][T15189] bridge_slave_0: entered promiscuous mode [ 784.329158][T15189] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.336819][T15189] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.351494][T15189] bridge_slave_1: entered allmulticast mode [ 784.369145][T15189] bridge_slave_1: entered promiscuous mode [ 784.797744][ T5795] Bluetooth: hci2: command tx timeout [ 785.029508][T15189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.322425][T15189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.536343][T15189] team0: Port device team_slave_0 added [ 785.858806][T15189] team0: Port device team_slave_1 added [ 786.867365][ T5795] Bluetooth: hci2: command tx timeout [ 788.603025][T15309] raw_sendmsg: syz.9.1824 forgot to set AF_INET. Fix it! [ 788.615904][T15189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.639283][T15189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.693729][T15189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.720594][T15189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.727800][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1825'. [ 788.738162][T15189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.779932][T15189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.127977][T15189] hsr_slave_0: entered promiscuous mode [ 790.145909][T15189] hsr_slave_1: entered promiscuous mode [ 790.172250][T15189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.208842][T15189] Cannot create hsr debugfs directory [ 793.212199][ T27] audit: type=1326 audit(1758335016.518:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.7.1835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x0 [ 794.810588][ T11] hsr_slave_0: left promiscuous mode [ 794.851505][ T11] hsr_slave_1: left promiscuous mode [ 794.866396][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.883255][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.893004][T15379] netlink: 'syz.7.1838': attribute type 2 has an invalid length. [ 794.902676][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.907225][T15379] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1838'. [ 794.917311][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.937506][ T11] bridge_slave_1: left allmulticast mode [ 794.943220][ T11] bridge_slave_1: left promiscuous mode [ 794.950453][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.961395][ T11] bridge_slave_0: left allmulticast mode [ 794.970547][ T11] bridge_slave_0: left promiscuous mode [ 794.976385][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.074984][T15385] netlink: 'syz.9.1846': attribute type 2 has an invalid length. [ 795.089505][T15385] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1846'. [ 795.151078][ T11] veth1_macvtap: left promiscuous mode [ 795.156695][ T11] veth0_macvtap: left promiscuous mode [ 795.185360][ T11] veth1_vlan: left promiscuous mode [ 795.202820][ T11] veth0_vlan: left promiscuous mode [ 797.173944][ T11] team0 (unregistering): Port device team_slave_1 removed [ 797.262432][ T11] team0 (unregistering): Port device team_slave_0 removed [ 797.340304][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.423908][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.327636][ T11] bond0 (unregistering): Released all slaves [ 798.449562][T15376] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 798.459128][T15376] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 798.470622][T15376] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 800.720777][T15189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 800.795407][T15189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 800.924458][T15189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 801.013859][T15189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 802.549322][T15189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.597706][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1850'. [ 802.679296][T15451] syz_tun: entered promiscuous mode [ 802.685592][T15451] macvtap1: entered promiscuous mode [ 802.747607][T15451] macvtap1: entered allmulticast mode [ 802.769418][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1850'. [ 802.873124][T15453] syz_tun: left promiscuous mode [ 802.986216][T15189] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.022694][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.029952][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.093450][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.100732][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.752151][T15475] overlayfs: failed to clone upperpath [ 806.934047][T15189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.208657][T15189] veth0_vlan: entered promiscuous mode [ 808.259155][T15189] veth1_vlan: entered promiscuous mode [ 808.389590][T15189] veth0_macvtap: entered promiscuous mode [ 808.433527][T15189] veth1_macvtap: entered promiscuous mode [ 809.100795][T15498] ip6gre1: entered allmulticast mode [ 809.105071][T15501] netlink: 'syz.9.1856': attribute type 3 has an invalid length. [ 809.184385][T15189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.236265][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.245135][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.368451][T15189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.427495][T15189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.474307][T15189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.535825][T15189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.560874][T15189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.643848][T15189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.654098][T15189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.664908][T15189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.728342][T15189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.762116][T15189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.801604][T15189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.825932][T15189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.847194][T15189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.193576][T14929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.239262][T14929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.322839][ T8665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.357648][ T8665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.590164][T15524] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.1863'. [ 810.909885][T15531] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1715'. [ 810.919697][T15531] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1715'. [ 812.993225][T15538] loop2: detected capacity change from 0 to 4096 [ 813.183606][T15546] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 815.857655][ T5595] IPVS: starting estimator thread 0... [ 815.947420][T15560] IPVS: using max 15 ests per chain, 36000 per kthread [ 823.055416][T15628] netlink: 'syz.2.1881': attribute type 1 has an invalid length. [ 823.064052][T15628] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1881'. [ 827.445535][T15655] 9pnet_fd: Insufficient options for proto=fd [ 829.597560][T15664] loop2: detected capacity change from 0 to 8192 [ 829.706315][T15664] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 829.719657][T15664] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 829.729756][T15664] REISERFS (device loop2): using ordered data mode [ 829.736936][T15664] reiserfs: using flush barriers [ 829.755923][T15664] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 829.777456][T15664] REISERFS (device loop2): checking transaction log (loop2) [ 829.909537][T15664] REISERFS (device loop2): Using r5 hash to sort names [ 829.921436][T15664] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 834.498297][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1901'. [ 835.111111][T15712] overlayfs: failed to clone upperpath [ 837.374395][ T5795] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 837.381688][ T5795] Bluetooth: Wrong link type (-22) [ 837.389339][ T5795] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 837.395919][ T5795] Bluetooth: Wrong link type (-22) [ 837.401237][ T5795] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 837.407812][ T5795] Bluetooth: Wrong link type (-22) [ 837.718404][ T5795] Bluetooth: hci2: link tx timeout [ 837.728771][ T5795] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 840.201056][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 842.621251][T15790] loop2: detected capacity change from 0 to 256 [ 849.279728][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 849.320974][T15827] batadv0: entered promiscuous mode [ 849.346110][T15827] macvtap1: entered promiscuous mode [ 849.367691][T15827] macvtap1: entered allmulticast mode [ 849.373176][T15827] batadv0: entered allmulticast mode [ 849.386215][T15827] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 849.552294][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 849.606096][T15833] batadv0: left allmulticast mode [ 849.611548][T15833] batadv0: left promiscuous mode [ 850.599237][T15841] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 859.057114][T15909] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 859.425924][T15927] netlink: 'syz.1.1940': attribute type 6 has an invalid length. [ 859.431995][T15928] Invalid option length (65058) for dns_resolver key [ 861.328269][T15946] overlayfs: failed to resolve './file0': -2 [ 861.854089][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1943'. [ 863.245598][T15962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 863.261728][T15962] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 869.393764][T15997] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.943268][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.963739][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.395534][T16010] loop2: detected capacity change from 0 to 4096 [ 872.277158][T16010] EXT4-fs (loop2): Test dummy encryption mode enabled [ 872.671021][T16010] EXT4-fs (loop2): unsupported descriptor size 255 [ 877.186103][T16064] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 879.495711][T16078] overlayfs: failed to clone upperpath [ 885.757545][T16129] Cannot find add_set index 0 as target [ 886.655142][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.664782][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.674353][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.683479][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.692562][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.701891][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.710987][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.720029][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.729134][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 886.738544][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 889.455425][T16160] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 900.888341][T16252] Cannot find del_set index 3 as target [ 906.670865][T16299] pim6reg: entered allmulticast mode [ 907.386645][T16302] tipc: Started in network mode [ 907.391598][T16302] tipc: Node identity 2007ff, cluster identity 4711 [ 907.398541][T16302] tipc: Node number set to 2099199 [ 909.748451][T16317] overlayfs: failed to resolve './file0': -2 [ 909.781363][T16317] random: crng reseeded on system resumption [ 910.306184][T16327] overlayfs: missing 'lowerdir' [ 911.299492][T16340] netlink: 'syz.7.2017': attribute type 4 has an invalid length. [ 915.642962][T16372] __nla_validate_parse: 43 callbacks suppressed [ 915.649426][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2024'. [ 915.658628][T16372] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2024'. [ 915.779273][T16372] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.788882][T16372] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.797665][T16372] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.806968][T16372] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.855537][T16393] syz.7.2027 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 917.428915][T16395] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 921.110433][T15036] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 922.393307][T16435] veth0_vlan: left promiscuous mode [ 922.398853][T16435] vlan0: entered promiscuous mode [ 922.403957][T16435] veth0_vlan: entered promiscuous mode [ 922.821752][T16444] overlayfs: failed to clone lowerpath [ 923.596374][T15036] usb 3-1: Using ep0 maxpacket: 16 [ 923.727720][T15036] usb 3-1: device descriptor read/all, error -71 [ 929.443901][T16473] loop2: detected capacity change from 0 to 32768 [ 929.826970][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.834193][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.134885][T16473] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 930.135275][T16473] (syz.2.2041,16473,0):ocfs2_initialize_super:2287 ERROR: status = -12 [ 930.183330][T16473] (syz.2.2041,16473,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 930.753164][T16447] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 937.870793][T16540] overlayfs: missing 'lowerdir' [ 938.120156][T16546] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 938.832427][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 939.085329][T16555] loop2: detected capacity change from 0 to 512 [ 939.100877][T16555] EXT4-fs: Ignoring removed mblk_io_submit option [ 939.108946][T16555] EXT4-fs: Ignoring removed mblk_io_submit option [ 939.121589][T16555] EXT4-fs (loop2): Test dummy encryption mode enabled [ 939.129125][T16555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 939.152065][T16555] EXT4-fs (loop2): 1 truncate cleaned up [ 939.163034][T16555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.625402][T16563] x_tables: ip_tables: ah match: only valid for protocol 51 [ 940.325116][T15189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.592468][T16573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 940.701013][T16574] loop2: detected capacity change from 0 to 1024 [ 940.710664][T16574] EXT4-fs: Ignoring removed orlov option [ 943.603863][T16574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.834406][T16582] netlink: 'syz.1.2059': attribute type 10 has an invalid length. [ 943.859366][ T27] audit: type=1800 audit(1758335171.846:49): pid=16570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2058" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 943.896861][T16570] binder: 16565:16570 ioctl 4018620d 0 returned -22 [ 944.084004][T16582] batman_adv: batadv0: Adding interface: team0 [ 944.166314][T16582] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.311711][T15189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.501360][T16582] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 945.111272][T16595] loop2: detected capacity change from 0 to 256 [ 945.135814][T16595] exfat: Bad value for 'gid' [ 945.265497][T16447] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 947.588376][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2067'. [ 947.877834][ T7699] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 948.060657][ T7699] usb 3-1: Using ep0 maxpacket: 8 [ 948.125943][ T7699] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 948.134088][ T7699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.181123][ T7699] usb 3-1: config 0 has no interface number 0 [ 948.486999][ T7699] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 948.540250][ T7699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.575009][ T7699] usb 3-1: Product: syz [ 948.602594][ T7699] usb 3-1: Manufacturer: syz [ 948.636744][ T7699] usb 3-1: SerialNumber: syz [ 948.681924][ T7699] usb 3-1: config 0 descriptor?? [ 948.738372][ T7699] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 948.784330][ T7699] usb 3-1: No streaming interface found for terminal 6. [ 948.795782][T16633] ªªªªªª: renamed from wg2 (while UP) [ 949.228380][T15036] IPVS: starting estimator thread 0... [ 949.326308][T16641] IPVS: using max 14 ests per chain, 33600 per kthread [ 952.022123][ T5849] usb 3-1: USB disconnect, device number 7 [ 953.800840][T16677] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2074'. [ 954.097993][T16679] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.2074'. [ 954.895027][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 956.631444][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2078'. [ 958.572335][T16696] loop2: detected capacity change from 0 to 512 [ 958.663648][T16696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.747043][T16696] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 958.785675][T16704] 9pnet_fd: Insufficient options for proto=fd [ 958.882084][T16704] overlayfs: failed to clone upperpath [ 959.174107][T16696] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 960.103933][T16696] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.191261][T16710] fuse: Invalid rootmode [ 962.645701][T16734] lo speed is unknown, defaulting to 1000 [ 962.652659][T16734] lo speed is unknown, defaulting to 1000 [ 962.659135][T16734] lo speed is unknown, defaulting to 1000 [ 962.679445][T16734] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 963.134530][T16734] lo speed is unknown, defaulting to 1000 [ 963.142660][T16734] lo speed is unknown, defaulting to 1000 [ 963.150314][T16734] lo speed is unknown, defaulting to 1000 [ 963.157839][T16734] lo speed is unknown, defaulting to 1000 [ 963.747983][T16744] overlayfs: failed to clone upperpath [ 969.392680][T16792] lo speed is unknown, defaulting to 1000 [ 972.421946][T16836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2101'. [ 973.161263][T16845] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2101'. [ 986.202082][T16921] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2121'. [ 986.886730][T16930] overlayfs: failed to clone upperpath [ 986.916610][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.923107][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.989788][T16949] lo speed is unknown, defaulting to 1000 [ 989.996693][T16949] lo speed is unknown, defaulting to 1000 [ 990.003491][T16949] lo speed is unknown, defaulting to 1000 [ 990.019784][T16949] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 990.042484][T16949] lo speed is unknown, defaulting to 1000 [ 990.049385][T16949] lo speed is unknown, defaulting to 1000 [ 990.056169][T16949] lo speed is unknown, defaulting to 1000 [ 990.063097][T16949] lo speed is unknown, defaulting to 1000 [ 1001.696930][T17040] (null): rxe_set_mtu: Set mtu to 4096 [ 1001.715561][T17040] lo speed is unknown, defaulting to 1000 [ 1001.763919][T17040] lo speed is unknown, defaulting to 1000 [ 1001.859856][T17040] lo speed is unknown, defaulting to 1000 [ 1002.172545][T17040] infiniband sz1: set active [ 1002.178037][T17040] infiniband sz1: added lo [ 1002.423619][T17040] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1002.448386][T17040] infiniband sz1: Couldn't open port 1 [ 1002.481721][T17040] RDS/IB: sz1: added [ 1002.486629][T17040] smc: adding ib device sz1 with port count 1 [ 1002.493141][T17040] smc: ib device sz1 port 1 has pnetid [ 1002.503033][T17040] lo speed is unknown, defaulting to 1000 [ 1002.623447][T17040] lo speed is unknown, defaulting to 1000 [ 1002.743145][T17040] lo speed is unknown, defaulting to 1000 [ 1002.860640][T17040] lo speed is unknown, defaulting to 1000 [ 1003.072713][T15036] lo speed is unknown, defaulting to 1000 [ 1003.091067][T15036] lo speed is unknown, defaulting to 1000 [ 1003.683306][T17056] hugetlbfs: syz.2.2142 (17056): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1004.530919][T17058] overlayfs: failed to clone upperpath [ 1004.626778][T17062] fuse: Unknown parameter '0x0000000000000007' [ 1004.649543][T17062] 9pnet_fd: Insufficient options for proto=fd [ 1007.039378][T17072] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2146'. [ 1009.158141][T17083] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2147'. [ 1009.842762][ T27] audit: type=1800 audit(1758335241.080:50): pid=17100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2151" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1009.873226][T17101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2151'. [ 1009.882492][T17101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2151'. [ 1012.944819][T17120] 9pnet_fd: Insufficient options for proto=fd [ 1014.858315][T17151] fuse: Bad value for 'fd' [ 1020.528762][T17198] "syz.7.2166" (17198) uses obsolete ecb(arc4) skcipher [ 1020.553832][T17198] trusted_key: syz.7.2166 sent an empty control message without MSG_MORE. [ 1022.688423][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 1023.704924][T17217] lo speed is unknown, defaulting to 1000 [ 1023.889814][T17215] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2168'. [ 1023.968857][T17217] lo speed is unknown, defaulting to 1000 [ 1024.050106][T17217] lo speed is unknown, defaulting to 1000 [ 1028.181306][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2179'. [ 1029.609575][T12913] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 1031.255866][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'. [ 1032.709724][T12913] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1034.488743][ T27] audit: type=1326 audit(1758335266.958:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.1.2206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x0 [ 1035.008276][T17380] lo speed is unknown, defaulting to 1000 [ 1035.045569][T17380] lo speed is unknown, defaulting to 1000 [ 1035.099556][T17380] lo speed is unknown, defaulting to 1000 [ 1035.195436][T17395] dccp_invalid_packet: P.Data Offset(10) too large [ 1035.773449][T17405] fuse: Unknown parameter '0x0000000000000007' [ 1035.791668][T17405] 9pnet_fd: Insufficient options for proto=fd [ 1037.922972][T17426] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2219'. [ 1040.444289][T17450] fuse: Unknown parameter '0x0000000000000007' [ 1040.459116][T17450] 9pnet_fd: Insufficient options for proto=fd [ 1044.765382][T17490] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2233'. [ 1045.405811][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.413732][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.127066][T17533] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2245'. [ 1048.483154][ T27] audit: type=1326 audit(1758335281.676:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17547 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94878ec29 code=0x7ffc0000 [ 1048.556840][ T27] audit: type=1326 audit(1758335281.707:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17547 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94878ec29 code=0x7ffc0000 [ 1048.661414][ T27] audit: type=1326 audit(1758335281.707:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17547 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa94878ec29 code=0x7ffc0000 [ 1048.708348][ T27] audit: type=1326 audit(1758335281.707:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17547 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94878ec29 code=0x7ffc0000 [ 1048.750173][ T27] audit: type=1326 audit(1758335281.707:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17547 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94878ec29 code=0x7ffc0000 [ 1051.534223][T12913] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 1053.014672][T17648] netlink: 'syz.1.2278': attribute type 21 has an invalid length. [ 1056.181237][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2307'. [ 1056.218785][T12913] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 1056.237667][T17726] lo speed is unknown, defaulting to 1000 [ 1056.245367][T17726] lo speed is unknown, defaulting to 1000 [ 1056.252888][T17726] lo speed is unknown, defaulting to 1000 [ 1057.200126][T17771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2320'. [ 1062.121792][ T27] audit: type=1107 audit(1758335295.985:57): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1063.345846][T17996] xt_TCPMSS: Only works on TCP SYN packets [ 1063.787149][T18004] mmap: syz.7.2399 (18004) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1065.113412][T18055] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2418'. [ 1066.239044][T18104] x_tables: duplicate underflow at hook 1 [ 1066.367534][T18109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2439'. [ 1066.668587][T18126] No such timeout policy "syz0" [ 1066.898147][T18139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1067.166826][ T27] audit: type=1326 audit(1758335301.286:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.7.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1067.254001][ T27] audit: type=1326 audit(1758335301.328:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.7.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1067.348495][ T27] audit: type=1326 audit(1758335301.328:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.7.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1067.395788][ T27] audit: type=1326 audit(1758335301.328:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.7.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1067.473742][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2458'. [ 1067.491502][T18164] libceph: resolve 'c' (ret=-3): failed [ 1067.527108][T18161] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1068.283085][T18203] netlink: 'syz.7.2476': attribute type 2 has an invalid length. [ 1074.529016][T18379] netlink: 'syz.9.2529': attribute type 5 has an invalid length. [ 1075.964261][ T27] audit: type=1326 audit(1758335310.524:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7fc00000 [ 1077.580325][T18485] netlink: 'syz.7.2555': attribute type 30 has an invalid length. [ 1078.046236][ T27] audit: type=1326 audit(1758335312.708:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.7.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1078.118229][ T27] audit: type=1326 audit(1758335312.708:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.7.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1078.176294][ T27] audit: type=1326 audit(1758335312.708:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.7.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1078.242395][ T27] audit: type=1326 audit(1758335312.708:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.7.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1078.303132][ T27] audit: type=1326 audit(1758335312.708:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.7.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1079.120650][T18549] netlink: 'syz.7.2578': attribute type 8 has an invalid length. [ 1081.024362][T18617] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2602'. [ 1083.224529][T18714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'. [ 1085.689580][T18798] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2666'. [ 1086.425561][T18833] netlink: 'syz.1.2679': attribute type 6 has an invalid length. [ 1087.784201][T18894] tipc: Enabled bearer , priority 10 [ 1087.896880][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2703'. [ 1087.906757][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2703'. [ 1089.556801][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2722'. [ 1089.607870][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 1089.629105][T18954] netlink: 'syz.1.2722': attribute type 19 has an invalid length. [ 1089.674678][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2722'. [ 1090.542293][T18991] netlink: 'syz.2.2732': attribute type 27 has an invalid length. [ 1091.551568][T19042] overlayfs: failed to clone upperpath [ 1093.451186][T19109] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1095.240639][T19184] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2801'. [ 1095.349338][T19190] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2802'. [ 1095.700865][T19196] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1095.955140][ T27] audit: type=1326 audit(1758335331.510:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1096.057701][ T27] audit: type=1326 audit(1758335331.520:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1096.168992][ T27] audit: type=1326 audit(1758335331.562:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1096.353852][ T27] audit: type=1326 audit(1758335331.562:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1096.443249][T19202] netlink: 'syz.7.2807': attribute type 6 has an invalid length. [ 1096.451719][ T27] audit: type=1326 audit(1758335331.562:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1096.518770][ T27] audit: type=1326 audit(1758335331.562:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1096.586288][ T27] audit: type=1326 audit(1758335331.562:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x7ffc0000 [ 1096.661278][ T27] audit: type=1326 audit(1758335331.562:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c8e185be7 code=0x7ffc0000 [ 1096.723536][ T27] audit: type=1326 audit(1758335331.562:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c8e12ae09 code=0x7ffc0000 [ 1096.801593][ T27] audit: type=1326 audit(1758335331.562:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.7.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c8e185be7 code=0x7ffc0000 [ 1098.617617][T19244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2826'. [ 1099.423079][T19264] overlayfs: disabling nfs_export due to verity=require [ 1099.430258][T19264] overlayfs: failed to clone upperpath [ 1099.546588][T19269] netlink: 163688 bytes leftover after parsing attributes in process `syz.1.2838'. [ 1099.569848][T19269] netlink: zone id is out of range [ 1099.583253][T19269] netlink: zone id is out of range [ 1099.589097][T19269] netlink: zone id is out of range [ 1099.609094][T19269] netlink: zone id is out of range [ 1099.616049][T19269] netlink: zone id is out of range [ 1099.631073][T19269] netlink: zone id is out of range [ 1099.640108][T19269] netlink: zone id is out of range [ 1099.649662][T19269] netlink: zone id is out of range [ 1099.674270][T19269] netlink: zone id is out of range [ 1099.681801][T19269] netlink: zone id is out of range [ 1102.662439][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2905'. [ 1102.815532][T19417] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2908'. [ 1102.878821][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2908'. [ 1102.958899][T19421] overlayfs: failed to clone lowerpath [ 1103.356801][T19429] 9pnet_fd: Insufficient options for proto=fd [ 1103.787858][T19447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2921'. [ 1103.948416][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1103.954875][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1104.918983][T19485] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2938'. [ 1105.670620][T19499] Illegal XDP return value 4294967274 on prog (id 433) dev N/A, expect packet loss! [ 1106.108504][T19510] 9pnet_fd: Insufficient options for proto=fd [ 1106.199566][T19513] 9pnet_fd: Insufficient options for proto=fd [ 1107.339306][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.609922][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.841805][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.007196][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.530328][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1108.550042][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1108.561058][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1108.575263][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1108.586150][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1108.611366][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1108.761883][T19545] lo speed is unknown, defaulting to 1000 [ 1108.778422][T19545] lo speed is unknown, defaulting to 1000 [ 1108.794813][T19545] lo speed is unknown, defaulting to 1000 [ 1110.013511][T19545] chnl_net:caif_netlink_parms(): no params data found [ 1110.399523][T19545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.414840][T19545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.424239][T19545] bridge_slave_0: entered allmulticast mode [ 1110.431768][T19545] bridge_slave_0: entered promiscuous mode [ 1110.490785][T19545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.498258][T19545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.517468][T19545] bridge_slave_1: entered allmulticast mode [ 1110.594468][T19545] bridge_slave_1: entered promiscuous mode [ 1110.642215][T12913] Bluetooth: hci2: command tx timeout [ 1110.810870][T19545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.887567][T19545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.956586][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 1110.956602][ T27] audit: type=1326 audit(1758335347.257:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19593 comm="syz.9.2988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f488a38ec29 code=0x0 [ 1110.996452][ T12] hsr_slave_0: left promiscuous mode [ 1111.025554][ T12] hsr_slave_1: left promiscuous mode [ 1111.047782][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.056581][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.072891][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.091613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.104238][ T12] bridge_slave_1: left allmulticast mode [ 1111.115862][ T12] bridge_slave_1: left promiscuous mode [ 1111.127586][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.146105][ T12] bridge_slave_0: left allmulticast mode [ 1111.152221][ T12] bridge_slave_0: left promiscuous mode [ 1111.163835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.249013][ T12] veth1_macvtap: left promiscuous mode [ 1111.260519][ T12] veth0_macvtap: left promiscuous mode [ 1111.270147][ T12] veth1_vlan: left promiscuous mode [ 1111.280850][ T12] veth0_vlan: left promiscuous mode [ 1111.508636][ T12] infiniband sz1: set down [ 1112.280996][T19627] warn_alloc: 1 callbacks suppressed [ 1112.281014][T19627] syz.7.3004: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1112.315330][T19627] CPU: 1 PID: 19627 Comm: syz.7.3004 Not tainted syzkaller #0 [ 1112.322963][T19627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1112.333070][T19627] Call Trace: [ 1112.336417][T19627] [ 1112.339486][T19627] dump_stack_lvl+0x16c/0x230 [ 1112.344240][T19627] ? show_regs_print_info+0x20/0x20 [ 1112.349498][T19627] ? load_image+0x3b0/0x3b0 [ 1112.354057][T19627] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1112.360532][T19627] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1112.367087][T19627] warn_alloc+0x210/0x300 [ 1112.371469][T19627] ? stack_trace_save+0x9c/0xe0 [ 1112.376426][T19627] ? zone_watermark_ok_safe+0x230/0x230 [ 1112.382021][T19627] ? kasan_set_track+0x5f/0x70 [ 1112.386818][T19627] ? kasan_set_track+0x4e/0x70 [ 1112.391610][T19627] ? __kasan_kmalloc+0x8f/0xa0 [ 1112.396454][T19627] ? xsk_init_queue+0xb0/0x110 [ 1112.401242][T19627] ? xsk_setsockopt+0x43c/0x6f0 [ 1112.406115][T19627] ? do_sock_setsockopt+0x175/0x1a0 [ 1112.411428][T19627] ? __x64_sys_setsockopt+0x184/0x200 [ 1112.416828][T19627] __vmalloc_node_range+0x126/0x1320 [ 1112.422169][T19627] ? free_vm_area+0x50/0x50 [ 1112.426704][T19627] vmalloc_user+0x74/0x80 [ 1112.431056][T19627] ? xskq_create+0xbf/0x170 [ 1112.435574][T19627] xskq_create+0xbf/0x170 [ 1112.439923][T19627] xsk_init_queue+0xb0/0x110 [ 1112.444537][T19627] xsk_setsockopt+0x43c/0x6f0 [ 1112.449275][T19627] ? xsk_poll+0x670/0x670 [ 1112.453632][T19627] ? __fget_files+0x28/0x4d0 [ 1112.458271][T19627] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1112.463850][T19627] ? security_socket_setsockopt+0x7e/0xa0 [ 1112.469600][T19627] ? xsk_poll+0x670/0x670 [ 1112.473960][T19627] do_sock_setsockopt+0x175/0x1a0 [ 1112.479066][T19627] ? __fdget+0x180/0x210 [ 1112.483561][T19627] __x64_sys_setsockopt+0x184/0x200 [ 1112.488804][T19627] do_syscall_64+0x55/0xb0 [ 1112.493247][T19627] ? clear_bhb_loop+0x40/0x90 [ 1112.497941][T19627] ? clear_bhb_loop+0x40/0x90 [ 1112.502639][T19627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1112.508575][T19627] RIP: 0033:0x7f5c8e18ec29 [ 1112.513031][T19627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.532677][T19627] RSP: 002b:00007f5c8f063038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1112.541297][T19627] RAX: ffffffffffffffda RBX: 00007f5c8e3d5fa0 RCX: 00007f5c8e18ec29 [ 1112.549293][T19627] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1112.557367][T19627] RBP: 00007f5c8e211e41 R08: 0000000000000004 R09: 0000000000000000 [ 1112.565364][T19627] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.573450][T19627] R13: 00007f5c8e3d6038 R14: 00007f5c8e3d5fa0 R15: 00007ffcc8930698 [ 1112.581464][T19627] [ 1112.615297][T12913] Bluetooth: hci2: command tx timeout [ 1112.723195][T19627] Mem-Info: [ 1112.726482][T19627] active_anon:9885 inactive_anon:1 isolated_anon:0 [ 1112.726482][T19627] active_file:18560 inactive_file:40385 isolated_file:0 [ 1112.726482][T19627] unevictable:0 dirty:179 writeback:0 [ 1112.726482][T19627] slab_reclaimable:11630 slab_unreclaimable:99512 [ 1112.726482][T19627] mapped:34443 shmem:5538 pagetables:493 [ 1112.726482][T19627] sec_pagetables:0 bounce:0 [ 1112.726482][T19627] kernel_misc_reclaimable:0 [ 1112.726482][T19627] free:1317751 free_pcp:10487 free_cma:0 [ 1112.780160][T19627] Node 0 active_anon:38004kB inactive_anon:4kB active_file:74240kB inactive_file:161344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137772kB dirty:712kB writeback:0kB shmem:20616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10904kB pagetables:1972kB sec_pagetables:0kB all_unreclaimable? no [ 1112.813079][T19627] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1112.844457][T19627] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.890042][T19627] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1112.896418][T19627] Node 0 DMA32 free:1352992kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:37956kB inactive_anon:4kB active_file:74240kB inactive_file:160024kB unevictable:0kB writepending:708kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:30832kB local_pcp:18292kB free_cma:0kB [ 1112.927321][T19627] lowmem_reserve[]: 0 0 1 1 1 [ 1112.938117][T19627] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.965860][T19627] lowmem_reserve[]: 0 0 0 0 0 [ 1112.970731][T19627] Node 1 Normal free:3902636kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12796kB local_pcp:2560kB free_cma:0kB [ 1113.008391][T19627] lowmem_reserve[]: 0 0 0 0 0 [ 1113.013944][T19627] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1113.026843][T19627] Node 0 DMA32: 1446*4kB (UME) 327*8kB (ME) 577*16kB (UME) 714*32kB (UME) 372*64kB (UME) 230*128kB (UME) 83*256kB (UME) 52*512kB (UME) 33*1024kB (UM) 11*2048kB (UM) 282*4096kB (UM) = 1352992kB [ 1113.051216][T19627] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1113.083452][T19627] Node 1 Normal: 181*4kB (UME) 45*8kB (UME) 47*16kB (UME) 186*32kB (UME) 53*64kB (UM) 14*128kB (UE) 0*256kB 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3902636kB [ 1113.106859][T19627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1113.125331][T19627] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1113.135570][T19627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1113.171127][T19627] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1113.181097][T19627] 64439 total pagecache pages [ 1113.186392][T19627] 1 pages in swap cache [ 1113.190980][T19627] Free swap = 124708kB [ 1113.195599][T19627] Total swap = 124996kB [ 1113.199803][T19627] 2097051 pages RAM [ 1113.203774][T19627] 0 pages HighMem/MovableOnly [ 1113.209246][T19627] 416137 pages reserved [ 1113.213510][T19627] 0 pages cma reserved [ 1113.301913][T19629] 9pnet_fd: Insufficient options for proto=fd [ 1113.331253][ T27] audit: type=1326 audit(1758335349.755:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19630 comm="syz.7.3005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e18ec29 code=0x0 [ 1113.445880][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1113.525404][T19636] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3008'. [ 1113.564799][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1113.708968][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.828935][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.595630][T12913] Bluetooth: hci2: command tx timeout [ 1115.469145][ T12] bond0 (unregistering): Released all slaves [ 1115.607833][T12734] smc: removing ib device sz1 [ 1115.672989][T15036] lo speed is unknown, defaulting to 1000 [ 1115.711341][T19650] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1115.750530][T19545] team0: Port device team_slave_0 added [ 1115.767932][T19545] team0: Port device team_slave_1 added [ 1116.251439][T19545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.259896][T19545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.312940][T19545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.370041][T19545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.404265][T19545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.462399][T19545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.577634][T12913] Bluetooth: hci2: command tx timeout [ 1116.783582][T19545] hsr_slave_0: entered promiscuous mode [ 1116.819318][T19545] hsr_slave_1: entered promiscuous mode [ 1116.881911][T19545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1116.889606][T19545] Cannot create hsr debugfs directory [ 1117.490342][ T12] IPVS: stop unused estimator thread 0... [ 1118.990579][T19545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1119.007556][T19545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1119.038744][T19545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1119.057950][T19545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1119.272102][T19545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.300722][T19545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.322616][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.329868][T12711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.351932][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.359171][T12711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.729502][T19545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.800359][T19545] veth0_vlan: entered promiscuous mode [ 1119.814796][T19545] veth1_vlan: entered promiscuous mode [ 1119.871370][T19545] veth0_macvtap: entered promiscuous mode [ 1119.889693][T19545] veth1_macvtap: entered promiscuous mode [ 1119.921694][T19545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.934429][T19545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.945241][T19545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.956232][T19545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.969483][T19545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.983251][T19545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.995341][T19545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.014726][T19545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.026220][T19545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.038364][T19545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.060808][T19545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.070269][T19545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.083845][T19545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.095144][T19545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.257353][T12734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.283905][T12734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.316541][T12734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.338167][T12734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.497419][T19726] loop0: detected capacity change from 0 to 256 [ 1120.514046][T19726] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1120.534941][T19726] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1120.584051][T19726] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1121.928078][T19777] loop0: detected capacity change from 0 to 8 [ 1121.998592][T19777] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1122.020868][T19777] SQUASHFS error: Failed to read block 0x4de: -5 [ 1122.039760][T19777] SQUASHFS error: Failed to read block 0x4de: -5 [ 1122.056364][T19777] SQUASHFS error: Failed to read block 0x4de: -5 [ 1122.088384][ T27] audit: type=1800 audit(1758335358.952:128): pid=19777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3064" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1122.315013][T12913] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1123.220727][T19813] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3078'. [ 1123.307357][T19818] Bluetooth: MGMT ver 1.22 [ 1123.489142][T19825] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3086'. [ 1125.188092][ T5795] Bluetooth: hci0: command tx timeout [ 1125.221341][T19848] loop0: detected capacity change from 0 to 32768 [ 1125.264084][T12913] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1125.282742][T19848] loop0: p9 p11 p16 [ 1125.704069][T19881] loop0: detected capacity change from 0 to 64 [ 1125.984171][T19655] udevd[19655]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 1125.997167][T19656] udevd[19656]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 1126.068501][T19893] udevd[19893]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 1127.169420][T12913] Bluetooth: hci0: command tx timeout [ 1127.954811][T19947] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3137'. [ 1128.346979][T19956] syzkaller1: entered promiscuous mode [ 1128.356795][T19956] syzkaller1: entered allmulticast mode [ 1129.287392][T19988] loop0: detected capacity change from 0 to 512 [ 1129.340301][T19988] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.3156: iget: bad i_size value: 38620345925642 [ 1129.377536][T19988] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3156: couldn't read orphan inode 15 (err -117) [ 1129.404762][T19988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.436868][T19988] EXT4-fs (loop0): shut down requested (2) [ 1129.444058][T19988] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1129.508342][T19545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.717674][T20000] loop0: detected capacity change from 0 to 1024 [ 1129.781989][T20000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.860661][T20000] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.964659][ T27] audit: type=1800 audit(1758335367.214:129): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3160" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1130.049118][T20000] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.3160: lblock 0 mapped to illegal pblock 0 (length 6) [ 1130.079970][T20000] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.3160: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1130.116847][ T27] audit: type=1800 audit(1758335367.382:130): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3160" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1130.218245][T19991] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1130.318305][T19545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1130.477742][T20014] net_ratelimit: 245 callbacks suppressed [ 1130.477761][T20014] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1130.491517][T20014] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1130.766630][T20022] loop0: detected capacity change from 0 to 16 [ 1130.798312][T20022] erofs: (device loop0): mounted with root inode @ nid 36. [ 1131.659506][T20051] 9pnet_fd: Insufficient options for proto=fd [ 1132.046967][T20061] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1132.074321][T20061] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1132.099779][T20061] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1132.118754][T20061] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1132.141596][T20061] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1132.158499][T20061] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1132.165897][T20061] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1132.172878][T20061] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1132.179484][T20061] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1132.186626][T20061] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1132.194278][T20061] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1132.201250][T20061] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1132.608676][T20073] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1135.879220][T15060] kernel write not supported for file bpf-prog (pid: 15060 comm: kworker/0:8) [ 1135.913729][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3232'. [ 1138.312532][T20208] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3254'. [ 1138.333406][T20208] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3254'. [ 1138.703334][T19702] kernel write not supported for file bpf-prog (pid: 19702 comm: kworker/1:7) [ 1139.076718][ T968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1139.278691][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.305714][ T968] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1139.332599][ T968] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1139.355179][ T968] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1139.365529][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.382437][ T968] usb 1-1: Product: syz [ 1139.397925][ T968] usb 1-1: Manufacturer: syz [ 1139.409469][ T968] usb 1-1: SerialNumber: syz [ 1139.441292][ T968] usb 1-1: config 0 descriptor?? [ 1139.645646][ T7700] usb 1-1: USB disconnect, device number 8 [ 1140.546776][T20284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1140.556745][T20284] netlink: 'syz.1.3285': attribute type 1 has an invalid length. [ 1140.567511][T20284] netlink: 'syz.1.3285': attribute type 2 has an invalid length. [ 1141.247487][ T968] kernel write not supported for file bpf-prog (pid: 968 comm: kworker/1:2) [ 1141.706768][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1142.752398][T20334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1142.791872][T20334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1147.292191][T20477] loop0: detected capacity change from 0 to 256 [ 1147.358087][T20477] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1147.912022][T20492] loop0: detected capacity change from 0 to 2048 [ 1147.935269][T20492] EXT4-fs: Ignoring removed orlov option [ 1148.003368][T20492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.041025][T20492] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.164655][T20506] 9pnet_fd: Insufficient options for proto=fd [ 1148.479017][T19545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.856478][T20518] loop0: detected capacity change from 0 to 4096 [ 1152.260376][T20574] overlayfs: failed to clone upperpath [ 1154.881695][T20660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3440'. [ 1154.903712][T20660] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.912806][T20660] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.921942][T20660] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.930745][T20660] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.946207][T20662] overlayfs: failed to clone upperpath [ 1154.948628][T20660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3440'. [ 1158.062435][T20721] program syz.0.3464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1159.069552][T20736] loop0: detected capacity change from 0 to 256 [ 1160.264653][T20749] overlayfs: failed to resolve './file0': -2 [ 1162.258536][T20796] netlink: 'syz.7.3494': attribute type 7 has an invalid length. [ 1162.268154][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3494'. [ 1162.461047][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1162.467556][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1164.101955][T20852] syz.7.3518[20852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.102243][T20852] syz.7.3518[20852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.141457][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3519'. [ 1164.164145][T20854] tipc: Started in network mode [ 1164.169514][T20854] tipc: Node identity 7, cluster identity 4711 [ 1164.175723][T20854] tipc: Node number set to 7 [ 1164.942714][ T968] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1165.139042][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 1165.151062][ T968] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.193275][ T968] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1165.219617][ T968] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1165.241571][ T968] usb 1-1: New USB device strings: Mfr=192, Product=2, SerialNumber=3 [ 1165.260602][ T968] usb 1-1: Product: syz [ 1165.275810][ T968] usb 1-1: Manufacturer: syz [ 1165.280478][ T968] usb 1-1: SerialNumber: syz [ 1165.555417][ T968] usb 1-1: USB disconnect, device number 9 [ 1166.438463][T20917] loop0: detected capacity change from 0 to 4096 [ 1167.065280][T20930] overlayfs: failed to clone upperpath [ 1167.479578][T20927] loop0: detected capacity change from 0 to 32768 [ 1167.505643][T20927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3549 (20927) [ 1167.574839][T20927] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1167.610323][T20927] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1167.637427][T20927] BTRFS info (device loop0): using free space tree [ 1167.742858][T20927] BTRFS info (device loop0): enabling ssd optimizations [ 1167.751638][T20927] BTRFS info (device loop0): auto enabling async discard [ 1168.086293][T19545] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1168.436708][T20938] overlayfs: failed to resolve './file0': -2 [ 1168.697659][T20973] io-wq is not configured for unbound workers [ 1169.552131][T21003] overlayfs: failed to clone lowerpath [ 1169.858481][T20996] loop0: detected capacity change from 0 to 32768 [ 1169.880319][T20996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3571 (20996) [ 1169.896128][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1169.953526][T20996] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1169.987896][T20996] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1170.003908][T20996] BTRFS info (device loop0): using free space tree [ 1170.197890][T20996] BTRFS info (device loop0): enabling ssd optimizations [ 1170.241041][T20996] BTRFS info (device loop0): auto enabling async discard [ 1170.716657][T21042] tipc: Enabling of bearer rejected, already enabled [ 1170.882792][T19545] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1174.307465][T12734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.524566][T12734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.828786][T12734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.177131][T12734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.636822][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1175.649817][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1175.666035][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1175.682084][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1175.699343][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1175.727493][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1175.730339][T12734] tipc: Left network mode [ 1175.853731][T21132] lo speed is unknown, defaulting to 1000 [ 1176.051691][T21132] lo speed is unknown, defaulting to 1000 [ 1177.491445][T21132] chnl_net:caif_netlink_parms(): no params data found [ 1177.693854][ T5795] Bluetooth: hci2: command tx timeout [ 1179.334119][T21132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.367744][T21132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.389418][T21132] bridge_slave_0: entered allmulticast mode [ 1179.409729][T21132] bridge_slave_0: entered promiscuous mode [ 1179.447952][T21132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.455146][T21132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.471433][T21132] bridge_slave_1: entered allmulticast mode [ 1179.492274][T21132] bridge_slave_1: entered promiscuous mode [ 1179.684606][ T5795] Bluetooth: hci2: command tx timeout [ 1179.827647][T21132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.866229][T12734] hsr_slave_0: left promiscuous mode [ 1179.884922][T12734] hsr_slave_1: left promiscuous mode [ 1179.906330][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.931834][T12734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.933317][T21215] overlayfs: failed to clone upperpath [ 1179.949715][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.958194][T12734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.968652][T12734] bridge_slave_1: left allmulticast mode [ 1179.976286][T12734] bridge_slave_1: left promiscuous mode [ 1179.983351][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.003544][T12734] bridge_slave_0: left allmulticast mode [ 1180.013383][T12734] bridge_slave_0: left promiscuous mode [ 1180.022741][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.089131][T12734] veth1_macvtap: left promiscuous mode [ 1180.102335][T12734] veth0_macvtap: left promiscuous mode [ 1180.112612][T12734] veth1_vlan: left promiscuous mode [ 1180.122695][T12734] veth0_vlan: left promiscuous mode [ 1180.302628][T21222] overlayfs: failed to clone upperpath [ 1181.741872][ T5795] Bluetooth: hci2: command tx timeout [ 1183.718510][ T5795] Bluetooth: hci2: command tx timeout [ 1183.974949][T12734] team0 (unregistering): Port device team_slave_1 removed [ 1184.141878][T12734] team0 (unregistering): Port device team_slave_0 removed [ 1184.309313][T12734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.514495][T12734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.412032][T12734] bond0 (unregistering): Released all slaves [ 1186.570406][T21132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.621244][T21259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.649562][T21260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.659115][T21260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.757585][T21132] team0: Port device team_slave_0 added [ 1186.841763][T21132] team0: Port device team_slave_1 added [ 1186.965409][T21132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.973332][T21132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.022192][T21132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.064968][T21132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.083408][T21132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.145286][T21132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.322479][T21132] hsr_slave_0: entered promiscuous mode [ 1187.338411][T21132] hsr_slave_1: entered promiscuous mode [ 1187.348419][T21132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1187.361176][T21132] Cannot create hsr debugfs directory [ 1189.299326][T21132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1189.325776][T21132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1189.338094][T21132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1189.358523][T21132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1189.562032][T21132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.592119][T21132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.611113][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.618331][T12737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.652159][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.659422][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.110827][T21338] netlink: 'syz.9.3699': attribute type 4 has an invalid length. [ 1190.331086][T21132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.813030][T21132] veth0_vlan: entered promiscuous mode [ 1190.832032][T21132] veth1_vlan: entered promiscuous mode [ 1190.866130][T21132] veth0_macvtap: entered promiscuous mode [ 1190.878352][T21132] veth1_macvtap: entered promiscuous mode [ 1190.901971][T21132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.912892][T21132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.923243][T21132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.933955][T21132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.945749][T21132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.964194][T21132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.975506][T21132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.986620][T21132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.998800][T21132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.011403][T21132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.027429][T21132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.037175][T21132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.046620][T21132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.056538][T21132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.188038][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.209005][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.296149][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.314899][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.540162][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.563742][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.578429][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.605973][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.629250][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.638582][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.655084][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.672188][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.689137][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.706571][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.734967][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.744492][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.752832][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.760903][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.769080][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.776786][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.784486][T17830] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 1191.818101][T17830] hid-generic 0006:0004:0009.000C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1191.945438][T21382] fido_id[21382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1192.739341][T17830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1192.955814][T17830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.973174][T17830] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1192.993207][T17830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.011571][T17830] usb 5-1: config 0 descriptor?? [ 1193.035215][T17830] pwc: Askey VC010 type 2 USB webcam detected. [ 1193.419794][T17830] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1193.439641][T17830] pwc: recv_control_msg error -32 req 02 val 2700 [ 1193.457101][T17830] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1193.464499][T17830] pwc: recv_control_msg error -32 req 04 val 1000 [ 1193.477927][T17830] pwc: recv_control_msg error -32 req 04 val 1300 [ 1193.505635][T17830] pwc: recv_control_msg error -32 req 04 val 1400 [ 1193.717808][T17830] pwc: recv_control_msg error -71 req 02 val 2100 [ 1193.741518][T17830] pwc: recv_control_msg error -71 req 04 val 1500 [ 1193.758517][T17830] pwc: recv_control_msg error -71 req 02 val 2500 [ 1193.780265][T17830] pwc: recv_control_msg error -71 req 02 val 2400 [ 1193.796297][T17830] pwc: recv_control_msg error -71 req 02 val 2600 [ 1193.810918][T17830] pwc: recv_control_msg error -71 req 02 val 2900 [ 1193.829355][T17830] pwc: recv_control_msg error -71 req 02 val 2800 [ 1193.844681][T17830] pwc: recv_control_msg error -71 req 04 val 1100 [ 1193.868361][T17830] pwc: recv_control_msg error -71 req 04 val 1200 [ 1193.877888][T17830] pwc: Registered as video103. [ 1193.897237][T17830] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 1193.957622][T17830] usb 5-1: USB disconnect, device number 4 [ 1194.615770][T21430] tipc: Enabled bearer , priority 0 [ 1196.181023][T21465] loop4: detected capacity change from 0 to 2048 [ 1197.027972][ T27] audit: type=1326 audit(1758335437.613:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.063041][ T27] audit: type=1326 audit(1758335437.645:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.085883][ T27] audit: type=1326 audit(1758335437.645:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.133145][ T27] audit: type=1326 audit(1758335437.645:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.159971][ T27] audit: type=1326 audit(1758335437.645:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.184923][ T27] audit: type=1326 audit(1758335437.645:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.213957][ T27] audit: type=1326 audit(1758335437.645:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.239174][ T27] audit: type=1326 audit(1758335437.645:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.268850][ T27] audit: type=1326 audit(1758335437.729:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1197.292358][ T27] audit: type=1326 audit(1758335437.729:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.1.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f978ec29 code=0x7ffc0000 [ 1198.129069][T21508] overlayfs: failed to clone upperpath [ 1198.963422][T21529] tipc: Enabling of bearer rejected, already enabled [ 1200.331466][T21567] overlayfs: failed to clone upperpath [ 1200.801357][T21579] overlayfs: failed to clone upperpath [ 1201.414166][T21597] loop4: detected capacity change from 0 to 1024 [ 1201.433462][T21597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1201.450197][T21597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1201.634875][T21608] overlayfs: failed to clone upperpath [ 1201.877233][T21617] overlayfs: failed to clone upperpath [ 1203.784003][ T27] audit: type=1326 audit(1758335444.710:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21662 comm="syz.9.3837" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f488a38ec29 code=0x0 [ 1205.510815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.405757][T21718] overlayfs: failed to clone upperpath [ 1206.736273][T21725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1206.800109][T21725] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1206.966981][T21733] overlayfs: failed to clone upperpath [ 1206.978437][T21733] overlayfs: failed to clone upperpath [ 1208.087089][T21781] overlayfs: failed to clone upperpath [ 1208.180484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.103362][T21916] loop4: detected capacity change from 0 to 256 [ 1215.192471][T21294] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1215.481008][T17830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1215.675075][T17830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.711327][T17830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.738728][T17830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1215.770806][T17830] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1215.786188][T17830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.807024][T17830] usb 5-1: config 0 descriptor?? [ 1216.238581][T21916] loop4: detected capacity change from 0 to 512 [ 1216.377092][T21922] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1216.970564][T21952] overlayfs: failed to clone upperpath [ 1217.917148][T17830] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 1217.958908][T17830] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1218.162769][T17830] usb 5-1: USB disconnect, device number 5 [ 1219.038154][T21976] block device autoloading is deprecated and will be removed. [ 1219.055934][T21975] block device autoloading is deprecated and will be removed. [ 1219.210770][T21981] overlayfs: failed to clone upperpath [ 1219.254460][T21981] overlayfs: failed to clone upperpath [ 1219.477678][T21990] overlayfs: failed to clone upperpath [ 1219.797323][T22003] overlayfs: failed to clone upperpath [ 1219.814945][T22003] overlayfs: failed to clone upperpath [ 1220.164078][ T27] audit: type=1800 audit(1758335461.906:142): pid=21988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3954" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1220.436444][T22016] overlayfs: failed to clone upperpath [ 1220.984546][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1220.991094][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1221.092406][T22029] overlayfs: failed to clone upperpath [ 1221.307303][T22034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3970'. [ 1222.979710][T22065] team0: Port device vlan2 added [ 1223.278264][T22071] loop4: detected capacity change from 0 to 512 [ 1223.668266][T22083] loop4: detected capacity change from 0 to 1024 [ 1223.737774][T21922] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1223.766575][T22089] overlayfs: failed to clone upperpath [ 1223.818738][T22090] overlayfs: failed to clone upperpath [ 1224.300662][T22099] netlink: 'syz.4.3995': attribute type 2 has an invalid length. [ 1225.628569][T22113] IPv6: sit1: Disabled Multicast RS [ 1225.634898][T22113] sit1: entered allmulticast mode [ 1226.342151][T22123] overlayfs: failed to resolve './file0': -2 [ 1226.516832][T22125] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1228.471594][T22146] overlayfs: failed to clone upperpath [ 1229.273361][T22168] 9pnet_fd: Insufficient options for proto=fd [ 1229.913202][T22190] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1229.920253][T22190] overlayfs: failed to set xattr on upper [ 1229.935481][T22190] overlayfs: ...falling back to redirect_dir=nofollow. [ 1229.955183][T22190] overlayfs: ...falling back to index=off. [ 1229.971913][T22190] overlayfs: ...falling back to uuid=null. [ 1230.269891][T22200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4027'. [ 1234.025236][T22304] overlayfs: failed to clone upperpath [ 1235.221633][ T27] audit: type=1326 audit(1758335477.716:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.270534][ T27] audit: type=1326 audit(1758335477.716:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.306533][ T27] audit: type=1326 audit(1758335477.716:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.370865][ T27] audit: type=1326 audit(1758335477.716:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.427981][ T27] audit: type=1326 audit(1758335477.716:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.484146][ T27] audit: type=1326 audit(1758335477.716:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.538232][ T27] audit: type=1326 audit(1758335477.716:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.610308][ T27] audit: type=1326 audit(1758335477.716:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.693391][ T27] audit: type=1326 audit(1758335477.726:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1235.756139][ T27] audit: type=1326 audit(1758335477.726:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22333 comm="syz.4.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b78ec29 code=0x7ffc0000 [ 1243.229388][T22463] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1244.378610][T22481] overlayfs: failed to clone upperpath [ 1244.516205][T22481] overlayfs: failed to clone upperpath [ 1247.554501][T22539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4140'. [ 1252.391456][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1252.439161][T22604] team0: No ports can be present during mode change [ 1259.252401][T22678] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1259.281105][T22678] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1266.264984][T22742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4206'. [ 1267.837844][ T12] ------------[ cut here ]------------ [ 1267.844477][ T12] WARNING: CPU: 0 PID: 12 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.855431][ T12] Modules linked in: [ 1267.859374][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1267.866896][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1267.877109][ T12] Workqueue: phy29 ieee80211_csa_finalize_work [ 1267.883540][ T12] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.890898][ T12] Code: 48 89 df e8 4a ce e9 f7 e9 dc fc ff ff e8 40 83 92 f7 eb 24 e8 39 83 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 28 83 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 1a 83 92 f7 48 8b 7c 24 08 4c 8b 7c [ 1267.910970][ T12] RSP: 0018:ffffc900001179c0 EFLAGS: 00010293 [ 1267.917100][ T12] RAX: ffffffff89f3107e RBX: 0000000000000001 RCX: ffff88801ba4da00 [ 1267.925579][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1267.934842][ C0] ------------[ cut here ]------------ [ 1267.934918][ C0] WARNING: CPU: 0 PID: 12 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1267.934972][ C0] Modules linked in: [ 1267.934990][ C0] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1267.935013][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1267.935029][ C0] Workqueue: phy29 ieee80211_csa_finalize_work [ 1267.935055][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1267.935089][ C0] Code: 24 4c 89 e7 e8 8e 4d d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 69 28 97 f7 0f 0b e9 f6 f7 ff ff e8 5d 28 97 f7 <0f> 0b e9 48 fb ff ff e8 51 28 97 f7 48 c7 c7 60 0b 24 8e 4c 89 e6 [ 1267.935109][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1267.935132][ C0] RAX: ffffffff89ee6f43 RBX: ffffffff89ee5d46 RCX: ffff88801ba4da00 [ 1267.935150][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.935164][ C0] RBP: 0000000000000000 R08: ffff88801ba4da00 R09: 0000000000000003 [ 1267.935178][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802f73a3c0 [ 1267.935194][ C0] R13: dffffc0000000000 R14: ffff88802f73a8b0 R15: ffff88805aafe024 [ 1267.935212][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1267.935232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1267.935247][ C0] CR2: 000000110c325c0d CR3: 0000000024a4a000 CR4: 00000000003506f0 [ 1267.935269][ C0] Call Trace: [ 1267.935279][ C0] [ 1267.935293][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1267.935341][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1267.935382][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1267.935440][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1267.935478][ C0] __iterate_interfaces+0x243/0x500 [ 1267.935505][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1267.935534][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1267.935566][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1267.935595][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1267.935629][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1267.935659][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1267.935693][ C0] ? hw_scan_work+0xf40/0xf40 [ 1267.935727][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1267.935752][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1267.935788][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1267.935816][ C0] handle_softirqs+0x280/0x820 [ 1267.935843][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1267.935871][ C0] ? do_softirq+0x180/0x180 [ 1267.935896][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1267.935929][ C0] __irq_exit_rcu+0xc7/0x190 [ 1267.935951][ C0] ? irq_exit_rcu+0x20/0x20 [ 1267.935982][ C0] irq_exit_rcu+0x9/0x20 [ 1267.936000][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1267.936035][ C0] [ 1267.936044][ C0] [ 1267.936055][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1267.936080][ C0] RIP: 0010:console_flush_all+0x889/0xd00 [ 1267.936109][ C0] Code: ed 01 00 00 e8 e8 31 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 d9 31 1b 00 eb 06 e8 d2 31 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1267.936130][ C0] RSP: 0018:ffffc90000117340 EFLAGS: 00000293 [ 1267.936152][ C0] RAX: ffffffff816a65ce RBX: ffffc900001174df RCX: ffff88801ba4da00 [ 1267.936168][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.936180][ C0] RBP: ffffc900001174b0 R08: ffffffff90da7507 R09: 1ffffffff21b4ea0 [ 1267.936196][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: ffffffff8d4b57a0 [ 1267.936223][ C0] R13: 1ffffffff19792f8 R14: ffffffff8d4b57f8 R15: dffffc0000000000 [ 1267.936248][ C0] ? console_flush_all+0x87e/0xd00 [ 1267.936287][ C0] ? console_flush_all+0x10f/0xd00 [ 1267.936329][ C0] ? is_console_locked+0x20/0x20 [ 1267.936356][ C0] ? lock_chain_count+0x20/0x20 [ 1267.936385][ C0] ? __down_trylock_console_sem+0xef/0x1e0 [ 1267.936433][ C0] console_unlock+0xae/0x340 [ 1267.936464][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1267.936488][ C0] ? vprintk_emit+0x521/0x600 [ 1267.936517][ C0] ? printk_sprint+0x460/0x460 [ 1267.936545][ C0] ? __wake_up_klogd+0xd9/0x100 [ 1267.936576][ C0] vprintk_emit+0x477/0x600 [ 1267.936606][ C0] ? printk_sprint+0x460/0x460 [ 1267.936632][ C0] ? _printk+0xd0/0x110 [ 1267.936654][ C0] ? copy_from_kernel_nofault+0x1d2/0x320 [ 1267.936698][ C0] _printk+0xd0/0x110 [ 1267.936721][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 1267.936761][ C0] ? load_image+0x3b0/0x3b0 [ 1267.936798][ C0] __show_regs+0x159/0x610 [ 1267.936834][ C0] ? dump_stack_print_info+0xf5/0x150 [ 1267.936866][ C0] show_regs+0x44/0x90 [ 1267.936896][ C0] __warn+0x160/0x470 [ 1267.936927][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.936964][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.936999][ C0] report_bug+0x2be/0x4f0 [ 1267.937028][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.937064][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.937098][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1267.937133][ C0] handle_bug+0xcf/0x120 [ 1267.937162][ C0] exc_invalid_op+0x1a/0x50 [ 1267.937192][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1267.937213][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.937249][ C0] Code: 48 89 df e8 4a ce e9 f7 e9 dc fc ff ff e8 40 83 92 f7 eb 24 e8 39 83 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 28 83 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 1a 83 92 f7 48 8b 7c 24 08 4c 8b 7c [ 1267.937270][ C0] RSP: 0018:ffffc900001179c0 EFLAGS: 00010293 [ 1267.937291][ C0] RAX: ffffffff89f3107e RBX: 0000000000000001 RCX: ffff88801ba4da00 [ 1267.937307][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1267.937322][ C0] RBP: dffffc0000000000 R08: ffff88802f7395af R09: 1ffff11005ee72b5 [ 1267.937339][ C0] R10: dffffc0000000000 R11: ffffed1005ee72b6 R12: 0000000000000001 [ 1267.937355][ C0] R13: ffff88802f73a5d9 R14: ffff88805165ac70 R15: ffff88805165ace8 [ 1267.937381][ C0] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1267.937448][ C0] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1267.937490][ C0] ieee80211_csa_finalize+0x59a/0xf00 [ 1267.937515][ C0] ? mutex_lock_nested+0x20/0x20 [ 1267.937549][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1267.937576][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1267.937601][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1267.937636][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 1267.937663][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1267.937692][ C0] process_scheduled_works+0xa45/0x15b0 [ 1267.937752][ C0] ? assign_work+0x400/0x400 [ 1267.937788][ C0] ? assign_work+0x39e/0x400 [ 1267.937822][ C0] worker_thread+0xa55/0xfc0 [ 1267.937882][ C0] kthread+0x2fa/0x390 [ 1267.937904][ C0] ? pr_cont_work+0x560/0x560 [ 1267.937932][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1267.937955][ C0] ret_from_fork+0x48/0x80 [ 1267.937981][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1267.938004][ C0] ret_from_fork_asm+0x11/0x20 [ 1267.938052][ C0] [ 1267.938064][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1267.938076][ C0] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1267.938098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1267.938112][ C0] Workqueue: phy29 ieee80211_csa_finalize_work [ 1267.938133][ C0] Call Trace: [ 1267.938142][ C0] [ 1267.938150][ C0] dump_stack_lvl+0x16c/0x230 [ 1267.938180][ C0] ? show_regs_print_info+0x20/0x20 [ 1267.938207][ C0] ? load_image+0x3b0/0x3b0 [ 1267.938242][ C0] panic+0x2c0/0x710 [ 1267.938280][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1267.938322][ C0] ? ret_from_fork_asm+0x11/0x20 [ 1267.938356][ C0] __warn+0x2e0/0x470 [ 1267.938386][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1267.938430][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1267.938463][ C0] report_bug+0x2be/0x4f0 [ 1267.938488][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1267.938522][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1267.938556][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 1267.938587][ C0] handle_bug+0xcf/0x120 [ 1267.938615][ C0] exc_invalid_op+0x1a/0x50 [ 1267.938640][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1267.938658][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1267.938692][ C0] Code: 24 4c 89 e7 e8 8e 4d d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 69 28 97 f7 0f 0b e9 f6 f7 ff ff e8 5d 28 97 f7 <0f> 0b e9 48 fb ff ff e8 51 28 97 f7 48 c7 c7 60 0b 24 8e 4c 89 e6 [ 1267.938708][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1267.938726][ C0] RAX: ffffffff89ee6f43 RBX: ffffffff89ee5d46 RCX: ffff88801ba4da00 [ 1267.938741][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.938754][ C0] RBP: 0000000000000000 R08: ffff88801ba4da00 R09: 0000000000000003 [ 1267.938768][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802f73a3c0 [ 1267.938782][ C0] R13: dffffc0000000000 R14: ffff88802f73a8b0 R15: ffff88805aafe024 [ 1267.938802][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1267.938837][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1267.938877][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1267.938909][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1267.938949][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1267.938987][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1267.939032][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1267.939070][ C0] __iterate_interfaces+0x243/0x500 [ 1267.939098][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1267.939126][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1267.939155][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1267.939180][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1267.939210][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1267.939237][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1267.939268][ C0] ? hw_scan_work+0xf40/0xf40 [ 1267.939301][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1267.939324][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1267.939361][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1267.939389][ C0] handle_softirqs+0x280/0x820 [ 1267.939424][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1267.939451][ C0] ? do_softirq+0x180/0x180 [ 1267.939476][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1267.939507][ C0] __irq_exit_rcu+0xc7/0x190 [ 1267.939528][ C0] ? irq_exit_rcu+0x20/0x20 [ 1267.939558][ C0] irq_exit_rcu+0x9/0x20 [ 1267.939576][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1267.939608][ C0] [ 1267.939615][ C0] [ 1267.939624][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1267.939646][ C0] RIP: 0010:console_flush_all+0x889/0xd00 [ 1267.939674][ C0] Code: ed 01 00 00 e8 e8 31 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 d9 31 1b 00 eb 06 e8 d2 31 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1267.939693][ C0] RSP: 0018:ffffc90000117340 EFLAGS: 00000293 [ 1267.939712][ C0] RAX: ffffffff816a65ce RBX: ffffc900001174df RCX: ffff88801ba4da00 [ 1267.939729][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.939743][ C0] RBP: ffffc900001174b0 R08: ffffffff90da7507 R09: 1ffffffff21b4ea0 [ 1267.939759][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: ffffffff8d4b57a0 [ 1267.939775][ C0] R13: 1ffffffff19792f8 R14: ffffffff8d4b57f8 R15: dffffc0000000000 [ 1267.939800][ C0] ? console_flush_all+0x87e/0xd00 [ 1267.939840][ C0] ? console_flush_all+0x10f/0xd00 [ 1267.939881][ C0] ? is_console_locked+0x20/0x20 [ 1267.939908][ C0] ? lock_chain_count+0x20/0x20 [ 1267.939936][ C0] ? __down_trylock_console_sem+0xef/0x1e0 [ 1267.939966][ C0] console_unlock+0xae/0x340 [ 1267.939994][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1267.940017][ C0] ? vprintk_emit+0x521/0x600 [ 1267.940042][ C0] ? printk_sprint+0x460/0x460 [ 1267.940068][ C0] ? __wake_up_klogd+0xd9/0x100 [ 1267.940094][ C0] vprintk_emit+0x477/0x600 [ 1267.940123][ C0] ? printk_sprint+0x460/0x460 [ 1267.940149][ C0] ? _printk+0xd0/0x110 [ 1267.940169][ C0] ? copy_from_kernel_nofault+0x1d2/0x320 [ 1267.940211][ C0] _printk+0xd0/0x110 [ 1267.940233][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 1267.940270][ C0] ? load_image+0x3b0/0x3b0 [ 1267.940308][ C0] __show_regs+0x159/0x610 [ 1267.940342][ C0] ? dump_stack_print_info+0xf5/0x150 [ 1267.940373][ C0] show_regs+0x44/0x90 [ 1267.940400][ C0] __warn+0x160/0x470 [ 1267.940439][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.940475][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.940507][ C0] report_bug+0x2be/0x4f0 [ 1267.940533][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.940566][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.940598][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1267.940632][ C0] handle_bug+0xcf/0x120 [ 1267.940659][ C0] exc_invalid_op+0x1a/0x50 [ 1267.940687][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1267.940706][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1267.940741][ C0] Code: 48 89 df e8 4a ce e9 f7 e9 dc fc ff ff e8 40 83 92 f7 eb 24 e8 39 83 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 28 83 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 1a 83 92 f7 48 8b 7c 24 08 4c 8b 7c [ 1267.940759][ C0] RSP: 0018:ffffc900001179c0 EFLAGS: 00010293 [ 1267.940779][ C0] RAX: ffffffff89f3107e RBX: 0000000000000001 RCX: ffff88801ba4da00 [ 1267.940796][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1267.940808][ C0] RBP: dffffc0000000000 R08: ffff88802f7395af R09: 1ffff11005ee72b5 [ 1267.940824][ C0] R10: dffffc0000000000 R11: ffffed1005ee72b6 R12: 0000000000000001 [ 1267.940840][ C0] R13: ffff88802f73a5d9 R14: ffff88805165ac70 R15: ffff88805165ace8 [ 1267.940865][ C0] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1267.940921][ C0] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1267.940960][ C0] ieee80211_csa_finalize+0x59a/0xf00 [ 1267.940983][ C0] ? mutex_lock_nested+0x20/0x20 [ 1267.941014][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1267.941038][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1267.941062][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1267.941095][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 1267.941119][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1267.941146][ C0] process_scheduled_works+0xa45/0x15b0 [ 1267.941204][ C0] ? assign_work+0x400/0x400 [ 1267.941237][ C0] ? assign_work+0x39e/0x400 [ 1267.941269][ C0] worker_thread+0xa55/0xfc0 [ 1267.941325][ C0] kthread+0x2fa/0x390 [ 1267.941344][ C0] ? pr_cont_work+0x560/0x560 [ 1267.941371][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1267.941392][ C0] ret_from_fork+0x48/0x80 [ 1267.941426][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1267.941447][ C0] ret_from_fork_asm+0x11/0x20 [ 1267.941493][ C0] [ 1267.941761][ C0] Kernel Offset: disabled