last executing test programs: 5m41.386850507s ago: executing program 3 (id=87): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002cfbe4dfc52d07fe6b9670e93117085d789a4c3b76a7c8b3d273fd5392199ca0f5b52546f6050830f5a3ad42abe1a3b5b20f6e31132b03caec94aad2851bd2e7926212"], 0x1, 0xdab, &(0x7f0000000e80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r1, r2, 0x0, 0xfffe82) syz_usb_connect$uac3(0x5, 0x86, &(0x7f0000000680)=ANY=[@ANYBLOB="1201100100000008392ad23f4000010203010902"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80086e8a, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x0, 0xfa00, {0x0}}, 0xfdb6) 5m38.598262619s ago: executing program 3 (id=95): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd84, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) 5m38.207366044s ago: executing program 3 (id=97): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 5m38.106901995s ago: executing program 3 (id=99): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$eJzs3EtvG1UUAOBrO30/iBALdh2pQiRSbdVpUsEuQCseIlXEY8GqOLZjubU9Uew4ISsELBEL/gkCiRUSG34DC9bsEAsQO6SgeaQQ0hYiO3HSfp80PjN3rs/cM7JaHU/kADy1pqM/fiuEy+FcCKEUQrhYCOl+Id9Si1l4PoRwJYRQ/MdWyMcfDJwOIZwPIVxOkofwfT+bk5z68trw6sKvb/3+3Y9npi589e1Pk6samLQXQgjdtWx/s5vFuJXFe/l4bdhOY3d+mMfsRPd+fhxncbO5kmbYrO3Oq6XxRiubH69t9JO42qnVk9hqr6bja73sgv1hazdP+oZ7tfX0uNFcSWO7H6extZ2ta2s7+/dyuz/I8jTyfB+l6cNgsBuz8eZWM6tn7X4a671BPp7ljRvNrSQO85hfLtTjTiNdx8ood/p4e7vd29iKhs31fjvuRQuV6kuV6s1ydT1uNAfN+XKt27g5H820Osm08ot3a93FVhy3Os1KPe7ORjOter1crUYzt5or7VovqlYrNyrXywuz+d616PU770edRjSTxFfbvY3T7U4/Wo3Xo+wds9Fc5cbLs9HVavTu0nK0/M7t20vL79299cGdV5befC2ftG9Z0czc9bm5cvV6ea46e4T1D5oPrz/5f/d/1j8Ypf7P8kUfoP7CaLcHHs8HDODA9vX/Ybz9fyno/4H9Tmz/v7Ozs5PXMLb+P2mpHtv/nx3lVh9rB+p/i4/ofw/Q/4/U/x7X/v8E1w8j0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy1fj719RvpznR2fCEfv5QPPZsfF0IIxRDCzkOUwuk9OUt5nlOPmH/qX2v4oRDSDMk1zuTb+RDCYr79+cxh3wUAAAB4cn3z8ZUvsm49e5me9II4StnXMMWLH44pXyHJOf3LmLIVk5fnxpQs/XxPha0xZUvv3NkxJcu+cpsKIXxyZlwp/0tpN3x66e/BtKBCFopHtRIAAODolPaEqYmuBQAAgMP0+aQXwGQUwoOHwLt/wJ8/gMwfbZ7bcw4AAAA4gQqTXgAAAABw6NL+3+//AQAAwJMt+/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Yud+btQGojgAPxsM5J+CotzTSm5QRkrIMUeggDRBCaSFNEAN5JZ7LhGssEdI3gVptYzXAn2fZJux0W9mgMsbCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06U+1mf9afPkZi+ty9ofr5JoPAAAA8NSu2szrF9Om/S6d/5BOfUrtIiLKiDhXuw9i1MocpJzqwvurR2P4HVEnHPsYp+1tRHxN2/+PXX8KAAAAcL+2q/Wsqdab3bTvAfGamkWb8v23THlFRFTTv5nSyuPuc6aw+vc9jB+Z0uoFrEmmsGbJbXj+2ihXJ22D1iHNZLKsv8S6VXbTLwAA0Kd2JXChCgEAAOAOfO97APSjOO1O9xnHzSHdEHzTagEAAAA3qOh7AAAAAEDn6vr/Fp7/98/fEgAAAODFmuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVdtZlvV+vZpevLZ+bsD9fJNyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAf25x4FQBiMAein+LtJ739TByWiY1en96AQEkopAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM/wnhq/8DRHVU1pE+bUraqWTAlrpoQtc8KeC63zyHn9+SUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GN+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnfvnbaMMAwD++Oxz/wAiBJQhgIrEAAtN3NLSEQZQxMBHQIpSp4S6FNoMNIpAWWBCmbsgGBFCAoWt36FzI3UpW4cMQWIG3fkuubYuNYXcueT3k16/j32Xe5/3fIny5D0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDSzjvxUlLE7exhahiXr93aXV/K+u37+syNzduzWcvi1qMG+vrt/z75yfZy9cmJmcqTL+tPBgAAgMOhXdb3EXEn3VrI+mQqr//Tcp+s5v/umWFc1vP31/3bu+tHi02zZf3/6y93X9gbaGo4TnbQ5ZVBf/7BVDoHNMWJ9+wj9+jkZz7/20s7f0OS9zee30nz89n65ubNd7t5eKSObAGAx3Gy7LPg6P7vQ1nfazg3AA6HTqXwLuv/9lSzOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYWcjnirjVkTMdvbjzPbu+tKo/sbm7dmynb1+fbN6zOwQaUQsrwz6aY1zmXRXr61dXBwM+ldGBhEP3fTvgxMRcTBHfkgQIzZ9OMaXR/z9PsXlGfXMYu3iYmf8nVv1nd6JDZLi/Sle6dZ71R1skF17x8b6Xv6nQUM/kAAA+N9Ki5bV9XfSrYXstdZ0xJ/f31v/v1aJY8z6/+5HZ29Vx6rW/73aZjj55lYvfTp39draGyuXFi/0L/Q/efNU763e6XNnzpyby87V/NxyJP35ptMEAADgCdYtWrX+T6YfXP8/XoljzPr/s297X1THaqv/R9pf9Gs6EwAAgMOouxc998ofv7dG7NHqduPzxdXVK73h497zU8PHWtN9TEeKVq3/29NNZwUAAADUYWejdc/6//lKHGOu/z/9w4s/VY/ZHn5O9nJE9E8uXR6cr286E62ODyrnA3WbnikAAABNOVa06vp/mt//n+zd8pBExOuvDuPy/6yNU/+33/vqx+pY1fv/T9c3xYmUzAzPR97PRHRmms4IAACAJ9G4S71Hi5YV+7+lWwsf/3z8g677/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq9lcAAAD//+NqOL0=") r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) ptrace$cont(0x9, r0, 0xba, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 5m37.348001324s ago: executing program 3 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x20000801) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r2, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40810) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x80000) 5m36.474932134s ago: executing program 3 (id=109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1}, 0x1800000}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 5m36.409374445s ago: executing program 32 (id=109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1}, 0x1800000}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 5m13.945259076s ago: executing program 1 (id=238): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), 0x0}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 5m13.741716319s ago: executing program 1 (id=239): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x8, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 5m12.72222375s ago: executing program 1 (id=248): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) syz_emit_ethernet(0x66, &(0x7f0000000500)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x2, '\x00', {0x2, 0x6, "e493ad", 0x94f, 0x2f, 0xff, @rand_addr=' \x01\x00', @loopback}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de95d40305bdfc3621e2fe6ff27e203fd7b457202dc0078c6f14ce3", 0x28}], 0x2}, 0x200440c4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x1, 0xcf, &(0x7f00000003c0)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x33) 5m12.324201195s ago: executing program 1 (id=251): syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 5m11.398738266s ago: executing program 1 (id=256): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x3, 0x2}, 0x14) 5m10.836220323s ago: executing program 1 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) 5m10.402001468s ago: executing program 33 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) 4m43.411174542s ago: executing program 0 (id=401): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000280)="0f", 0x1) splice(r1, 0x0, r3, 0x0, 0x25a5, 0x0) 4m42.910724858s ago: executing program 0 (id=404): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x1ff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) 4m42.660212961s ago: executing program 0 (id=408): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="eb", 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) clock_gettime(0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 4m42.486115483s ago: executing program 0 (id=410): r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = fanotify_init(0x40, 0x40000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x0) 4m42.225669926s ago: executing program 0 (id=415): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xaa02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4cff"], 0x4c}}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m40.430529247s ago: executing program 0 (id=421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4m40.15052397s ago: executing program 34 (id=421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m28.397950522s ago: executing program 6 (id=686): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 3m26.603479263s ago: executing program 6 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b", 0x6a) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3m23.852185355s ago: executing program 6 (id=701): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) recvfrom$inet6(r2, &(0x7f0000000440)=""/126, 0x7e, 0x40000000, 0x0, 0x0) 3m23.765513756s ago: executing program 6 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) 3m23.4839486s ago: executing program 6 (id=709): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@ipv4_delroute={0xe0, 0x19, 0x200, 0x70bd2d, 0x25dfdbfd, {0x2, 0x80, 0x14, 0x44, 0xfd, 0x2, 0xfd, 0x9, 0x3400}, [@RTA_UID={0x8, 0x19, 0xee00}, @RTA_METRICS={0x8b, 0x8, 0x0, 0x1, "fe7b4535eaa39509542c7792925497be55f4d488543c315030844278a6ec0ac9e69a14f270625b2bfaa18e1284ee75864be0640fb8560e57cbabb3bfea3915a37c63b633225a67a3cf42155a77a42f5de33fb3a1d3771e3103e4f32a1e21b76d687df7c31afdc455563496d48ac698f3edd6d4e35c9ca8838a88936a78976d13bd8b382c00e0e7"}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @RTA_IIF={0x8, 0x3, r3}, @RTA_TABLE={0x8, 0xf, 0x7}, @RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0xac1e0001}}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x13}, 0x18) 3m21.322428715s ago: executing program 6 (id=722): r0 = io_uring_setup(0x7876, &(0x7f0000000180)={0x0, 0xaefa, 0x2, 0x1, 0xfffffffe}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001fc0)={0x2020}, 0x2020) write$P9_RSYMLINK(r3, &(0x7f0000000380)={0x14, 0x11, 0x1, {0x20, 0x4, 0x1}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 3m21.108288687s ago: executing program 35 (id=722): r0 = io_uring_setup(0x7876, &(0x7f0000000180)={0x0, 0xaefa, 0x2, 0x1, 0xfffffffe}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001fc0)={0x2020}, 0x2020) write$P9_RSYMLINK(r3, &(0x7f0000000380)={0x14, 0x11, 0x1, {0x20, 0x4, 0x1}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.220193071s ago: executing program 5 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 2m52.714744208s ago: executing program 5 (id=863): socket$kcm(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 2m52.475856141s ago: executing program 5 (id=865): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_clone(0x1a04080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m51.371398653s ago: executing program 5 (id=879): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@inlinecrypt}, {@orlov}, {@user_xattr}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 2m50.913187949s ago: executing program 5 (id=873): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) keyctl$revoke(0x3, r1) 2m49.200167599s ago: executing program 5 (id=887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x62) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x7c, 0x2000, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4014) 2m48.899095053s ago: executing program 36 (id=887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x62) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x7c, 0x2000, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4014) 6.068827499s ago: executing program 7 (id=1641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}]}, &(0x7f0000000440)=0x10) 4.551633227s ago: executing program 2 (id=1647): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(0x0, 0x101, 0xab02) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 4.24021818s ago: executing program 7 (id=1651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}, 0x84) 4.130045721s ago: executing program 2 (id=1654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.944789374s ago: executing program 8 (id=1657): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() chmod(&(0x7f0000000080)='./file0\x00', 0x8) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3.159220023s ago: executing program 2 (id=1660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') setns(r2, 0x8000000) io_setup(0x8, &(0x7f0000000340)=0x0) io_submit(r3, 0x1, &(0x7f0000001840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="33f1c5", 0x3}]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x10000, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.148642013s ago: executing program 7 (id=1661): userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r2, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293", 0x4}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 3.116118273s ago: executing program 8 (id=1662): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||/c\x87\x94Y\xa0\x8ez\xadT\xc8\x8c\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [{0x20, ' '}]}, 0xd) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) execveat(r0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1000) 2.980248575s ago: executing program 4 (id=1664): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, r0) r1 = inotify_init1(0x800) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f00000027c0)) inotify_add_watch(r1, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', 0x56000140) setxattr$security_capability(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r2) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) wait4(r0, 0x0, 0xa0000009, 0x0) 2.955895745s ago: executing program 7 (id=1665): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.940987235s ago: executing program 2 (id=1666): add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0045103, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@ax25={{0x3, @null, 0x3}, [@default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000005c0)="0a7ed0b4ac542742be38d6904cb53511a98b34dfc950453acb6ce169bcd9255acb37a2a329a4d64d91b1031f6c76e910f88ce7861037c25056834b494c7d59977c5401010ed993075e01192e60ba844f1440ae50d664e54b0d261d18bbd4ecd37cd570cf7bbd9bf231409910a419ef997dbacb22d3efabd9501b16917217527ccf5fbc1c57b52a5c9f5edac9bb5a1c71ee083d4b90ad3c93a3e84ac58c6f063fe27db09d37fb1f64822c8c963c7377", 0xaf}, {&(0x7f00000000c0)}, {&(0x7f0000000680)="9d420a9c4f0c1ec2ae6e13e251101ba39604b29299601bdcba24c6e424a7f02d2327b94c08679be84131c717f22a624726726a60664c6fc7def4ffe217a19c872232031eeacc167b4bbed67e", 0x4c}, {&(0x7f0000000700)}], 0x4, &(0x7f00000007c0)=[{0x68, 0x115, 0xfffffffe, "9176d29fc7b7ec94d93fd5ef074fcf011a345711616f23dd899adabae7d16e5d085e06ea3bd71c610cb26351a3de84aa0307f421dcbd1cf0a033fccd36d9e88865d7f09a10f4f3319367558063234ce9c418098a20"}], 0x68}}, {{&(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'xfrm0\x00'}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000002c0)="47e37d05080070cb39b91c203dd61dc2f56e0cec92012ed724da01ec38", 0x1d}, {&(0x7f0000000940)="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", 0xe00}], 0x2, &(0x7f0000001b40)=[{0x150, 0x6, 0xb, "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"}, {0x100, 0x112, 0x4, "30a1c9e8c9e906eeb2de8d411af883bf63617f0890ee75e14369e22dbcd0a3057ca89973194b067018c7ebdd7bacc90bd454033c5a2b6fc469e48b8ac7d8cb0c91f033d694abdae0bb6835e03a15382794ca3e4c3dd93d2e65071539b28267774bb26259dfb7579bcd90939345a50fe15d7fce8776311c95e6f9fcd89a8517974338b0bcd7a36123bf49762c4b540215778c57acce2243d1227aa57c15f7fc162009fb7c7d3f7a3dff553586e4cf56e28db503408db20027c9282e767c9dcf0502bf607a9dcee2814edf5846b54f57d741a1cebec121fc550b656c7f3ae016d38409ab1c1fbcd10bf74a31"}], 0x250}}], 0x3, 0x4000081) 2.824138347s ago: executing program 7 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) set_mempolicy(0x5, &(0x7f0000000000)=0x67, 0xb) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x800}}, 0x50) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000004c0)={{}, {0x3}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0xe, {0x1, 0xc, 0x1, '3'}}, 0x1a}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) link(0x0, &(0x7f0000000600)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 2.823756407s ago: executing program 2 (id=1670): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) 2.801470477s ago: executing program 4 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}, 0x84) 2.53165616s ago: executing program 9 (id=1672): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() chmod(&(0x7f0000000080)='./file0\x00', 0x8) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.53088792s ago: executing program 7 (id=1682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4c401}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x400c0) syz_usb_connect(0x2, 0x46, 0x0, 0x0) 1.69072938s ago: executing program 4 (id=1673): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x14000000, 0x0, 0x1, 0x1003, 0xfffffffc, 0x0, 0x0, 0x10, 0xa4801f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r2, r0, 0x0) 1.65158645s ago: executing program 9 (id=1674): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(0x3) syz_mount_image$fuse(&(0x7f0000001000), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3dfdd597659f664340efd00e41f229d540ee393c0e5a18e01cc3e032e4e4d8e9f4f1984e58962ad5ab96a5efd087bf2717203d59298875a40c875c2c34"], 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0x2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x2, 0x4) 1.527498192s ago: executing program 8 (id=1675): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x4, 0x8}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.474196712s ago: executing program 9 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a000000000000000000000003000500000000000200000000000000000000000000000002001000000000000f21d0e2e3c8bed0030006000020000002"], 0x50}}, 0x0) 1.217298765s ago: executing program 8 (id=1677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.148205526s ago: executing program 4 (id=1678): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) 352.571525ms ago: executing program 9 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)=':', 0x1, 0x5fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = fanotify_init(0x0, 0x0) fanotify_init(0x1a, 0x1) inotify_init1(0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001022, r3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 352.244285ms ago: executing program 4 (id=1680): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) capset(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x20, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0081) 265.689936ms ago: executing program 8 (id=1681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 148.079668ms ago: executing program 9 (id=1683): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 95.318608ms ago: executing program 4 (id=1684): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1000000, &(0x7f0000000240)=ANY=[@ANYRES16], 0x1e, 0x1c6, &(0x7f00000006c0)="$eJzKKC4sZmBgYPj7sSaZwYEBDNgY+BhuMzIysDAggBs7hH7FBqH1oPwXUEWaUPFFUPo/FBRXVmUn5uSkFtGQgV2OCepynNqYoQqQpEBcdMVXPsby4zVnCDA4GPCoYSQUUKQw/hOpmBMjnBNzchgYGBkGSYjhZ0ATP2qoxkMTFHWs+DLgPmUZ+HAmicGIKYXg2jcyMbwFp/TrH2uSQYwEaCkFEkuBYiZQCoSqAcXmESQ1UixgzMjM8B+uBlT4gTjqDAwM+iW5BfrFlVW6mbmJ6anpqXlGRsZmBiYGBqZG+mmZOakGEJIRyRmwIgpEg8peULLiRJJnZWBguActYLmQCmOGlxBrYU6DyjMi6wWVw/+h6VRDmQEFMDH85wfr5UCYwchwAK4XlrxBQRDCoAZSxsAG1w0SVQGbwsIA9pIHAyMDM5RjCKs0GOF2cYAl9JLzc1LaGRgZGGHaljOwwM0wfMzACuawIdwIkTG2aIAJtUNpFSjtAaWXg4gLCO/JM6LWRSxgE55AeRoNICdWJJaUFBmynYdqMQR5ECxmxAaTNRKA28wCtfUTG6rnZNgZRsEoGAWjYBSMglEwCoYYAAQAAP//MmxOPQ==") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) 65.448779ms ago: executing program 8 (id=1685): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000010}) epoll_pwait2(r2, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000380)={[0x9fbe]}, 0x8) close_range(r0, r1, 0x0) 37.718669ms ago: executing program 9 (id=1686): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=':::\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 0s ago: executing program 2 (id=1687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) kernel console output (not intermixed with test programs): clearing free space tree [ 134.627503][ T5773] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.640854][ T5773] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.706358][ T5773] BTRFS info (device loop5): creating free space tree [ 134.714132][ T5676] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.738686][ T5773] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.759917][ T5676] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.781619][ T5676] usb 5-1: Manufacturer: syz [ 134.792591][ T5773] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.812639][ T5676] usb 5-1: config 0 descriptor?? [ 135.567942][ T5788] Set syz1 is full, maxelem 6117 reached [ 135.766431][ T7] usb 5-1: USB disconnect, device number 4 [ 136.937588][ T5869] loop0: detected capacity change from 0 to 32768 [ 137.608666][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.358'. [ 137.638184][ T5910] netlink: 14 bytes leftover after parsing attributes in process `syz.5.358'. [ 137.794048][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.840807][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.877450][ T5910] bond0 (unregistering): Released all slaves [ 138.134121][ T5926] netlink: 'syz.0.362': attribute type 4 has an invalid length. [ 138.244859][ T5926] netlink: 'syz.0.362': attribute type 4 has an invalid length. [ 138.490122][ T5939] comedi comedi0: aio_aio12_8: a I/O base address must be specified [ 138.645749][ T5945] tipc: Failed to remove unknown binding: 66,1,1/0:349886976/349886978 [ 138.715119][ T5945] tipc: Failed to remove unknown binding: 66,1,1/0:349886976/349886978 [ 138.736295][ T5949] loop0: detected capacity change from 0 to 128 [ 138.776128][ T5945] tipc: Failed to remove unknown binding: 66,1,1/0:349886976/349886978 [ 139.006582][ T5959] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 139.009950][ T5949] FAT-fs (loop0): Directory bread(block 1412) failed [ 139.051798][ T5964] loop6: detected capacity change from 0 to 128 [ 139.072509][ T5949] FAT-fs (loop0): Directory bread(block 1412) failed [ 139.077323][ T5959] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 139.093738][ T5949] FAT-fs (loop0): Directory bread(block 1412) failed [ 139.133975][ T5964] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 139.147099][ T5949] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000057f) [ 139.152823][ T5959] pit: kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 139.187863][ T5949] FAT-fs (loop0): Filesystem has been set read-only [ 139.573339][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.380'. [ 139.577543][ T5977] binder: BINDER_SET_CONTEXT_MGR already set [ 139.649828][ T5977] binder: 5976:5977 ioctl 4018620d 200000004a80 returned -16 [ 140.697426][ T5993] loop0: detected capacity change from 0 to 256 [ 140.822285][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.384'. [ 140.939000][ T5993] FAT-fs (loop0): Directory bread(block 64) failed [ 140.946202][ T5993] FAT-fs (loop0): Directory bread(block 65) failed [ 140.985695][ T5993] FAT-fs (loop0): Directory bread(block 66) failed [ 141.040472][ T5993] FAT-fs (loop0): Directory bread(block 67) failed [ 141.073578][ T5993] FAT-fs (loop0): Directory bread(block 68) failed [ 141.094651][ T5993] FAT-fs (loop0): Directory bread(block 69) failed [ 141.313899][ T5993] FAT-fs (loop0): Directory bread(block 70) failed [ 141.320904][ T5993] FAT-fs (loop0): Directory bread(block 71) failed [ 141.342930][ T5993] FAT-fs (loop0): Directory bread(block 72) failed [ 141.356918][ T5993] FAT-fs (loop0): Directory bread(block 73) failed [ 142.391075][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 142.635208][ T6035] kvm: pic: non byte write [ 142.922175][ T6040] ODEBUG: Out of memory. ODEBUG disabled [ 143.151656][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 143.659541][ T6057] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 144.756956][ T6096] loop4: detected capacity change from 0 to 1024 [ 144.799494][ T6096] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 144.799494][ T6096] [ 145.557393][ T6109] loop5: detected capacity change from 0 to 2048 [ 145.698401][ T6109] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.712803][ T6109] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.203614][ T6108] loop4: detected capacity change from 0 to 32768 [ 146.323009][ T4292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.490842][ T4292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.568701][ T4292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.674921][ T4292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.704346][ T6127] binder: 6126:6127 ioctl c0306201 2000000003c0 returned -14 [ 146.839009][ T6125] loop5: detected capacity change from 0 to 4096 [ 146.931186][ T6125] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 146.986065][ T6125] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 147.079598][ T6125] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 147.146357][ T6125] ntfs: volume version 3.1. [ 147.371377][ T6125] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 147.426250][ T6125] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 147.584261][ T6153] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 147.646910][ T6156] overlayfs: failed to clone lowerpath [ 147.806291][ T6139] chnl_net:caif_netlink_parms(): no params data found [ 147.843351][ T4397] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 147.896570][ T4397] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 147.964628][ T4671] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 148.211547][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'. [ 148.536561][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.550976][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.553585][ T6177] loop5: detected capacity change from 0 to 128 [ 148.584792][ T6139] device bridge_slave_0 entered promiscuous mode [ 148.670235][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.702094][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.728230][ T6139] device bridge_slave_1 entered promiscuous mode [ 148.779569][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.6.437'. [ 148.880087][ T6174] loop5: detected capacity change from 0 to 2048 [ 148.969688][ T6195] loop2: detected capacity change from 0 to 256 [ 149.093759][ T6197] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.127663][ T6174] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 149.215558][ T6195] exfat: Deprecated parameter 'utf8' [ 149.236516][ T6195] exfat: Deprecated parameter 'utf8' [ 149.241957][ T6195] exfat: Deprecated parameter 'utf8' [ 149.254838][ T6174] Remounting filesystem read-only [ 149.267192][ T4292] device hsr_slave_0 left promiscuous mode [ 149.297514][ T6174] NILFS error (device loop5): nilfs_readdir: bad page in #2 [ 149.310783][ T4292] device hsr_slave_1 left promiscuous mode [ 149.383077][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.409465][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 149.543455][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.709574][ T6195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 150.093985][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.101481][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.210955][ T4292] device bridge_slave_1 left promiscuous mode [ 150.231777][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.318923][ T4292] device bridge_slave_0 left promiscuous mode [ 150.341911][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.396988][ T4292] device veth1_macvtap left promiscuous mode [ 150.420294][ T4292] device veth0_macvtap left promiscuous mode [ 150.426545][ T4292] device veth1_vlan left promiscuous mode [ 150.471819][ T4292] device veth0_vlan left promiscuous mode [ 150.735865][ T6169] loop4: detected capacity change from 0 to 40427 [ 150.827742][ T6169] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 150.876777][ T4292] bond2 (unregistering): Released all slaves [ 150.919461][ T6169] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 150.931115][ T4292] bond1 (unregistering): Released all slaves [ 151.005241][ T6169] F2FS-fs (loop4): invalid crc value [ 151.098063][ T6169] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 151.373603][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 151.426446][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 151.478084][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.560888][ T26] audit: type=1800 audit(1778122830.279:10): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.439" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 151.598759][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.673483][ T5339] Bluetooth: hci4: command 0x041b tx timeout [ 151.702161][ T4292] bond0 (unregistering): Released all slaves [ 151.760766][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.849116][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.962887][ T6139] team0: Port device team_slave_0 added [ 152.039266][ T6139] team0: Port device team_slave_1 added [ 152.136477][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.151070][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.211674][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.228063][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.446'. [ 152.316601][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.329704][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.427423][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.729693][ T6139] device hsr_slave_0 entered promiscuous mode [ 152.738715][ T6139] device hsr_slave_1 entered promiscuous mode [ 152.751856][ T6139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.147142][ T6139] Cannot create hsr debugfs directory [ 153.880946][ T6257] 9pnet: p9_client_clunk (6257): Trying to clunk with invalid fid [ 153.929155][ T5338] Bluetooth: hci4: command 0x040f tx timeout [ 153.941908][ T6257] CPU: 1 PID: 6257 Comm: syz.2.449 Not tainted syzkaller #0 [ 153.949263][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.959541][ T6257] Call Trace: [ 153.962951][ T6257] [ 153.965912][ T6257] dump_stack_lvl+0x188/0x250 [ 153.970939][ T6257] ? __rwlock_init+0x140/0x140 [ 153.976077][ T6257] ? show_regs_print_info+0x20/0x20 [ 153.981291][ T6257] ? load_image+0x400/0x400 [ 153.986192][ T6257] ? v9fs_fid_find+0x2d1/0x320 [ 153.991320][ T6257] p9_client_clunk+0x2b3/0x380 [ 153.996133][ T6257] v9fs_statfs+0x1b7/0x380 [ 154.002476][ T6257] ? slab_free_freelist_hook+0xea/0x170 [ 154.008140][ T6257] ? v9fs_drop_inode+0x130/0x130 [ 154.013260][ T6257] ? rcu_is_watching+0x11/0xa0 [ 154.018143][ T6257] user_statfs+0x1fc/0x5c0 [ 154.022590][ T6257] ? vfs_statfs+0x2c0/0x2c0 [ 154.027212][ T6257] __x64_sys_statfs+0x11d/0x260 [ 154.032334][ T6257] ? fd_statfs+0x390/0x390 [ 154.037163][ T6257] ? __context_tracking_exit+0x4c/0x80 [ 154.043039][ T6257] ? __lock_acquire+0x7d10/0x7d10 [ 154.048207][ T6257] ? lockdep_hardirqs_on+0x94/0x140 [ 154.053786][ T6257] do_syscall_64+0x4c/0xa0 [ 154.058214][ T6257] ? clear_bhb_loop+0x30/0x80 [ 154.062902][ T6257] ? clear_bhb_loop+0x30/0x80 [ 154.067585][ T6257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.073487][ T6257] RIP: 0033:0x7f647d5a7dd9 [ 154.078082][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.097866][ T6257] RSP: 002b:00007f647b801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 154.106419][ T6257] RAX: ffffffffffffffda RBX: 00007f647d820fa0 RCX: 00007f647d5a7dd9 [ 154.114656][ T6257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 154.122718][ T6257] RBP: 00007f647d63dd69 R08: 0000000000000000 R09: 0000000000000000 [ 154.130818][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.138882][ T6257] R13: 00007f647d821038 R14: 00007f647d820fa0 R15: 00007ffedbf5e2a8 [ 154.146876][ T6257] [ 154.756145][ T6139] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.814618][ T6139] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.890078][ T6139] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.993592][ T6139] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 155.225541][ T6299] loop5: detected capacity change from 0 to 16 [ 155.340567][ T6299] erofs: (device loop5): mounted with root inode @ nid 36. [ 155.402751][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.453522][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.515707][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.563029][ T6299] netlink: 3 bytes leftover after parsing attributes in process `syz.5.459'. [ 155.598018][ T6299] 0X: renamed from caif0 [ 155.606354][ T6299] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 155.674891][ T6139] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.707260][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.723429][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.760600][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.767995][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.808543][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.827197][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.850026][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.869511][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.877047][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.941682][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.010977][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.044396][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.116693][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.140636][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.172734][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 156.191566][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.219517][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.256494][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.299982][ T6333] loop5: detected capacity change from 0 to 2048 [ 156.328998][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.346146][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.374761][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.402994][ T6139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.419302][ T6336] device syzkaller0 entered promiscuous mode [ 156.542840][ T6333] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.770942][ T6353] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.464: corrupted inode contents [ 156.876715][ T6353] EXT4-fs error (device loop5): ext4_try_add_inline_entry:1371: inode #12: comm syz.5.464: mark_inode_dirty error [ 156.883713][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.933235][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.933468][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.947580][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.971232][ T6353] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.464: corrupted inode contents [ 157.022651][ T6353] EXT4-fs error (device loop5): ext4_mkdir:3097: inode #12: comm syz.5.464: mark_inode_dirty error [ 157.158971][ T6333] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.464: corrupted inode contents [ 157.266583][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 157.451297][ T21] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 157.457444][ T6371] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 157.475520][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.528706][ T21] usb 5-1: config 0 descriptor?? [ 157.815514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.832070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.841059][ T21] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 157.869346][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.900689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.914096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.933009][ T6139] device veth0_vlan entered promiscuous mode [ 157.939993][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 157.950122][ T21] usb 5-1: media controller created [ 157.956665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.966581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.004413][ T6139] device veth1_vlan entered promiscuous mode [ 158.021155][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.092743][ T6139] device veth0_macvtap entered promiscuous mode [ 158.122382][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.137827][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.155992][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.215184][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.230178][ T21] DVB: Unable to find symbol dib7000p_attach() [ 158.239447][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 158.277947][ T6139] device veth1_macvtap entered promiscuous mode [ 158.308507][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.329075][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.342662][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.473'. [ 158.415350][ T21] rc_core: IR keymap rc-dib0700-rc5 not found [ 158.426731][ T21] Registered IR keymap rc-empty [ 158.432149][ T21] dvb-usb: could not initialize remote control. [ 158.456907][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.473344][ T21] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 158.496115][ T6404] loop2: detected capacity change from 0 to 512 [ 158.505859][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.524068][ T21] usb 5-1: USB disconnect, device number 5 [ 158.549349][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.599707][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.629204][ T6404] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.643494][ T6404] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.676038][ T21] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 158.697694][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.756834][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.771344][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.789025][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.828715][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.840583][ T6404] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.475: corrupted inode contents [ 158.864947][ T6404] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.475: mark_inode_dirty error [ 158.867318][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.888232][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.898478][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.910478][ T6404] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.475: corrupted inode contents [ 158.930687][ T6404] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.475: mark_inode_dirty error [ 158.937323][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.953438][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.966108][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.002694][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.030847][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.046642][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.227336][ T6139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.238123][ T6139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.247952][ T6139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.267971][ T6139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.222022][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 160.367739][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.411355][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.419197][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.734530][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.835757][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.843827][ T4496] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 161.859519][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.206228][ T26] audit: type=1804 audit(1778122840.097:11): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.423" name="/newroot/0/file0" dev="fuse" ino=1 res=1 errno=0 [ 162.242072][ T4496] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.250228][ T4496] usb 7-1: config 0 has no interface number 0 [ 162.301051][ T4496] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.326317][ T26] audit: type=1804 audit(1778122840.125:12): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.423" name="/newroot/0/file0" dev="fuse" ino=1 res=1 errno=0 [ 162.345958][ T4496] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.393249][ T4496] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.430419][ T4496] usb 7-1: config 0 interface 1 has no altsetting 0 [ 162.465055][ T4496] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 162.504900][ T4496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.619235][ T4496] usb 7-1: config 0 descriptor?? [ 163.948004][ T6501] netlink: 'syz.7.495': attribute type 4 has an invalid length. [ 164.019087][ T4496] usbhid 7-1:0.1: can't add hid device: -71 [ 164.025411][ T4496] usbhid: probe of 7-1:0.1 failed with error -71 [ 164.073468][ T4496] usb 7-1: USB disconnect, device number 2 [ 164.701296][ T5678] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 165.363729][ T5678] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.435389][ T5678] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.552728][ T5678] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 165.645435][ T5678] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.787929][ T5678] usb 7-1: config 0 descriptor?? [ 166.611754][ T5678] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 166.642082][ T5678] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 166.649406][ T5678] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x5 [ 166.723288][ T5678] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 166.760405][ T5678] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 166.800951][ T5678] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 166.825274][ T5678] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 166.874700][ T5678] konepure 0003:1E7D:2DBE.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.6-1/input0 [ 166.941089][ T5678] usb 7-1: USB disconnect, device number 3 [ 167.008712][ T6561] loop7: detected capacity change from 0 to 512 [ 167.282786][ T6569] loop5: detected capacity change from 0 to 128 [ 167.321719][ T6561] EXT4-fs (loop7): Ignoring removed oldalloc option [ 167.344813][ T6561] EXT4-fs (loop7): Ignoring removed nobh option [ 167.363648][ T6564] fido_id[6564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 168.194644][ T6569] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 168.251884][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.508: iget: bad extra_isize 90 (inode size 256) [ 168.332596][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.512'. [ 168.351115][ T6569] hpfs: filesystem error: improperly stopped [ 168.419331][ T6569] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 168.427355][ T6569] hpfs: You really don't want any checks? You are crazy... [ 168.451227][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 168.494873][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.508: error while reading EA inode 11 err=-117 [ 168.553226][ T6569] hpfs: hpfs_map_sector(): read error [ 168.558674][ T6569] hpfs: code page support is disabled [ 168.566251][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 168.599381][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.514'. [ 168.612396][ T6569] hpfs: hpfs_map_4sectors(): unaligned read [ 168.626515][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.508: iget: bad extra_isize 90 (inode size 256) [ 168.649790][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.660389][ T6569] hpfs: hpfs_map_4sectors(): unaligned read [ 168.667142][ T6569] hpfs: filesystem error: unable to find root dir [ 168.741817][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 168.806331][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.508: error while reading EA inode 11 err=-117 [ 168.867149][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 168.903109][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #18: comm syz.7.508: iget: bad extra_isize 90 (inode size 256) [ 168.938896][ T6590] capability: warning: `syz.4.516' uses deprecated v2 capabilities in a way that may be insecure [ 168.981268][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 169.022783][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.508: error while reading EA inode 18 err=-117 [ 169.045303][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 169.086683][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #18: comm syz.7.508: iget: bad extra_isize 90 (inode size 256) [ 169.165620][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 169.216821][ T6561] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.508: error while reading EA inode 18 err=-117 [ 169.289161][ T6561] EXT4-fs (loop7): Remounting filesystem read-only [ 169.319274][ T6561] EXT4-fs (loop7): 1 orphan inode deleted [ 169.346773][ T6561] EXT4-fs (loop7): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,errors=remount-ro,nodiscard,grpid,. Quota mode: none. [ 170.618430][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.079135][ T5859] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 171.139741][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 171.675114][ T21] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.684278][ T21] usb 5-1: config 0 has no interface number 0 [ 171.690462][ T21] usb 5-1: config 0 interface 184 has no altsetting 0 [ 171.735086][ T5859] usb 8-1: Using ep0 maxpacket: 8 [ 171.892422][ T5859] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.913993][ T5859] usb 8-1: config 0 has no interfaces? [ 171.920193][ T21] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.951278][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.981566][ T21] usb 5-1: Product: syz [ 171.992481][ T21] usb 5-1: Manufacturer: syz [ 172.009939][ T21] usb 5-1: SerialNumber: syz [ 172.069031][ T21] usb 5-1: config 0 descriptor?? [ 172.147040][ T5859] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 172.157935][ T21] smsc75xx v1.0.0 [ 172.164693][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.189082][ T5859] usb 8-1: Product: syz [ 172.195242][ T5859] usb 8-1: Manufacturer: syz [ 172.200058][ T5859] usb 8-1: SerialNumber: syz [ 172.218012][ T5859] usb 8-1: config 0 descriptor?? [ 172.357639][ T6667] kernel profiling enabled (shift: 9) [ 172.873660][ T21] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 172.939245][ T21] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 173.083272][ T21] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 173.167699][ T21] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 173.282713][ T21] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 173.386745][ T21] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 173.505430][ T21] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 173.971357][ T21] usb 8-1: USB disconnect, device number 2 [ 174.196356][ T5859] usb 5-1: USB disconnect, device number 6 [ 174.372239][ T6686] device syzkaller0 entered promiscuous mode [ 174.852934][ T6710] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 176.582128][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 176.641322][ T6717] loop7: detected capacity change from 0 to 1024 [ 176.665136][ T6718] device team0 entered promiscuous mode [ 176.674572][ T26] audit: type=1804 audit(1778122853.448:13): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.545" name="bus" dev="ramfs" ino=41930 res=1 errno=0 [ 176.730604][ T26] audit: type=1804 audit(1778122853.448:14): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.545" name="bus" dev="ramfs" ino=41930 res=1 errno=0 [ 176.739944][ T6718] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.768120][ T6717] EXT4-fs (loop7): Ignoring removed oldalloc option [ 176.796565][ T6717] EXT4-fs (loop7): inline encryption not supported [ 176.836421][ T6717] EXT4-fs (loop7): Ignoring removed bh option [ 176.841317][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 176.872612][ T6723] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 176.893979][ T6717] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,barrier,commit=0x0000000000000005,journal_ioprio=0x0000000000000000,data_err=ignore,init_itable,oldalloc,inlinecrypt,bh,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: none. [ 177.056024][ T6723] device team1 entered promiscuous mode [ 177.343019][ T6723] 8021q: adding VLAN 0 to HW filter on device team1 [ 178.380763][ T6749] 9pnet: Insufficient options for proto=fd [ 179.643407][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.651011][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.590125][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.631631][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.988828][ T6747] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.002327][ T6747] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.011525][ T6747] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.023507][ T6747] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.134121][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 181.334497][ T6792] loop6: detected capacity change from 0 to 512 [ 181.366834][ T6791] loop4: detected capacity change from 0 to 256 [ 181.458479][ T6792] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.496489][ T6791] FAT-fs (loop4): Directory bread(block 64) failed [ 181.551125][ T6791] FAT-fs (loop4): Directory bread(block 65) failed [ 181.661375][ T6791] FAT-fs (loop4): Directory bread(block 66) failed [ 181.701953][ T6791] FAT-fs (loop4): Directory bread(block 67) failed [ 181.787731][ T6792] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 181.820437][ T6791] FAT-fs (loop4): Directory bread(block 68) failed [ 181.956960][ T6791] FAT-fs (loop4): Directory bread(block 69) failed [ 181.964381][ T6792] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.180629][ T6791] FAT-fs (loop4): Directory bread(block 70) failed [ 182.424911][ T6791] FAT-fs (loop4): Directory bread(block 71) failed [ 182.624432][ T6791] FAT-fs (loop4): Directory bread(block 72) failed [ 182.703521][ T6791] FAT-fs (loop4): Directory bread(block 73) failed [ 183.424500][ T26] audit: type=1800 audit(1778122859.557:15): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.557" name="bus" dev="loop4" ino=1048618 res=0 errno=0 [ 184.748415][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 184.776516][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 184.807789][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.815962][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.829961][ T6844] 9pnet: Insufficient options for proto=fd [ 185.087575][ T5339] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 185.554968][ T5339] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 185.608657][ T5339] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.818584][ T5339] usb 8-1: config 0 descriptor?? [ 185.869847][ T5339] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 187.135927][ T5339] gspca_cpia1: usb_control_msg 03, error -71 [ 187.160159][ T5339] gspca_cpia1: usb_control_msg 01, error -71 [ 187.210529][ T5339] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 187.271912][ T5339] usb 8-1: USB disconnect, device number 3 [ 188.753669][ T6911] netlink: 104 bytes leftover after parsing attributes in process `syz.7.584'. [ 190.557212][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.618973][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.842219][ T6922] APIC base relocation is unsupported by KVM [ 191.035346][ T5339] Bluetooth: hci2: command 0x0406 tx timeout [ 191.047984][ T5339] Bluetooth: hci3: command 0x0406 tx timeout [ 191.100223][ T6886] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.109817][ T6886] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.123158][ T6886] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.132384][ T6886] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.344874][ T6887] bridge_slave_0: default FDB implementation only supports local addresses [ 191.614229][ T6936] netlink: 'syz.5.593': attribute type 1 has an invalid length. [ 191.652336][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.690466][ T6936] bond0: (slave geneve2): making interface the new active one [ 191.701831][ T6936] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 191.721004][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 192.731313][ T6936] syz.5.593 (6936) used greatest stack depth: 19512 bytes left [ 192.897604][ T6948] tipc: Failed to remove unknown binding: 66,1,1/0:2521805055/2521805057 [ 192.943944][ T6948] tipc: Failed to remove unknown binding: 66,1,1/0:2521805055/2521805057 [ 192.982658][ T6948] tipc: Failed to remove unknown binding: 66,1,1/0:2521805055/2521805057 [ 194.975943][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.983456][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.403822][ T6978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.446327][ T6978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.796922][ T6978] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.807056][ T6978] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.816118][ T6978] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.826253][ T6978] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.914781][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.7.603'. [ 195.979595][ T6983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.015099][ T6988] device vlan2 entered promiscuous mode [ 196.262483][ T7001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.270741][ T7001] IPv6: NLM_F_CREATE should be set when creating new route [ 196.278264][ T7001] IPv6: NLM_F_CREATE should be set when creating new route [ 197.703145][ T7025] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 197.755379][ T7012] loop4: detected capacity change from 0 to 512 [ 198.358968][ T7012] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.851294][ T7012] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.864748][ T7012] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.612: Allocating blocks 41-42 which overlap fs metadata [ 198.891877][ T7012] Quota error (device loop4): write_blk: dquota write failed [ 198.899793][ T7012] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 198.909855][ T7012] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.612: Failed to acquire dquot type 0 [ 198.927731][ T7012] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 198.944801][ T7012] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.612: corrupted inode contents [ 198.970927][ T7012] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.612: mark_inode_dirty error [ 198.992729][ T7012] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.612: corrupted inode contents [ 199.006565][ T7012] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.612: mark_inode_dirty error [ 199.020731][ T7012] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.612: corrupted inode contents [ 199.037937][ T7012] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 199.046918][ T7012] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.612: corrupted inode contents [ 199.059330][ T7012] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.612: mark_inode_dirty error [ 199.070986][ T7012] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 199.093635][ T7012] EXT4-fs (loop4): 1 truncate cleaned up [ 199.100108][ T7012] EXT4-fs (loop4): pa ffff8880763edc40: logic 1, phys. 41, len 23 [ 199.108717][ T7012] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 199.120403][ T7012] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 199.221153][ T7038] netlink: 'syz.5.622': attribute type 10 has an invalid length. [ 199.873210][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.879862][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.690571][ T5675] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 201.952402][ T7073] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 201.993970][ T5675] usb 6-1: Using ep0 maxpacket: 8 [ 202.051819][ T7073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.125530][ T7080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.145936][ T5675] usb 6-1: config index 0 descriptor too short (expected 11794, got 18) [ 202.154596][ T5675] usb 6-1: config 205 has too many interfaces: 190, using maximum allowed: 32 [ 202.227801][ T5675] usb 6-1: config 205 has an invalid descriptor of length 85, skipping remainder of the config [ 202.249583][ T7080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.252338][ T5675] usb 6-1: config 205 has 0 interfaces, different from the descriptor's value: 190 [ 202.316829][ T7080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.394800][ T7080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.439597][ T7080] bond2: (slave geneve2): making interface the new active one [ 202.482251][ T5675] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 202.509852][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.532815][ T5675] usb 6-1: Product: syz [ 202.546499][ T5675] usb 6-1: Manufacturer: syz [ 202.557387][ T5675] usb 6-1: SerialNumber: syz [ 202.636873][ T7080] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 202.696810][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 202.911294][ T5675] usb 6-1: USB disconnect, device number 3 [ 206.783172][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.646'. [ 206.908852][ T7132] loop6: detected capacity change from 0 to 512 [ 207.031934][ T7132] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.647: iget: bad i_size value: 38620345925642 [ 207.207439][ T7132] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.647: couldn't read orphan inode 15 (err -117) [ 207.398966][ T7144] binder: 7139:7144 ioctl c0306201 2000000003c0 returned -14 [ 207.409371][ T7132] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 208.887313][ T7135] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 209.414973][ T7166] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 209.849697][ T7168] loop5: detected capacity change from 0 to 128 [ 209.928271][ T7132] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 228 with error 28 [ 209.985637][ T7132] EXT4-fs (loop6): This should not happen!! Data will be lost [ 209.985637][ T7132] [ 210.004267][ T7166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.157344][ T7168] FAT-fs (loop5): Directory bread(block 1412) failed [ 210.186192][ T7132] EXT4-fs (loop6): Total free blocks count 0 [ 210.198006][ T7168] FAT-fs (loop5): Directory bread(block 1412) failed [ 210.236529][ T7132] EXT4-fs (loop6): Free/Dirty block details [ 210.248077][ T7168] FAT-fs (loop5): Directory bread(block 1412) failed [ 210.281257][ T7132] EXT4-fs (loop6): free_blocks=0 [ 210.284400][ T7168] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000057f) [ 210.304404][ T7166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.311591][ T7132] EXT4-fs (loop6): dirty_blocks=228 [ 210.329525][ T7168] FAT-fs (loop5): Filesystem has been set read-only [ 210.361302][ T7166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.376047][ T7132] EXT4-fs (loop6): Block reservation details [ 210.417855][ T7132] EXT4-fs (loop6): i_reserved_data_blocks=228 [ 210.435889][ T7166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.514346][ T7166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.589360][ T7166] bond2: (slave geneve2): making interface the new active one [ 210.647831][ T7166] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 210.709434][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 210.748834][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.659'. [ 210.998009][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'. [ 212.392314][ T7212] binder: 7211:7212 ioctl c0306201 2000000003c0 returned -14 [ 212.517061][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 213.961916][ T26] audit: type=1326 audit(1778122887.856:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f502efe0dd9 code=0x0 [ 213.994413][ T7239] loop6: detected capacity change from 0 to 128 [ 214.066974][ T26] audit: type=1326 audit(1778122887.948:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.181483][ T26] audit: type=1326 audit(1778122887.948:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.277170][ T26] audit: type=1326 audit(1778122888.003:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.286934][ T7235] FAT-fs (loop6): Directory bread(block 1412) failed [ 214.353484][ T7235] FAT-fs (loop6): Directory bread(block 1412) failed [ 214.365426][ T26] audit: type=1326 audit(1778122888.003:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.404609][ T7235] FAT-fs (loop6): Directory bread(block 1412) failed [ 214.426621][ T26] audit: type=1326 audit(1778122888.003:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.470511][ T7235] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000057f) [ 214.487779][ T26] audit: type=1326 audit(1778122888.003:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.492640][ T7235] FAT-fs (loop6): Filesystem has been set read-only [ 214.629304][ T7256] device vlan4 entered promiscuous mode [ 214.678619][ T26] audit: type=1326 audit(1778122888.003:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.751258][ T26] audit: type=1326 audit(1778122888.013:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 214.789363][ T26] audit: type=1326 audit(1778122888.013:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.682" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502efe0dd9 code=0x7ffc0000 [ 217.878894][ T7285] loop5: detected capacity change from 0 to 256 [ 218.168195][ T7285] FAT-fs (loop5): Directory bread(block 64) failed [ 218.216036][ T7285] FAT-fs (loop5): Directory bread(block 65) failed [ 218.275023][ T7285] FAT-fs (loop5): Directory bread(block 66) failed [ 218.320151][ T7285] FAT-fs (loop5): Directory bread(block 67) failed [ 218.343414][ T7285] FAT-fs (loop5): Directory bread(block 68) failed [ 218.390803][ T7285] FAT-fs (loop5): Directory bread(block 69) failed [ 218.418786][ T7285] FAT-fs (loop5): Directory bread(block 70) failed [ 218.461698][ T7285] FAT-fs (loop5): Directory bread(block 71) failed [ 218.501168][ T7285] FAT-fs (loop5): Directory bread(block 72) failed [ 218.534198][ T7285] FAT-fs (loop5): Directory bread(block 73) failed [ 220.293723][ T7302] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.332026][ T7302] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.385126][ T7302] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.387899][ T7321] loop5: detected capacity change from 0 to 32768 [ 220.432291][ T7302] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.552121][ T7321] (syz.5.688,7321,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.572880][ T7321] (syz.5.688,7321,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.619691][ T7321] JBD2: Ignoring recovery information on journal [ 220.646107][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 220.718128][ T7321] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 220.873816][ T7338] loop4: detected capacity change from 0 to 2048 [ 221.001961][ T7338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.897845][ T4671] ocfs2: Unmounting device (7,5) on (node local) [ 222.872357][ T7382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.961140][ T7385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.418034][ T7414] loop5: detected capacity change from 0 to 256 [ 223.614384][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 223.660062][ T7423] overlayfs: failed to clone upperpath [ 223.668651][ T7420] netlink: 'syz.4.712': attribute type 7 has an invalid length. [ 223.695329][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 223.746375][ T7420] device ip6gretap0 entered promiscuous mode [ 223.883273][ T7420] device syz_tun entered promiscuous mode [ 223.934196][ T7420] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 223.999494][ T7420] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 224.957702][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 225.461715][ T7465] fuse: Bad value for 'fd' [ 226.444119][ T7484] chnl_net:caif_netlink_parms(): no params data found [ 227.451025][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.499939][ T7510] netlink: 104 bytes leftover after parsing attributes in process `syz.2.736'. [ 227.512027][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.529088][ T7484] device bridge_slave_0 entered promiscuous mode [ 227.553290][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.571133][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.579678][ T7484] device bridge_slave_1 entered promiscuous mode [ 227.592516][ T7511] netlink: 104 bytes leftover after parsing attributes in process `syz.2.736'. [ 227.657134][ T7484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.693394][ T7484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.744962][ T7514] netlink: 132 bytes leftover after parsing attributes in process `syz.7.737'. [ 227.773025][ T7484] team0: Port device team_slave_0 added [ 227.794460][ T7484] team0: Port device team_slave_1 added [ 227.837889][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.851856][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.903706][ T7484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.930986][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.938881][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.967885][ T7484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.015650][ T7484] device hsr_slave_0 entered promiscuous mode [ 228.023894][ T7484] device hsr_slave_1 entered promiscuous mode [ 228.032093][ T7484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.040453][ T7484] Cannot create hsr debugfs directory [ 228.135279][ T5339] Bluetooth: hci1: command 0x0409 tx timeout [ 228.184619][ T7484] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 228.195598][ T7484] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 228.207253][ T7484] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 228.218506][ T7484] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 228.314213][ T7484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.338810][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 228.389640][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.402603][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.428652][ T7484] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.450278][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.7.748'. [ 228.516214][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.536699][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.565567][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.573027][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.613906][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.630290][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.649913][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.660861][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.668145][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.688462][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.711364][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.734430][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.744388][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.757175][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.768739][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.791222][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.810188][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.843447][ T7484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.855962][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.866056][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.878423][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.147109][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.159211][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.184793][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.547754][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.562697][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.584628][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.596086][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.628780][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.639709][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.670016][ T7484] device veth0_vlan entered promiscuous mode [ 229.692165][ T7484] device veth1_vlan entered promiscuous mode [ 229.709515][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.744211][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.765145][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.788027][ T7484] device veth0_macvtap entered promiscuous mode [ 229.820968][ T7484] device veth1_macvtap entered promiscuous mode [ 229.853523][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.869737][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.889483][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.901532][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.910473][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.919846][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.929201][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.940356][ T7484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.952072][ T7484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.972584][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.984588][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.994344][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.006104][ T7484] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.015948][ T7484] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.025314][ T7484] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.034820][ T7484] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.130019][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.149357][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.173762][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.184569][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.192557][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.201437][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.330719][ T7542] loop8: detected capacity change from 0 to 1024 [ 230.331654][ T7538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.365106][ T7538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.389388][ T5338] Bluetooth: hci1: command 0x041b tx timeout [ 232.507074][ T7540] device bridge_slave_1 left promiscuous mode [ 232.530642][ T7542] EXT4-fs (loop8): Ignoring removed bh option [ 232.550635][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.592870][ T7542] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 232.631351][ T7540] device bridge_slave_0 left promiscuous mode [ 232.643593][ T4496] Bluetooth: hci1: command 0x040f tx timeout [ 232.688113][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.147317][ T7571] loop5: detected capacity change from 0 to 512 [ 233.366166][ T7571] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.749: iget: bad i_size value: 38620345925642 [ 233.402228][ T7583] netlink: 3 bytes leftover after parsing attributes in process `syz.7.753'. [ 233.423141][ T7571] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.749: couldn't read orphan inode 15 (err -117) [ 233.463565][ T7583] 0X: renamed from caif0 [ 233.494571][ T7571] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 233.558000][ T7583] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 233.746892][ T7602] netlink: 399 bytes leftover after parsing attributes in process `syz.2.757'. [ 234.610850][ T7571] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.749: bg 0: block 5: invalid block bitmap [ 234.634997][ T7571] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 716 with error 28 [ 234.655761][ T7571] EXT4-fs (loop5): This should not happen!! Data will be lost [ 234.655761][ T7571] [ 234.666593][ T7571] EXT4-fs (loop5): Total free blocks count 0 [ 234.673100][ T7571] EXT4-fs (loop5): Free/Dirty block details [ 234.681646][ T7571] EXT4-fs (loop5): free_blocks=0 [ 234.686670][ T7571] EXT4-fs (loop5): dirty_blocks=720 [ 234.692309][ T7571] EXT4-fs (loop5): Block reservation details [ 234.698497][ T7571] EXT4-fs (loop5): i_reserved_data_blocks=720 [ 234.901921][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 234.930115][ T4496] Bluetooth: hci1: command 0x0419 tx timeout [ 235.371153][ T7620] lo speed is unknown, defaulting to 1000 [ 235.392490][ T7620] lo speed is unknown, defaulting to 1000 [ 235.403258][ T7620] lo speed is unknown, defaulting to 1000 [ 236.489543][ T7620] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.571051][ T7620] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 236.728141][ T7620] lo speed is unknown, defaulting to 1000 [ 236.756593][ T7620] lo speed is unknown, defaulting to 1000 [ 236.840504][ T7620] lo speed is unknown, defaulting to 1000 [ 236.849173][ T7620] lo speed is unknown, defaulting to 1000 [ 236.855776][ T7620] lo speed is unknown, defaulting to 1000 [ 236.876078][ T7638] netlink: 'syz.5.771': attribute type 27 has an invalid length. [ 236.890957][ T7638] netlink: 'syz.5.771': attribute type 4 has an invalid length. [ 236.911862][ T7638] netlink: 144 bytes leftover after parsing attributes in process `syz.5.771'. [ 236.922529][ T7620] lo speed is unknown, defaulting to 1000 [ 237.281072][ T7652] loop8: detected capacity change from 0 to 512 [ 237.324004][ T7652] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.776: iget: bad i_size value: 38620345925642 [ 237.340780][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 237.357332][ T7652] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.776: couldn't read orphan inode 15 (err -117) [ 237.374299][ T7652] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 237.396211][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 237.396228][ T26] audit: type=1326 audit(1778122909.475:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7fc00000 [ 237.593902][ T7652] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.776: bg 0: block 5: invalid block bitmap [ 237.621353][ T7652] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1156 with error 28 [ 237.641853][ T7652] EXT4-fs (loop8): This should not happen!! Data will be lost [ 237.641853][ T7652] [ 237.656792][ T7652] EXT4-fs (loop8): Total free blocks count 0 [ 237.667093][ T7652] EXT4-fs (loop8): Free/Dirty block details [ 237.685703][ T7652] EXT4-fs (loop8): free_blocks=0 [ 237.693132][ T7652] EXT4-fs (loop8): dirty_blocks=1160 [ 237.703846][ T7652] EXT4-fs (loop8): Block reservation details [ 237.717410][ T7652] EXT4-fs (loop8): i_reserved_data_blocks=1160 [ 240.162263][ T7703] netlink: 'syz.4.788': attribute type 6 has an invalid length. [ 240.331066][ T7708] sch_fq: defrate 53322 ignored. [ 240.520962][ T7719] netlink: 3 bytes leftover after parsing attributes in process `syz.2.794'. [ 240.549484][ T7719] 0X: renamed from caif0 [ 240.580545][ T7719] device 60X left promiscuous mode [ 240.610140][ T7719] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 242.171975][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.804'. [ 242.229084][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.804'. [ 243.497442][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.812'. [ 246.439882][ T7783] infiniband syz0: set down [ 246.450660][ T7783] infiniband syz0: added ipvlan0 [ 246.678541][ T7783] RDS/IB: syz0: added [ 246.689585][ T7783] smc: adding ib device syz0 with port count 1 [ 246.703737][ T7783] smc: ib device syz0 port 1 has pnetid [ 247.954506][ T7820] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 247.994549][ T7820] device bond3 entered promiscuous mode [ 248.000711][ T7820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.135307][ T7820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 248.187356][ T7820] device bond3 left promiscuous mode [ 248.284086][ T7829] bond3: (slave bridge0): making interface the new active one [ 248.331803][ T7829] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 249.216823][ T7862] dns_resolver: Unsupported server list version (6) [ 253.906826][ T7913] tipc: Started in network mode [ 253.927761][ T7913] tipc: Node identity 4, cluster identity 4711 [ 253.973931][ T7913] tipc: Node number set to 4 [ 255.418083][ T7941] loop5: detected capacity change from 0 to 512 [ 255.484307][ T7941] EXT4-fs (loop5): inline encryption not supported [ 255.517368][ T7941] EXT4-fs (loop5): Ignoring removed orlov option [ 255.528108][ T7941] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 255.568805][ T7941] EXT4-fs (loop5): 1 truncate cleaned up [ 255.574531][ T7941] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,quota,inlinecrypt,orlov,user_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 255.834122][ T4671] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 256.325933][ T7968] netlink: 40 bytes leftover after parsing attributes in process `syz.8.878'. [ 256.361446][ T7968] netlink: 'syz.8.878': attribute type 1 has an invalid length. [ 256.399602][ T7968] netlink: 260 bytes leftover after parsing attributes in process `syz.8.878'. [ 256.481672][ T4397] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.576492][ T4397] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.750140][ T4397] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.807232][ T4397] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.160121][ T4397] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.202200][ T4397] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.431941][ T4397] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.444184][ T4397] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.021338][ T7996] netlink: 182 bytes leftover after parsing attributes in process `syz.4.892'. [ 258.389037][ T8008] lo speed is unknown, defaulting to 1000 [ 259.118382][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 259.312602][ T4397] device hsr_slave_0 left promiscuous mode [ 259.319710][ T4397] device hsr_slave_1 left promiscuous mode [ 259.342065][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.378169][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.392645][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.400587][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.441387][ T4397] device bridge_slave_1 left promiscuous mode [ 259.463437][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.480243][ T4397] device bridge_slave_0 left promiscuous mode [ 259.496033][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.540795][ T4397] device veth1_macvtap left promiscuous mode [ 259.553640][ T4397] device veth0_macvtap left promiscuous mode [ 259.560250][ T4397] device veth1_vlan left promiscuous mode [ 259.576075][ T4397] device veth0_vlan left promiscuous mode [ 259.816997][ T4397] bond0 (unregistering): (slave geneve2): Releasing active interface [ 259.851691][ T4397] bond0 (unregistering): Released all slaves [ 260.327996][ T1108] Process accounting resumed [ 260.459954][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 260.474911][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 260.489487][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 260.817460][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.859276][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.888349][ T8008] device bridge_slave_0 entered promiscuous mode [ 260.907189][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.922542][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.053577][ T8008] device bridge_slave_1 entered promiscuous mode [ 261.216252][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.231267][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.262263][ T8008] team0: Port device team_slave_0 added [ 261.271167][ T8008] team0: Port device team_slave_1 added [ 261.294368][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.302113][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.332957][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.237454][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.298793][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.368656][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.383732][ T8103] x_tables: duplicate entry at hook 1 [ 262.532905][ T8008] device hsr_slave_0 entered promiscuous mode [ 262.570986][ T8008] device hsr_slave_1 entered promiscuous mode [ 262.729341][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 262.744959][ T8121] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 263.116065][ T8008] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 263.262966][ T8008] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 264.209057][ T8008] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 264.234573][ T8008] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 264.481779][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.983586][ T5338] Bluetooth: hci0: command 0x040f tx timeout [ 265.262521][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.282596][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.326101][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.401888][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.432913][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.460073][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.467314][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.499669][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.533964][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.558722][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.594735][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.602017][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.677246][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.700016][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.726699][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.761791][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.781923][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.837282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.855352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.940702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.979588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.018702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.047022][ T8178] overlayfs: failed to clone upperpath [ 266.053484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.083509][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.461302][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.468495][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.674340][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.562652][ T5338] Bluetooth: hci0: command 0x0419 tx timeout [ 267.989685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.009171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.045789][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.907353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.934397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.038037][ T8008] device veth0_vlan entered promiscuous mode [ 269.044859][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.089169][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.120155][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.942'. [ 269.157890][ T8234] tc_dump_action: action bad kind [ 269.163695][ T8184] syz.7.938 sent an empty control message without MSG_MORE. [ 269.205197][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.214415][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.267574][ T8008] device veth1_vlan entered promiscuous mode [ 269.386969][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.407456][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.452372][ T8008] device veth0_macvtap entered promiscuous mode [ 269.547407][ T8008] device veth1_macvtap entered promiscuous mode [ 269.591876][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.621987][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.639177][ T26] audit: type=1326 audit(1778123195.167:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.7.944" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffacf241dd9 code=0x0 [ 270.348962][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.407654][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.427731][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.520872][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.541615][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.565995][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.596988][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.639396][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.652638][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.945'. [ 270.746518][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.761458][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.784355][ T8008] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.812409][ T8008] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.853589][ T8008] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.887923][ T8008] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.085666][ T8260] IPVS: sh: FWM 3 0x00000003 - no destination available [ 271.130036][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.717726][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.782123][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.825342][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.833311][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.067601][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.798898][ T8316] loop9: detected capacity change from 0 to 512 [ 277.867225][ T8316] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.899006][ T8316] EXT4-fs (loop9): orphan cleanup on readonly fs [ 277.909466][ T8316] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3894: comm syz.9.961: Allocating blocks 41-42 which overlap fs metadata [ 277.925548][ T8316] Quota error (device loop9): write_blk: dquota write failed [ 277.933272][ T8316] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 277.944577][ T8316] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.961: Failed to acquire dquot type 0 [ 277.957102][ T8316] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 277.972718][ T8316] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #12: comm syz.9.961: corrupted inode contents [ 277.985768][ T8316] EXT4-fs error (device loop9): ext4_dirty_inode:6077: inode #12: comm syz.9.961: mark_inode_dirty error [ 277.998317][ T8316] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #12: comm syz.9.961: corrupted inode contents [ 278.011561][ T8316] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #12: comm syz.9.961: mark_inode_dirty error [ 278.026527][ T8316] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #12: comm syz.9.961: corrupted inode contents [ 278.040489][ T8316] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 278.049723][ T8316] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #12: comm syz.9.961: corrupted inode contents [ 278.064620][ T8316] EXT4-fs error (device loop9): ext4_truncate:4286: inode #12: comm syz.9.961: mark_inode_dirty error [ 278.091968][ T8316] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 278.102042][ T8316] EXT4-fs (loop9): 1 truncate cleaned up [ 278.108179][ T8316] EXT4-fs (loop9): pa ffff888074357d20: logic 1, phys. 41, len 23 [ 278.116149][ T8316] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 278.127448][ T8316] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 278.260610][ T8324] VFS: Mount too revealing [ 278.285815][ T8324] VFS: Mount too revealing [ 278.707229][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 279.982840][ T5338] Bluetooth: hci4: command 0x0406 tx timeout [ 281.990113][ T8378] x_tables: duplicate entry at hook 1 [ 285.772746][ T8431] x_tables: duplicate entry at hook 1 [ 286.167838][ T26] audit: type=1326 audit(1778123210.475:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a70731dd9 code=0x0 [ 286.271821][ T26] audit: type=1326 audit(1778123210.530:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.331639][ T26] audit: type=1326 audit(1778123210.530:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.412332][ T26] audit: type=1326 audit(1778123210.530:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.483440][ T26] audit: type=1326 audit(1778123210.539:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.519367][ T26] audit: type=1326 audit(1778123210.539:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.581509][ T26] audit: type=1326 audit(1778123210.539:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.658837][ T26] audit: type=1326 audit(1778123210.539:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.705982][ T8452] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.723516][ T26] audit: type=1326 audit(1778123210.539:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 286.769862][ T26] audit: type=1326 audit(1778123210.539:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.8.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2a70731dd9 code=0x7ffc0000 [ 287.103249][ T7] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 287.602202][ T7] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.642719][ T7] usb 10-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 287.671917][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.716467][ T7] usb 10-1: config 0 descriptor?? [ 287.783991][ T7] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 288.357584][ T7] usb 10-1: USB disconnect, device number 2 [ 290.095017][ T8511] overlayfs: failed to clone upperpath [ 290.861628][ T8523] loop9: detected capacity change from 0 to 256 [ 291.131251][ T8536] netlink: 'syz.7.1016': attribute type 16 has an invalid length. [ 291.159167][ T8536] netlink: 'syz.7.1016': attribute type 17 has an invalid length. [ 291.214036][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 291.244021][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 291.269664][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 291.292982][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 291.303614][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 291.321312][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 291.332256][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 291.344563][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 291.378749][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 291.410915][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 291.440639][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 291.505683][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 291.524528][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.555833][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.565905][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.574074][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 291.586269][ T8536] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.597480][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 291.629624][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 291.651243][ T8536] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 291.672142][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1018'. [ 291.690725][ T8550] netlink: 'syz.9.1018': attribute type 6 has an invalid length. [ 291.710744][ T8550] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1018'. [ 291.906280][ T26] kauditd_printk_skb: 616 callbacks suppressed [ 291.906293][ T26] audit: type=1326 audit(1778123215.780:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffacf241dd9 code=0x0 [ 292.000799][ T26] audit: type=1326 audit(1778123215.863:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.056016][ T26] audit: type=1326 audit(1778123215.891:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.116701][ T26] audit: type=1326 audit(1778123215.891:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.190953][ T26] audit: type=1326 audit(1778123215.891:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.254394][ T26] audit: type=1326 audit(1778123215.891:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.329990][ T26] audit: type=1326 audit(1778123215.891:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.399697][ T26] audit: type=1326 audit(1778123215.891:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.485813][ T26] audit: type=1326 audit(1778123215.891:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.521515][ T26] audit: type=1326 audit(1778123215.891:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.7.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacf241dd9 code=0x7ffc0000 [ 292.960239][ T8573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.967723][ T8573] IPv6: NLM_F_CREATE should be set when creating new route [ 293.607597][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.615283][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.643369][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.728270][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.905868][ T8612] overlayfs: failed to clone upperpath [ 296.257784][ T8573] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.267534][ T8573] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.282870][ T8573] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.291945][ T8573] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.676241][ T8597] device syzkaller0 entered promiscuous mode [ 299.000813][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1052'. [ 299.056058][ T8667] netlink: 'syz.7.1052': attribute type 7 has an invalid length. [ 299.179581][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1052'. [ 299.216624][ T8667] device ip6gretap0 entered promiscuous mode [ 299.236436][ T8667] device syz_tun entered promiscuous mode [ 299.250064][ T8667] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 299.279085][ T8667] Cannot create hsr debugfs directory [ 299.301255][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 299.708473][ T8693] netlink: 'syz.4.1056': attribute type 4 has an invalid length. [ 300.582543][ T8729] loop9: detected capacity change from 0 to 2048 [ 300.653359][ T8729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.870804][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'. [ 303.254489][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1079'. [ 303.302775][ T8799] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 303.364992][ T8803] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 303.395449][ T8799] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 303.491422][ T26] kauditd_printk_skb: 210 callbacks suppressed [ 303.491440][ T26] audit: type=1804 audit(1778123226.460:936): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1082" name="bus" dev="ramfs" ino=48959 res=1 errno=0 [ 303.540359][ T26] audit: type=1804 audit(1778123226.469:937): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1082" name="bus" dev="ramfs" ino=48959 res=1 errno=0 [ 305.017454][ T8823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.265583][ T8823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.391915][ T8823] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 306.567298][ T8843] overlayfs: failed to clone upperpath [ 306.818114][ T8858] netlink: 'syz.2.1093': attribute type 27 has an invalid length. [ 306.852402][ T8858] netlink: 'syz.2.1093': attribute type 4 has an invalid length. [ 306.885337][ T8858] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1093'. [ 307.589547][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1097'. [ 309.133408][ T26] audit: type=1326 audit(1778123231.648:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.2.1098" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7fc00000 [ 309.315911][ T8908] tipc: Enabling of bearer rejected, failed to enable media [ 309.529569][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1113'. [ 309.654450][ T8917] IPv6: addrconf: prefix option has invalid lifetime [ 310.641540][ T8906] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1109'. [ 311.562916][ T8968] tipc: New replicast peer: 0.0.0.0 [ 311.606919][ T8968] tipc: Enabled bearer , priority 10 [ 311.632663][ T8976] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 311.725727][ T7] 0: reclassify loop, rule prio 0, protocol 800 [ 312.925717][ T7] 0: reclassify loop, rule prio 0, protocol 800 [ 313.055220][ T8993] device lo left promiscuous mode [ 313.073310][ T8993] device tunl0 left promiscuous mode [ 313.092908][ T8993] device gre0 left promiscuous mode [ 313.146121][ T8993] device gretap0 left promiscuous mode [ 313.181774][ T8993] device erspan0 left promiscuous mode [ 313.227367][ T8993] device ip_vti0 left promiscuous mode [ 313.256663][ T8993] device ip6_vti0 left promiscuous mode [ 313.287350][ T8993] device sit0 left promiscuous mode [ 313.316551][ T8993] device ip6tnl0 left promiscuous mode [ 313.347927][ T8993] device ip6gre0 left promiscuous mode [ 313.366229][ T9010] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1135'. [ 313.385975][ T8993] device syz_tun left promiscuous mode [ 313.410270][ T8993] device ip6gretap0 left promiscuous mode [ 313.432962][ T8993] device bridge0 left promiscuous mode [ 313.451001][ T8993] device bond0 left promiscuous mode [ 313.477031][ T8993] device bond_slave_0 left promiscuous mode [ 313.505278][ T8993] device dummy0 left promiscuous mode [ 313.520054][ T8993] device nlmon0 left promiscuous mode [ 313.536604][ T8993] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 313.688523][ T9022] 0: reclassify loop, rule prio 0, protocol 800 [ 313.740243][ T9025] tmpfs: Bad value for 'mpol' [ 314.746279][ T7] 0: reclassify loop, rule prio 0, protocol 800 [ 314.779551][ T9043] netlink: 'syz.8.1143': attribute type 6 has an invalid length. [ 314.831227][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 315.004876][ T7] 0: reclassify loop, rule prio 0, protocol 800 [ 315.168076][ T9067] sch_fq: defrate 53322 ignored. [ 315.352292][ T9076] netlink: 'syz.9.1152': attribute type 1 has an invalid length. [ 315.439428][ T9079] bond2: (slave gretap1): making interface the new active one [ 315.449304][ T9079] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 315.457977][ T9081] siw: device registration error -23 [ 315.627155][ T9076] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 315.780070][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1155'. [ 316.185212][ T9107] autofs4:pid:9107:autofs_fill_super: called with bogus options [ 318.915227][ T9135] netlink: 'syz.7.1166': attribute type 1 has an invalid length. [ 319.069333][ T9135] device bond1 entered promiscuous mode [ 319.075620][ T9135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.115563][ T9142] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1166'. [ 319.234053][ T9142] device bond1 left promiscuous mode [ 319.297506][ T9143] bond1: (slave bridge2): making interface the new active one [ 319.338331][ T9143] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 319.802548][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1173'. [ 320.314713][ T9187] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.1177'. [ 321.650029][ T9208] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 322.118218][ T4292] device hsr_slave_0 left promiscuous mode [ 323.164287][ T4292] device hsr_slave_1 left promiscuous mode [ 323.204671][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.216287][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.253834][ T4292] device bridge_slave_1 left promiscuous mode [ 323.271460][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.281729][ T4292] device bridge_slave_0 left promiscuous mode [ 323.297371][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.536324][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 323.571482][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 323.603470][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.625798][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.697401][ T4292] bond0 (unregistering): Released all slaves [ 323.752458][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1187'. [ 323.771549][ T9229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.800931][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.811390][ T9237] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 323.824551][ T9239] device vlan2 entered promiscuous mode [ 323.908337][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 324.182902][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2521413585/2521413587 [ 324.211890][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2521413585/2521413586 [ 324.266173][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2521413585/2521413587 [ 324.275006][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2521413585/2521413586 [ 325.398618][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1201'. [ 325.770172][ T9291] device ip6gre2 entered promiscuous mode [ 325.925841][ T9291] netlink: 'syz.4.1201': attribute type 6 has an invalid length. [ 325.937682][ T9291] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1201'. [ 326.126826][ T9300] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 326.216382][ T9304] bond3: (slave gretap1): making interface the new active one [ 326.232248][ T9304] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 327.669380][ T9338] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 327.799083][ T9338] device bond4 entered promiscuous mode [ 327.805091][ T9338] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.816496][ T9343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1209'. [ 327.826728][ T9343] device bond4 left promiscuous mode [ 327.936963][ T9350] bond4: (slave bridge2): making interface the new active one [ 327.966607][ T9350] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 327.989898][ T9349] tipc: Started in network mode [ 327.997786][ T9349] tipc: Node identity ac14142f, cluster identity 4711 [ 328.017504][ T9349] tipc: New replicast peer: 0.0.0.0 [ 328.033278][ T9349] tipc: Enabled bearer , priority 10 [ 328.063776][ T9358] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 329.003238][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1224'. [ 329.111576][ T1108] tipc: Node number set to 2886997039 [ 329.625434][ T26] audit: type=1326 audit(1778123250.591:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.4.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5640344dd9 code=0x0 [ 331.288999][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 331.391125][ T9450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.570384][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 331.652589][ T9466] netlink: 399 bytes leftover after parsing attributes in process `syz.8.1244'. [ 332.112452][ T9450] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 332.574132][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 332.663915][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 333.086705][ T9486] netlink: 399 bytes leftover after parsing attributes in process `syz.7.1250'. [ 335.291287][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.297699][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.397289][ T9489] overlayfs: failed to clone upperpath [ 335.526432][ T9492] tipc: Failed to remove unknown binding: 66,0,0/0:655263902/655263904 [ 335.591003][ T9492] tipc: Failed to remove unknown binding: 66,0,0/0:655263902/655263903 [ 335.672577][ T9492] tipc: Failed to remove unknown binding: 66,0,0/0:655263902/655263904 [ 335.746783][ T9492] tipc: Failed to remove unknown binding: 66,0,0/0:655263902/655263903 [ 335.830504][ T9501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.919493][ T9501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.034162][ T9508] fuse: Bad value for 'fd' [ 336.039068][ T9501] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 336.139531][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1252'. [ 336.254329][ T9512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.298780][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.491487][ T9515] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 336.523668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 338.998275][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1261'. [ 339.564801][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 339.904270][ T9593] sch_fq: defrate 53322 ignored. [ 340.254724][ T9607] VFS: Mount too revealing [ 341.016058][ T9641] lo speed is unknown, defaulting to 1000 [ 342.803865][ T9671] netlink: 'syz.2.1284': attribute type 16 has an invalid length. [ 342.836199][ T9671] netlink: 'syz.2.1284': attribute type 17 has an invalid length. [ 342.882257][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 342.891126][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 342.899552][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 342.916269][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 342.925840][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 342.951856][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 342.982261][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 343.105814][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 343.108556][ T26] audit: type=1804 audit(1778123263.036:940): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1285" name="bus" dev="ramfs" ino=51083 res=1 errno=0 [ 343.123121][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 343.169255][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 343.178270][ T9690] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 343.500042][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 343.660745][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 344.069968][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 344.111255][ T26] audit: type=1804 audit(1778123263.571:941): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1285" name="bus" dev="ramfs" ino=51083 res=1 errno=0 [ 344.133113][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 344.184312][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 344.220882][ T9671] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 345.677987][ T9716] netlink: 'syz.7.1295': attribute type 1 has an invalid length. [ 345.827230][ T9716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.904098][ T9722] bond2: (slave vlan2): Opening slave failed [ 345.926304][ T9726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.010496][ T9731] bond4: (slave ip6erspan0): making interface the new active one [ 346.042281][ T9731] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 346.131164][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 346.373090][ T26] audit: type=1326 audit(1778123266.045:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.9.1303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93594d7dd9 code=0x0 [ 346.430247][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 346.533245][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 346.972436][ T9737] netlink: 276 bytes leftover after parsing attributes in process `syz.8.1301'. [ 347.344655][ T9769] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.353713][ T26] audit: type=1804 audit(1778123266.959:943): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1309" name="bus" dev="ramfs" ino=52294 res=1 errno=0 [ 347.365287][ T9769] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.447460][ T26] audit: type=1804 audit(1778123266.996:944): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1309" name="bus" dev="ramfs" ino=52294 res=1 errno=0 [ 347.513943][ T9774] netlink: 'syz.9.1308': attribute type 16 has an invalid length. [ 347.532157][ T9774] netlink: 'syz.9.1308': attribute type 17 has an invalid length. [ 347.642219][ T9774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.876966][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1312'. [ 347.982578][ T9783] bond1: (slave batadv_slave_1): Releasing backup interface [ 350.827748][ T9821] bond4: option mode: unable to set because the bond device has slaves [ 350.908073][ T9821] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 350.999889][ T9821] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 351.026250][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1323'. [ 351.079983][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1326'. [ 352.646981][ T9852] netlink: 'syz.2.1333': attribute type 4 has an invalid length. [ 352.954848][ T4260] lo speed is unknown, defaulting to 1000 [ 354.015806][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1342'. [ 354.465429][ T9876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.030497][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 355.951788][ T9890] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.971630][ T9890] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.981342][ T9890] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.991210][ T9890] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.280371][ T9907] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1347'. [ 358.816930][ T9980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.854721][ T9986] device bond_slave_0 entered promiscuous mode [ 358.860911][ T9998] tipc: Failed to remove unknown binding: 66,0,0/0:2306891259/2306891261 [ 358.861840][ T9986] device bond_slave_1 entered promiscuous mode [ 358.896515][ T9998] tipc: Failed to remove unknown binding: 66,0,0/0:2306891259/2306891260 [ 358.914288][ T9986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.919222][ T9998] tipc: Failed to remove unknown binding: 66,0,0/0:2306891259/2306891261 [ 358.934180][ T9986] bond1: (slave macvlan2): making interface the new active one [ 358.943660][ T9998] tipc: Failed to remove unknown binding: 66,0,0/0:2306891259/2306891260 [ 358.952428][ T9986] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 358.974881][ T9992] device bridge_slave_0 left promiscuous mode [ 358.982685][ T9992] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.007832][ T9992] device bridge_slave_1 left promiscuous mode [ 359.019615][ T9992] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.042742][ T9992] bond0: (slave bond_slave_0): Releasing backup interface [ 359.062144][ T9992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.077135][ T9992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.096589][ T9992] bond2: (slave geneve2): Releasing active interface [ 359.121312][ T9992] bond3: (slave gretap1): Releasing active interface [ 359.143785][ T9992] bond4: (slave bridge2): Releasing backup interface [ 359.157353][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 359.197155][ T9994] team0: Failed to send options change via netlink (err -105) [ 359.243059][ T9994] team0: Mode changed to "loadbalance" [ 362.082693][T10046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.123136][T10052] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.134877][T10052] bond3: (slave macvlan2): making interface the new active one [ 362.205771][T10052] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 362.274695][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 362.399294][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1395'. [ 363.793253][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 365.376656][T10123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.819495][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1411'. [ 365.828924][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1411'. [ 368.338118][T10170] Set syz1 is full, maxelem 2 reached [ 368.384397][T10170] batman_adv: batadv0: Adding interface: dummy0 [ 368.417451][T10170] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.528365][T10186] Set syz1 is full, maxelem 2 reached [ 368.632309][T10170] batman_adv: batadv0: Interface activated: dummy0 [ 368.669518][T10184] batadv0: mtu less than device minimum [ 368.770096][T10184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 368.783694][T10184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 368.796971][T10184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 368.810062][T10184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 368.822901][T10184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 368.835840][T10184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 368.848791][T10184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.425183][T10190] can: request_module (can-proto-4) failed. [ 369.708832][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1426'. [ 373.047468][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1445'. [ 373.318605][T10269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.768209][T10291] tipc: Enabling of bearer rejected, failed to enable media [ 375.898075][T10314] xt_policy: output policy not valid in PREROUTING and INPUT [ 377.933675][T10343] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 377.953187][T10343] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 377.965073][T10343] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1463'. [ 381.395671][T10420] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 381.516710][T10425] No such timeout policy "syz1" [ 382.532099][T10440] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6139] was attempted by "$x`vOxH`CBn܀y>bwx\x1bL5? Cݭ8`dJg39T&tWCm<\x1bRby Vq/\x5cDw,XT,W[es\x0d1\x07^|;dg8 ꥛~u}Gg6W]MþlxM=Mh\x095$ZEO1Jc&OP5y9\x0dNiI<5Ўd\x22T*˘sx)ʯ\x22v:|M\x0a)\x0bꋻwRI ;HP?LtM[w̲S7&Q瑃Y=Nݝ\x22߆FSBҘRx9ʼnR_4~}e}xbH\x0d%DŽޑR]cÂx8m5'yZx^My=::UVvҼb8s\x0d0cAL=;k[iqKg@8Z\x22&iy?m9d<5]p2wA1Ȧ4qLctG9N_f2sop)^FISn08aS*ĒrX\x1b/\x22`Wrwr\x22!7X~ӰDEp7ehNk2Is,>r_<-!}jnW8-leÚQŒ6DgfrZ!V\x0b*>ħk?p>nU`IW \x1bD6\x5cjv(=}txp:Ԑގ_ս<‹('(tc(#2oڏ0xY4W.voDS\x0cX濩V,5a#zkPd0a. [ 382.684144][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.616521][T10444] bond0: (slave bond_slave_0): Releasing backup interface [ 383.791183][T10444] bond0: (slave bond_slave_1): Releasing backup interface [ 383.895186][T10444] team0: Port device team_slave_0 removed [ 383.913547][T10444] team0: Port device team_slave_1 removed [ 383.933481][T10444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.953953][T10444] bond1: (slave bridge2): Releasing backup interface [ 384.000635][T10444] bond3: (slave macvlan2): Releasing active interface [ 384.047991][T10447] team0: Mode changed to "loadbalance" [ 385.692118][T10497] netlink: 'syz.2.1504': attribute type 21 has an invalid length. [ 385.718147][T10497] netlink: 'syz.2.1504': attribute type 6 has an invalid length. [ 385.767787][T10497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1504'. [ 385.904248][T10507] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 385.916517][T10507] SET target dimension over the limit! [ 385.970471][T10506] can: request_module (can-proto-4) failed. [ 388.529553][ T26] audit: type=1326 audit(1778123304.963:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.577034][ T26] audit: type=1326 audit(1778123304.963:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.763675][ T26] audit: type=1326 audit(1778123304.963:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.796104][ T26] audit: type=1326 audit(1778123304.963:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.820801][ T26] audit: type=1326 audit(1778123304.963:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.846085][ T26] audit: type=1326 audit(1778123304.963:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.871330][ T26] audit: type=1326 audit(1778123304.963:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.947630][ T26] audit: type=1326 audit(1778123304.963:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 388.974253][ T26] audit: type=1326 audit(1778123305.000:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 389.193666][ T26] audit: type=1326 audit(1778123305.000:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1516" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647d5a7dd9 code=0x7ffc0000 [ 389.580908][T10542] orangefs_mount: mount request failed with -4 [ 389.754782][T10551] SET target dimension over the limit! [ 389.781290][T10554] xt_hashlimit: size too large, truncated to 1048576 [ 389.798691][T10554] xt_hashlimit: invalid rate [ 390.873347][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 391.539417][T10583] SET target dimension over the limit! [ 394.650503][T10602] device bond4 entered promiscuous mode [ 394.931284][T10621] netlink: 'syz.2.1544': attribute type 10 has an invalid length. [ 395.901927][T10630] lo speed is unknown, defaulting to 1000 [ 395.996357][T10633] device veth0_vlan left promiscuous mode [ 396.283818][T10633] device veth0_vlan entered promiscuous mode [ 397.829931][T10659] device bond1 left promiscuous mode [ 397.850247][T10659] device ip6gre1 left promiscuous mode [ 397.872687][T10659] device syzkaller0 left promiscuous mode [ 397.898704][T10659] device vlan2 left promiscuous mode [ 397.934455][T10659] device ip6gre2 left promiscuous mode [ 398.114882][T10669] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 398.166945][T10669] bond6: (slave gretap1): making interface the new active one [ 398.236237][T10671] xt_TCPMSS: Only works on TCP SYN packets [ 398.530747][T10669] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 399.049403][T10676] netlink: 798 bytes leftover after parsing attributes in process `syz.2.1560'. [ 399.351545][T10691] overlayfs: failed to clone upperpath [ 399.604883][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.611289][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.371054][T10708] netlink: 550 bytes leftover after parsing attributes in process `syz.9.1570'. [ 403.206805][T10745] lo speed is unknown, defaulting to 1000 [ 407.150873][T10833] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1599'. [ 409.582078][T10865] xt_policy: output policy not valid in PREROUTING and INPUT [ 410.449841][T10858] orangefs_mount: mount request failed with -4 [ 412.593745][T10874] device bridge1 entered promiscuous mode [ 413.127389][T10889] netlink: 798 bytes leftover after parsing attributes in process `syz.4.1618'. [ 415.751150][T10911] xt_policy: output policy not valid in PREROUTING and INPUT [ 417.494471][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1626'. [ 418.316686][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1626'. [ 418.463699][T10942] netlink: 'syz.9.1629': attribute type 1 has an invalid length. [ 418.653143][T10947] bond4: (slave gretap2): making interface the new active one [ 418.684179][T10947] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 418.705593][T10948] netlink: 'syz.2.1632': attribute type 4 has an invalid length. [ 418.825798][T10947] syz.9.1629 (10947) used greatest stack depth: 19408 bytes left [ 418.927193][T10959] IPVS: Error connecting to the multicast addr [ 418.964530][T10959] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1635'. [ 419.189648][T10964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.414845][T10964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.749817][T10985] netlink: 'syz.8.1644': attribute type 4 has an invalid length. [ 422.594903][T11016] IPv6: NLM_F_REPLACE set, but no existing node found! [ 423.085030][T11024] fuse: Bad value for 'fd' [ 423.563424][T11028] : renamed from virt_wifi0 [ 423.607534][T11030] netlink: 'syz.4.1658': attribute type 4 has an invalid length. [ 423.660205][T11037] fuse: Unknown parameter '4' [ 423.670111][T11037] sctp: [Deprecated]: syz.4.1663 (pid 11037) Use of int in max_burst socket option deprecated. [ 423.670111][T11037] Use struct sctp_assoc_value instead [ 425.112146][T11073] fuse: Unknown parameter '4' [ 425.136605][T11073] sctp: [Deprecated]: syz.9.1674 (pid 11073) Use of int in max_burst socket option deprecated. [ 425.136605][T11073] Use struct sctp_assoc_value instead [ 426.675533][T11105] ------------[ cut here ]------------ [ 426.712354][T11105] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 426.729642][T11105] WARNING: CPU: 1 PID: 11105 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 426.811714][T11105] Modules linked in: [ 426.829201][T11105] CPU: 1 PID: 11105 Comm: syz.4.1684 Not tainted syzkaller #0 [ 426.875191][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.956025][T11105] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 426.963319][T11105] Code: 16 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 9b 71 00 <0f> 0b e9 07 fd ff ff e8 09 f7 38 f8 0f 0b e9 b1 fe ff ff e8 fd f6 [ 427.056700][T11105] RSP: 0018:ffffc90002fff4c8 EFLAGS: 00010246 [ 427.062954][T11105] RAX: aba5e4245aac0800 RBX: 0000000000400000 RCX: 0000000000080000 [ 427.083617][T11105] RDX: ffffc9000cf01000 RSI: 0000000000006587 RDI: 0000000000006588 [ 427.093297][T11105] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 427.115182][T11105] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888078998000 [ 427.129075][T11105] R13: ffff888078999290 R14: ffff8880786f8e00 R15: ffff88807899a268 [ 427.137318][T11105] FS: 00007f563e59e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 427.176001][T11105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.182860][T11105] CR2: 00007f2b908efe9c CR3: 00000000406bc000 CR4: 00000000003506e0 [ 427.202589][T11105] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000007 [ 427.213112][T11105] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.235708][T11105] Call Trace: [ 427.239482][T11105] [ 427.242628][T11105] ? netif_carrier_on+0x91/0x120 [ 427.247724][T11105] ieee80211_ocb_leave+0x26f/0x320 [ 427.264553][T11105] __cfg80211_leave_ocb+0x219/0x3f0 [ 427.275477][T11105] cfg80211_leave_ocb+0x53/0x70 [ 427.287488][T11105] cfg80211_change_iface+0x4f1/0xeb0 [ 427.298637][T11105] nl80211_set_interface+0x5a7/0x7e0 [ 427.311148][T11105] ? nl80211_dump_interface+0x5c0/0x5c0 [ 427.322766][T11105] ? mutex_lock_nested+0x17/0x20 [ 427.334454][T11105] genl_rcv_msg+0xcea/0xf90 [ 427.344854][T11105] ? genl_bind+0x380/0x380 [ 427.359321][T11105] ? verify_lock_unused+0x140/0x140 [ 427.364596][T11105] ? verify_lock_unused+0x140/0x140 [ 427.377842][T11105] ? nl80211_dump_interface+0x5c0/0x5c0 [ 427.387666][T11105] netlink_rcv_skb+0x1f5/0x440 [ 427.400017][T11105] ? genl_bind+0x380/0x380 [ 427.405121][T11105] ? netlink_ack+0xb50/0xb50 [ 427.410410][T11105] ? __lock_acquire+0x7d10/0x7d10 [ 427.428853][T11105] ? down_read+0x1aa/0x2e0 [ 427.441002][T11105] genl_rcv+0x24/0x40 [ 427.452797][T11105] netlink_unicast+0x774/0x920 [ 427.461983][T11105] netlink_sendmsg+0x8ba/0xbe0 [ 427.475769][T11105] ? netlink_getsockopt+0x570/0x570 [ 427.481044][T11105] ? aa_sock_msg_perm+0x94/0x150 [ 427.486215][T11105] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 427.503435][T11105] ? security_socket_sendmsg+0x7c/0xa0 [ 427.514442][T11105] __sys_sendto+0x46d/0x620 [ 427.519024][T11105] ? __ia32_sys_getpeername+0x80/0x80 [ 427.539554][T11105] ? __lock_acquire+0x7d10/0x7d10 [ 427.550662][T11105] ? lock_chain_count+0x20/0x20 [ 427.560887][T11105] ? vtime_user_exit+0x2c8/0x3e0 [ 427.572200][T11105] __x64_sys_sendto+0xda/0xf0 [ 427.581631][T11105] do_syscall_64+0x4c/0xa0 [ 427.594787][T11105] ? clear_bhb_loop+0x30/0x80 [ 427.603406][T11105] ? clear_bhb_loop+0x30/0x80 [ 427.616321][T11105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 427.626367][T11105] RIP: 0033:0x7f564030560e [ 427.638648][T11105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.668703][T11105] RSP: 002b:00007f563e59cde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 427.678845][T11105] RAX: ffffffffffffffda RBX: 00007f563e59e6c0 RCX: 00007f564030560e [ 427.697696][T11105] RDX: 0000000000000024 RSI: 00007f563e59cfe0 RDI: 0000000000000005 [ 427.725345][T11105] RBP: 0000000000000000 R08: 00007f563e59ce64 R09: 000000000000000c [ 427.733562][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 427.752768][T11105] R13: 0000000000000000 R14: 00007f563e59cfe0 R15: 0000000000000000 [ 427.766286][T11105] [ 427.776177][T11105] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 427.783893][T11105] CPU: 1 PID: 11105 Comm: syz.4.1684 Not tainted syzkaller #0 [ 427.791877][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.801977][T11105] Call Trace: [ 427.805292][T11105] [ 427.808257][T11105] dump_stack_lvl+0x188/0x250 [ 427.813250][T11105] ? show_regs_print_info+0x20/0x20 [ 427.818506][T11105] ? load_image+0x400/0x400 [ 427.823283][T11105] panic+0x2e5/0x810 [ 427.827387][T11105] ? bpf_jit_dump+0xd0/0xd0 [ 427.831939][T11105] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 427.838565][T11105] __warn+0x248/0x2b0 [ 427.842760][T11105] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 427.849383][T11105] report_bug+0x1b7/0x2e0 [ 427.853940][T11105] handle_bug+0x3a/0x70 [ 427.858304][T11105] exc_invalid_op+0x16/0x40 [ 427.862930][T11105] asm_exc_invalid_op+0x16/0x20 [ 427.867989][T11105] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 427.875215][T11105] Code: 16 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 9b 71 00 <0f> 0b e9 07 fd ff ff e8 09 f7 38 f8 0f 0b e9 b1 fe ff ff e8 fd f6 [ 427.895541][T11105] RSP: 0018:ffffc90002fff4c8 EFLAGS: 00010246 [ 427.901831][T11105] RAX: aba5e4245aac0800 RBX: 0000000000400000 RCX: 0000000000080000 [ 427.910254][T11105] RDX: ffffc9000cf01000 RSI: 0000000000006587 RDI: 0000000000006588 [ 427.918595][T11105] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 427.926851][T11105] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888078998000 [ 427.935019][T11105] R13: ffff888078999290 R14: ffff8880786f8e00 R15: ffff88807899a268 [ 427.943207][T11105] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 427.950171][T11105] ? netif_carrier_on+0x91/0x120 [ 427.955844][T11105] ieee80211_ocb_leave+0x26f/0x320 [ 427.961161][T11105] __cfg80211_leave_ocb+0x219/0x3f0 [ 427.966488][T11105] cfg80211_leave_ocb+0x53/0x70 [ 427.971457][T11105] cfg80211_change_iface+0x4f1/0xeb0 [ 427.976772][T11105] nl80211_set_interface+0x5a7/0x7e0 [ 427.982231][T11105] ? nl80211_dump_interface+0x5c0/0x5c0 [ 427.987801][T11105] ? mutex_lock_nested+0x17/0x20 [ 427.992879][T11105] genl_rcv_msg+0xcea/0xf90 [ 427.997440][T11105] ? genl_bind+0x380/0x380 [ 428.001930][T11105] ? verify_lock_unused+0x140/0x140 [ 428.007142][T11105] ? verify_lock_unused+0x140/0x140 [ 428.012767][T11105] ? nl80211_dump_interface+0x5c0/0x5c0 [ 428.018482][T11105] netlink_rcv_skb+0x1f5/0x440 [ 428.023372][T11105] ? genl_bind+0x380/0x380 [ 428.027931][T11105] ? netlink_ack+0xb50/0xb50 [ 428.032731][T11105] ? __lock_acquire+0x7d10/0x7d10 [ 428.037873][T11105] ? down_read+0x1aa/0x2e0 [ 428.042565][T11105] genl_rcv+0x24/0x40 [ 428.046555][T11105] netlink_unicast+0x774/0x920 [ 428.051403][T11105] netlink_sendmsg+0x8ba/0xbe0 [ 428.056173][T11105] ? netlink_getsockopt+0x570/0x570 [ 428.061640][T11105] ? aa_sock_msg_perm+0x94/0x150 [ 428.066853][T11105] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 428.072332][T11105] ? security_socket_sendmsg+0x7c/0xa0 [ 428.077906][T11105] __sys_sendto+0x46d/0x620 [ 428.082424][T11105] ? __ia32_sys_getpeername+0x80/0x80 [ 428.087925][T11105] ? __lock_acquire+0x7d10/0x7d10 [ 428.092970][T11105] ? lock_chain_count+0x20/0x20 [ 428.097916][T11105] ? vtime_user_exit+0x2c8/0x3e0 [ 428.102947][T11105] __x64_sys_sendto+0xda/0xf0 [ 428.107719][T11105] do_syscall_64+0x4c/0xa0 [ 428.112504][T11105] ? clear_bhb_loop+0x30/0x80 [ 428.117283][T11105] ? clear_bhb_loop+0x30/0x80 [ 428.121984][T11105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 428.127882][T11105] RIP: 0033:0x7f564030560e [ 428.132432][T11105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.152494][T11105] RSP: 002b:00007f563e59cde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 428.160920][T11105] RAX: ffffffffffffffda RBX: 00007f563e59e6c0 RCX: 00007f564030560e [ 428.169049][T11105] RDX: 0000000000000024 RSI: 00007f563e59cfe0 RDI: 0000000000000005 [ 428.177339][T11105] RBP: 0000000000000000 R08: 00007f563e59ce64 R09: 000000000000000c [ 428.186020][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 428.194161][T11105] R13: 0000000000000000 R14: 00007f563e59cfe0 R15: 0000000000000000 [ 428.202680][T11105] [ 428.205912][T11105] Kernel Offset: disabled [ 428.210906][T11105] Rebooting in 86400 seconds..