last executing test programs: 4m51.49398704s ago: executing program 32 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 4m34.032228442s ago: executing program 33 (id=61): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) unshare(0x6020400) fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000340)={[{@grpid}, {@grpquota}], [{@uid_lt}, {@subj_role={'subj_role', 0x3d, 'grpid[z\xa7^T\xb6b\xf0\xcc\x04\xdf\xff\xad\xc3\x9f0cACA\r\x8db_l\xaf\xd2\x03W\xf9\xd7\'\xdc\x04C\x1e\xd1\x7fK\xc2|D\xe8\xc1\xb77\x7fi\xda\x9a\x82\x01b\xa6\x8fg:\x1c6\x97\xab\xb1eK\xeb\xe7\xef\x13\x06N\xf18\xfb9\'\x15\xef\xe7\x8231\xd8\xaa\xe89{\xc9\x83e'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_eq}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x212042, 0x0) fallocate(r0, 0x0, 0x1, 0x7fff) 3m57.14175833s ago: executing program 34 (id=435): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000001c00)=0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 3m54.852346355s ago: executing program 35 (id=453): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 3m45.314500422s ago: executing program 5 (id=539): syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0000e5", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x11}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) 3m45.128241757s ago: executing program 36 (id=540): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x42}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x1}, 0x20000080) 3m45.104900998s ago: executing program 5 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x403, 0xf0bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffdff2a}]}]}, 0x28}}, 0x44850) 3m44.881834635s ago: executing program 5 (id=544): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f0000000140)=0x0) timer_settime(r3, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 3m44.689318182s ago: executing program 5 (id=545): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002880)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@fat=@usefree}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 3m44.401985121s ago: executing program 5 (id=547): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 3m43.721475653s ago: executing program 8 (id=456): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3m43.51156607s ago: executing program 5 (id=553): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x19, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x3, 0xf, 0x4, 0x0, 0x3}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x9, 0xa5, &(0x7f0000000380)=""/165, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0xee5, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x1, r0, 0x1], &(0x7f00000005c0)=[{0x4, 0x3, 0xf}], 0x10, 0x9}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x40) 3m43.130576782s ago: executing program 37 (id=553): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x19, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x3, 0xf, 0x4, 0x0, 0x3}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x9, 0xa5, &(0x7f0000000380)=""/165, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0xee5, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x1, r0, 0x1], &(0x7f00000005c0)=[{0x4, 0x3, 0xf}], 0x10, 0x9}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x40) 3m43.123162002s ago: executing program 8 (id=556): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20044801}, 0x44810) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 3m43.032108205s ago: executing program 8 (id=559): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000640)={[{@shortname_lower}, {@shortname_winnt}, {@fat=@nfs}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@utf8}, {@rodir}]}, 0x0, 0x2b2, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3b3741e, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 3m42.800634923s ago: executing program 8 (id=561): syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m42.24476869s ago: executing program 8 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m42.015946858s ago: executing program 38 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m35.566961156s ago: executing program 9 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 3m34.836917999s ago: executing program 9 (id=607): setresgid(0xee00, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000440)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x2) 3m34.407612133s ago: executing program 9 (id=608): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) 3m34.295947626s ago: executing program 9 (id=609): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 3m33.88304363s ago: executing program 9 (id=611): socket(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\b\x00'/51, 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000200", @ANYRES32=r0]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3m30.719924182s ago: executing program 9 (id=618): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xe6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJ\x81\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x931\xb88\x91j\xf6g\x9a\xd8\xee\xeb\x96Hc\xa5\x95\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\xff\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x13, r2, 0x0) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x16\x02\x00\x00\x00\x00\x00\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) pread64(r3, &(0x7f00000005c0)=""/243, 0xf3, 0x3) 3m30.543840367s ago: executing program 39 (id=618): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xe6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJ\x81\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x931\xb88\x91j\xf6g\x9a\xd8\xee\xeb\x96Hc\xa5\x95\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\xff\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x13, r2, 0x0) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x16\x02\x00\x00\x00\x00\x00\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) pread64(r3, &(0x7f00000005c0)=""/243, 0xf3, 0x3) 3m6.118995834s ago: executing program 1 (id=849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x100, 0x1, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 3m5.94433277s ago: executing program 1 (id=851): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r2, 0x20, 0x4000, 0x3000000) fallocate(r0, 0x0, 0x0, 0x8800000) 3m5.204300184s ago: executing program 1 (id=854): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x58, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x16}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 3m4.906155833s ago: executing program 1 (id=858): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x207000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m3.923040065s ago: executing program 1 (id=864): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d00000001090212"], 0x0) write(r0, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m3.14179457s ago: executing program 1 (id=870): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000640)={0x4}) 3m2.788748652s ago: executing program 40 (id=870): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000640)={0x4}) 3m2.326505847s ago: executing program 0 (id=879): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f0000001140)="db", 0x1, 0x4040804, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c) 3m0.942522741s ago: executing program 0 (id=892): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xf1}) close_range(r1, 0xffffffffffffffff, 0x0) 3m0.558252173s ago: executing program 0 (id=896): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0xffffffff, 0x81, 0xfffffff9, 0x6}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xd}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000140)={0x4, 0x4, [0x3958]}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x3c6, 0x10, 0x2, 0x200004, 0x14000000, 0x3d000, 0xfffffffc, 0x100, 0x9, 0xd, 0x3, 0xfffffffe, 0x400, 0xfa, 0x13, 0x100, 0xffffffa7, 0x9, 0x34b, 0x1, 0x3ff, 0x9, 0x8f, 0x10000bf, 0xaa18, 0xfffffffe, 0x8, 0x0, 0x7, 0xf58, 0xb13]}) 3m0.487000615s ago: executing program 0 (id=897): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m0.35969842s ago: executing program 0 (id=900): syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x400, 0x0, 0x1de}, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m58.18154912s ago: executing program 0 (id=917): io_setup(0x9, &(0x7f0000000240)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_destroy(r0) 2m57.917536108s ago: executing program 41 (id=917): io_setup(0x9, &(0x7f0000000240)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_destroy(r0) 3.051827062s ago: executing program 2 (id=2559): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x224410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x29c500a, 0x0, 0x4, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 2.632094345s ago: executing program 7 (id=2562): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x14, &(0x7f0000000f40)={[{@nolazytime}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@init_itable}, {@lazytime}], [{@euid_lt}]}, 0xfe, 0x26a, &(0x7f00000003c0)="$eJzs3T2IHGUcBvBn9iPJJotEbQRRAyKiB0fsBJvYKAQkBBFBhYiIlSRCTLDLWdlYaK2SSoQgdkY7JU2wUQSrqFecjaCHhYeFFiO7cwd7e6f3sR8Tbn4/mLt5b+ad/zvcPO9sMzsBGut4klNJ2kkWknSTFKM7nKiW4+vNq72b55KyfPaPYrhf1a5s9DuWZCnJ40lulGVZdpLL119c+evW0w+/e6n70MfXX+jN9STXra4sP7P20Zl3Pj/92OXvfvjtTJFT6W86r+krtvlbp0jumkWx20TRqXsE7MbZtz77cZD7u5M8OMx/N61U/7z3Lh660c2jH/5X3/d///7eeY4VmL6y7A7ugUsl0DitJP0UrcUk1XqrtbhYfYb/qX209fqFi28uvHbh0vlX656pgGnpp7f81JeHvzg2lv9f21X+gYOrnyw/d/baz4PYr7V32+vQbAcFzNZ91a9B/hdevvLIYH33+QcOAvmH5pJ/aK7J8n9iJmMC5sP9H5pL/qG55B8OsO7/b95n/r/qTzwwoG7u/9Bc8g/NNZp/AKBZysN1P4EM1KXu+QcAAAAAAAAAAAAAAAAAANjqau/muY1ldlWKTa1vPkhWn0zS2a5+e/g+4uTI8OfRP4vBbpuO1JlwNC89MOEBJvRpzU9f3/FLvfW/vb/e+lfOJ0tvJznZ6Wy9/or162//7txhe/eVCQvsUTHWfuL5aVfY2/uB/7k27fpbfTKyfmRs2+lbydeD+efkdvNPK/eM9Bqff/o7f8Xyjt74e8IDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDf/BgAA//+o3HKM") 2.568782638s ago: executing program 2 (id=2565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) 2.412055892s ago: executing program 6 (id=2568): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x87ff, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x88, 0x2a9, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x83084a, 0x0, 0x0, 0x0, 0x0) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x50, 0x46]}, 0x2f) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x484, &(0x7f0000000580)="$eJzs299vU2Ucx/HP92wd3SBaYEwwxDRyocG4bAPkx0wMglMTGOXHvDBKMlmHDW2H61CGoFwYE25NiNF444WRGGNQ79R4p/EfEBMTLvXGC3tB4pWJeU7P6TntCht2bdl4v5Ktp6ffnvOc5+n3nG/bpwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANKzz+0fGrZOtwIAALTT+PFjQyNc/wEAuK+c4P0/AADA/cTkaadM7xXLdti/X5E8lCueOz9xcKzx03rNf2aXH+/+ksMjO3buemr3nvD2zs9fblt05PiJ/ekDM4Wzs9lSKTuVnijmTs1MZZe8hWafX2+73wHpwplzU9PTpfTI4I6ah8+n/lyzdiA1uvvRw9vC2ImDY2PHYzHdif+99wVuV+H3yNP7MiXe/srGJXlqvi8Wee20Wq9/ENv9g5g4OOYfSD43WZxzD2bCjvBq+6Qn7KM2jEVT+iXXLutZnvdsCXkqybRpoGxHJHWF/fCE/8Hw4hvwlqUZd82181VJaa2AMbuHrZGnXTJ9sDeljOuzcPy7pUudbhxarluezst0a7RsR/3zgcsnd9o89FL6xeL0TCw2Y0FGrfTrQzvd4+empDyN+xlftmOdbgzazhVLN2Qa/flNv66QX5c+OLr7hX1H4hXGQ4tsx8UOBrdLuSYngtIhYxmzDtUQAAAAAAAAwGqXNE8nZfro66R/Px18ByTpcmdbhrYwT9/L9OFg2axuXkJXbH5H1Ur/7qe17e9NHpg5Oz+bO/36XMPH+5L7XyvNzU6eavywel3y1Xwcvtg8hiYlzNMlmW79ei36GD5lrg3BaaCrGvvZ01HbkvX79183D1Tms4TfITz/8pb4csMm38X3Y26fZp6ekWn6u81+W0x9WtBnqsT1y/TK1a1BnNcTOyilKluczuWzQy72X5k2/BLG+tNi3JZ9G6PYYRf7hkxXfqqNXRvE9kexIy72hkw3bzSO3RTF7nCxb8lUupkOY/vcwiNB7EAUO3hqJj/VqCuBu+Xyf1ymwrdpC3MjmAOyMP8vRteCBcXBbXK+2fxPxdZdDvL6D5f/JzcH7ezzk79R/l+Raf6vreHx+LkXnlbW+/+j/M/L9M3V2thwosCGKHZ4yR27QrjxPyrTbz9cr/ZN0AfB3WjU4uP/cP2ro0Xjvz62LhXst2d5Dh2SSvMXzkzm89lZFlhggYXqQqfPTGgHd/3fJdO1T3+v1jvB9X9d5V5U//3zTnT931e/oRZd/zfE1u0LqpFEt5ScK5xNDEjJ0vyFJ3OFydPZ09ni8PDQ3j1De4f2JHrC2i5aarqrViU3/p/L9HHmi+r73dr6r3H931e/oRaN/8bYur6aeqXpQ0cw/n/L9GPhevVziTvV/+H7rMe3VW6r+dmi8e+PrUsF+123PIcOAAAAAAAAAAAAAAAAACtawjx9KVP3xW4Lf2u2lPl/C36A1qL5XwOxdVNt+r1C050KAMA9zpOnT2R6TGV7161YJx2O32JV+y8AAP//CW8oOA==") 2.398730833s ago: executing program 3 (id=2569): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800900, 0x0) socket$inet6(0x10, 0x3, 0x0) fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000a0000000080000001"], 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 2.236086058s ago: executing program 6 (id=2571): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setgroups(0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000002940)={{}, {0x1, 0x7}, [], {0x4, 0x4}, [{}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xfffffffb) 2.235885308s ago: executing program 7 (id=2572): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.223506569s ago: executing program 3 (id=2573): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000440)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 2.17887745s ago: executing program 2 (id=2574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x80000000}) r3 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) 2.127601452s ago: executing program 6 (id=2576): r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x1) r1 = dup(r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, 0x0, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20024080}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4000000d, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.107197822s ago: executing program 3 (id=2577): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000030c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) 2.076343593s ago: executing program 7 (id=2578): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) unshare(0x8040480) r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) 1.988294906s ago: executing program 2 (id=2579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.86810697s ago: executing program 6 (id=2580): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0xaca80400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='smaps_rollup\x00') exit(0xffff) pread64(r2, &(0x7f0000000100)=""/31, 0x1f, 0x4) 1.8677896s ago: executing program 3 (id=2581): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0xffffffff, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.776350503s ago: executing program 3 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.119754524s ago: executing program 7 (id=2588): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xe, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.068156336s ago: executing program 2 (id=2589): syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x81}}}}}]}}]}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 980.026598ms ago: executing program 4 (id=2590): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x478, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x10000, 0xb, 0x1, {0x1, 0x2, 0x3, 0x1000, 0x1, 0x6}, {0x8, 0x2, 0x1, 0x8, 0x9, 0x8}, 0x2db8, 0x800, 0x22}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xed, 0x9c, 0x2, 0x5, 0x3, 0x1, 0x3ff, 0x75, 0x3, 0x8, 0x3, 0x6f2, 0x4, 0x1, 0x7, 0x3, 0xeb1, 0x4, 0x3, 0x2, 0x5, 0x7f, 0x6, 0x9, 0x8, 0x6, 0x8, 0x1, 0xfff, 0x100, 0x5, 0x8, 0x3, 0x5, 0x7fffffff, 0x4, 0x2, 0x0, 0x9, 0x6, 0x44e3, 0xb0, 0x0, 0x2408, 0x8, 0x5, 0x6, 0xffffffff, 0x8, 0x6d3, 0x6, 0x6, 0x0, 0x7, 0x2, 0x0, 0x3, 0x3, 0x3, 0x3, 0x8, 0x4967, 0x10, 0xffff, 0x3ff, 0xfffffffe, 0x7, 0x1, 0x5, 0x5, 0x2, 0xf, 0x9, 0x2, 0x3dc, 0x9, 0xfee, 0x7, 0x1000, 0x7, 0x8, 0x9, 0xfffffff7, 0x7, 0x800, 0x2, 0xfffffff7, 0x5, 0x10, 0x275, 0x7, 0xa000, 0x3c6, 0x8, 0x33de, 0x7, 0x9, 0x66d, 0x4, 0xf08, 0x8847, 0x6, 0xd83, 0x98000000, 0x34, 0x40, 0x2, 0x6, 0x81, 0x7, 0x1, 0x2, 0xfffffff8, 0xd, 0x7fffffff, 0x3, 0x8001, 0x5, 0x5, 0x3, 0x1, 0x5, 0x5, 0xfdd5, 0x6, 0x9b, 0x2, 0x8, 0x5, 0x528e, 0x7fffffff, 0x200, 0x7, 0x80, 0x3, 0x4, 0x81, 0xf8, 0x0, 0xffffffb9, 0xa5df, 0x2, 0xc, 0xabf0, 0xedb8, 0xfffffff7, 0x200, 0x9, 0x7fff, 0xfffff000, 0x9, 0xf, 0x7fffffff, 0x80, 0x0, 0x80, 0x3, 0x7f, 0xaa, 0x6, 0x6, 0x1474200, 0x6, 0x10000, 0xfffffe00, 0x0, 0x2f1, 0x2, 0x87a, 0xffff, 0x6, 0x7d, 0xffffff7f, 0x2, 0x119, 0x8, 0x800, 0x7, 0x5, 0x3ff, 0x12, 0x40, 0xf, 0x1bb1, 0xe, 0x2187, 0x6, 0x5, 0x6, 0x4, 0x7, 0xc, 0x3, 0x9, 0x8, 0x5fd6, 0x3e, 0xaf22, 0x5, 0xcf, 0x6, 0x5, 0xffff, 0x9, 0x0, 0x2, 0x8000, 0x0, 0x5, 0x8, 0x87, 0x88, 0x8, 0x9a2f, 0x2, 0x4, 0x100, 0xb9f6, 0x1, 0xc8, 0xed, 0x1, 0x40000000, 0x2, 0x7, 0x95a9124f, 0x200, 0x101, 0x7, 0x2, 0x36, 0x7592, 0x6, 0x2d, 0x0, 0x400, 0x2, 0x8, 0xd, 0x106f, 0x0, 0xe, 0xdcf, 0x5, 0x55, 0x3, 0x3, 0x101, 0xac8, 0x0, 0x6, 0xfffffff7, 0x54, 0xfffffc00, 0x7]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}}, 0x80000001, 0x101, 0xff, 0xd}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000030000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff0200000000000000000000000000010500090029000000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90) 979.838709ms ago: executing program 6 (id=2591): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x40800) socket$kcm(0x2, 0x2, 0x84) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000480)=""/190, 0xbe}, {&(0x7f0000002240)=""/4099, 0x1003}, {&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f0000000240)=""/166, 0xd7}, {&(0x7f0000001e80)=""/76, 0x4c}, {&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000002080)=""/195, 0xc3}], 0x9}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 842.260053ms ago: executing program 4 (id=2592): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000200)='./file1\x00', 0x20000, 0x40) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 702.190838ms ago: executing program 4 (id=2593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="c207", 0x2}], 0x1, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 440.123976ms ago: executing program 4 (id=2594): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 422.375247ms ago: executing program 6 (id=2595): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000380)=ANY=[], 0x5, 0x615b, &(0x7f0000008b40)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{}]}, 0x3, 0x5fe, &(0x7f0000000d40)="$eJzs3c9vFFUcAPDv7LalpcQuhKh4kCbEQKK0tIBpjAe4GtLgj3jRg5UWRAo0tEaLJpQELybGizEmnjQR/wslcuWkJw9ePBkSooajiWtmd6Z0293SnzuE/XySZWfe2+l7Q/vd9+bte7MBdKzB9J9SxL6ImEkiBpKFxbyuyDIH66+7/88nZ9JHEtXq638lkWRp+euT7Lk/O7g3In75OYk95WRFubPzVy9MTE9PXcn2h+cuzgzPzl89fP7ixLmpc1OXRl8cHTt+7PjYyJENnde1Jmmnbrz/4cBn4299/82/ycgPv48ncSJeyV649Dy2ymAM1v5PVp599I9tdWEFKWd/J9VqtZqnJV3F1om1y39/3RHxVAxEOR788gbi01cLrRywrapJ/b0b6ESJ+IcOlfcD8mv75dfBpUJ6JUA73DtZHwBYGf9d9bHB6K2NDey8n8TSYZ0kIjY2MtdoV0TcuT1+4+zt8RuxTeNwQHML1yPi6Wbxn9TivxK9UanFf6kh/tN+wensOU1/bYPlLx8qFv/QPvX4720a/wey+I8W8f9O+nytHsPvbrD8yoPN9/oa4r9vo6cEAAAAAAAAHevWyYh4odnn/6XF+T/RZP5Pf0Sc2ILyB5ftr/z8v3R3C4oBmrh3MuLlpvN/S/ns30p5yRLWSnQnZ89PTx2JiCci4lB070j3R1Yp4/Dne75ulTeYzf/LH2n5d7K5gFk97nbtaDxmcmJuYhOnDGTuXY94pun832Sx/U+atP/pO8PMGsvY89zN063yHh7/wHapfhtxsGn7/+CuFcnq9+cYrvUHhvNewUrPfvzFj63K32j8u8UEbF7a/u9cPf4rydL79cyuv4yj813VVnmN8d+z5v5/T/JGOd3uydI+mpibuzIS0ZOcKqepDemj668zPI7yeMjjJY3/QwdWH/9r1v/vi4iFZT87+btxTXHuyf/6/2hVH/1/KE4a/5Prav/XvzF6s/JTq/LXNv53rNbWH8pSjP9B3Vd5mPY0pjcJx65mWe2uLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DkoRsSuS0tDidqkvhiL6I2Jv7CxNX56de/7s5Q8uTaZ5te//L+Xf9DtQ30/y7/+vLNkfXbZ/NCJ2R8SX5b7a/tCZy9OTRZ88AAAAAAAAAAAAAAAAAAAAPCL6V67/Lw0N1fP+LBddO2DbdRVdAaAwTeL/1yLqAbSf9h86Vxr/SdGVAAqh/YfOJf6hc4l/6Fyrx//bY22rCNB22n/oXOIfAAAAAAAeK7v33/otiYiFl/pqj1RPltddaM2A7VYqugJAYdziBzqXqT/QuVzjAw+7/Udvy4M2c+OQmTObOBgAAAAAAAAAAAAAOs7Bfdb/Q6ey/h86l/X/0Lny9f/7C64H0H6u8YF4yEr+3ojY+916jwIAAAAAAAAAAAAAttLs/NULE9PTU1dsvPloVKOdG9Vq9Vr6V/Co1GfrN5JshnpbCs2nwrf/THvWcoL5Wr+1/eTi3pMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBG/wcAAP//RMIlxQ==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') 415.450047ms ago: executing program 2 (id=2596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x8, {0x8, 0xd, "394c0e9fab73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) close(r1) close(0x3) 332.137199ms ago: executing program 4 (id=2597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r2, r0}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000200)=0x6, 0x4) 241.958962ms ago: executing program 4 (id=2598): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='nobarrier,nls=ascii,part=0x0000000000000000,nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00'/15, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x44, 0x729, &(0x7f00000005c0)="$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") r0 = socket(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 202.927703ms ago: executing program 7 (id=2599): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xfffd, 0xfffffffd, 0x7, 0x1, 0xfefffffd}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 59.244158ms ago: executing program 3 (id=2600): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x20044080) 0s ago: executing program 7 (id=2601): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): m0: link becomes ready [ 147.410304][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.427959][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.438137][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.453670][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.471744][ T6975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.610053][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 147.629752][ T4334] tipc: Disabling bearer [ 147.657648][ T4334] tipc: Left network mode [ 147.726795][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 147.766276][ T7193] device vlan0 entered promiscuous mode [ 147.800927][ T7192] device vlan0 left promiscuous mode [ 147.944460][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.971854][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.024852][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.209252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.238055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.323819][ T6975] device veth0_vlan entered promiscuous mode [ 148.343252][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.360701][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.427055][ T6975] device veth1_vlan entered promiscuous mode [ 148.438823][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.461529][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.482274][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.547055][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.581650][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.606085][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.622507][ T25] audit: type=1326 audit(148.639:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.666" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feefe61be59 code=0x0 [ 148.670449][ T6975] device veth0_macvtap entered promiscuous mode [ 148.695822][ T7248] loop3: detected capacity change from 0 to 256 [ 148.699351][ T4827] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.725637][ T6975] device veth1_macvtap entered promiscuous mode [ 148.774441][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.792885][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.805965][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.823026][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.835095][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.850573][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.864930][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.880640][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.897510][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.909709][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.926879][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.962091][ T7248] FAT-fs (loop3): Directory bread(block 64) failed [ 148.974776][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.979216][ T7248] FAT-fs (loop3): Directory bread(block 65) failed [ 148.986645][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.988796][ T7248] FAT-fs (loop3): Directory bread(block 66) failed [ 148.997199][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.018865][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.027872][ T7248] FAT-fs (loop3): Directory bread(block 67) failed [ 149.033235][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.050097][ T7248] FAT-fs (loop3): Directory bread(block 68) failed [ 149.052625][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.056967][ T7248] FAT-fs (loop3): Directory bread(block 69) failed [ 149.067697][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.084551][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.089357][ T4827] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.094888][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.118325][ T7248] FAT-fs (loop3): Directory bread(block 70) failed [ 149.139215][ T7248] FAT-fs (loop3): Directory bread(block 71) failed [ 149.139384][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.147042][ T7248] FAT-fs (loop3): Directory bread(block 72) failed [ 149.163428][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.173574][ T7248] FAT-fs (loop3): Directory bread(block 73) failed [ 149.178605][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.199367][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.228048][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.251060][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.265723][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.278547][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.279528][ T4827] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 149.327323][ T4827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 149.338531][ T6975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.338764][ T4827] usb 1-1: Product: syz [ 149.352166][ T6975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.358552][ T4827] usb 1-1: Manufacturer: syz [ 149.367372][ T4827] usb 1-1: SerialNumber: syz [ 149.387133][ T6975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.406221][ T6975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.620518][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.628383][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.646843][ T7272] loop3: detected capacity change from 0 to 4096 [ 149.659395][ T4827] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 149.678260][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.699911][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 149.774151][ T7272] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 149.791648][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.803926][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.829412][ T7272] EXT4-fs (loop3): inline encryption not supported [ 149.830378][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.859800][ T7272] EXT4-fs (loop3): Test dummy encryption mode enabled [ 149.878896][ T7272] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 149.887740][ T7272] System zones: 0-5 [ 149.964626][ T7272] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 149.989130][ C0] usblp0: nonzero write bulk status received: -71 [ 150.023560][ T4769] usb 1-1: USB disconnect, device number 2 [ 150.116573][ T4334] device hsr_slave_0 left promiscuous mode [ 150.125035][ T4334] device hsr_slave_1 left promiscuous mode [ 150.130689][ T4769] usblp0: removed [ 150.147875][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.157199][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.170641][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.179775][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.189931][ T4334] device bridge_slave_1 left promiscuous mode [ 150.205811][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.224176][ T25] audit: type=1800 audit(150.239:12): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.670" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 150.271439][ T4334] device bridge_slave_0 left promiscuous mode [ 150.288835][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.313685][ T4334] device veth1_macvtap left promiscuous mode [ 150.329625][ T4334] device veth0_macvtap left promiscuous mode [ 150.339748][ T4334] device veth1_vlan left promiscuous mode [ 150.345562][ T4334] device veth0_vlan left promiscuous mode [ 150.825996][ T4827] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.861918][ T7284] overlayfs: statfs failed on './file0' [ 150.881859][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 150.925001][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 150.941460][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.958414][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.046896][ T4334] bond0 (unregistering): Released all slaves [ 151.145598][ T7321] device syzkaller1 entered promiscuous mode [ 151.176375][ T7328] "syz.2.683" (7328) uses obsolete ecb(arc4) skcipher [ 151.199422][ T4827] usb 4-1: config 0 has no interfaces? [ 151.319376][ T4827] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 151.339558][ T4827] usb 4-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 151.359916][ T4827] usb 4-1: Product: syz [ 151.367780][ T4827] usb 4-1: SerialNumber: syz [ 151.387394][ T4827] usb 4-1: config 0 descriptor?? [ 151.648120][ T4234] usb 4-1: USB disconnect, device number 2 [ 151.654235][ T4232] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.915315][ T7359] loop9: detected capacity change from 0 to 4096 [ 151.929648][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 151.945374][ C1] print_req_error: 115 callbacks suppressed [ 151.945388][ C1] blk_update_request: I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 151.982260][ C1] blk_update_request: I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.993497][ C1] buffer_io_error: 138 callbacks suppressed [ 151.993510][ C1] Buffer I/O error on dev loop9, logical block 496, async page read [ 152.040783][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 152.052292][ C1] blk_update_request: I/O error, dev loop9, sector 1040 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 152.064113][ C1] blk_update_request: I/O error, dev loop9, sector 2064 op 0x0:(READ) flags 0x80700 phys_seg 60 prio class 0 [ 152.066188][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 152.086585][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.152306][ T7350] loop1: detected capacity change from 0 to 32768 [ 152.282777][ T7350] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 152.299346][ T4232] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 152.309696][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.317773][ T4232] usb 3-1: Product: syz [ 152.322189][ T4232] usb 3-1: Manufacturer: syz [ 152.327405][ T4232] usb 3-1: SerialNumber: syz [ 152.371993][ T7350] JBD2: Ignoring recovery information on journal [ 152.503550][ T7350] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 152.689415][ T4234] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.917122][ T7391] loop4: detected capacity change from 0 to 64 [ 152.963439][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 153.025900][ T4203] ocfs2: Unmounting device (7,1) on (node local) [ 153.050050][ T4232] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 153.078398][ T4232] usb 3-1: clock source 0 is not valid, cannot use [ 153.129864][ T4234] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.159325][ T4232] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 153.166360][ T4234] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.207445][ T4234] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.238898][ T4234] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 153.268107][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.301572][ T4234] usb 1-1: config 0 descriptor?? [ 153.489337][ T4232] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 153.515552][ T4232] usb 3-1: clock source 0 is not valid, cannot use [ 153.579286][ T4232] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 153.611448][ T4232] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 153.697643][ T4232] usb 3-1: USB disconnect, device number 9 [ 153.784340][ T4234] hid-generic 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 153.988243][ T4234] usb 1-1: USB disconnect, device number 3 [ 154.028796][ T25] audit: type=1326 audit(154.039:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.064884][ T7437] fido_id[7437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 154.128836][ T25] audit: type=1326 audit(154.039:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.194028][ T25] audit: type=1326 audit(154.099:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.287154][ T25] audit: type=1326 audit(154.099:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.341741][ T25] audit: type=1326 audit(154.099:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.354932][ T7441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.376454][ T25] audit: type=1326 audit(154.099:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.437948][ T7459] loop4: detected capacity change from 0 to 128 [ 154.451279][ T25] audit: type=1326 audit(154.099:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.548265][ T25] audit: type=1326 audit(154.099:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.572119][ T25] audit: type=1326 audit(154.109:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.599920][ T7459] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.612097][ T25] audit: type=1326 audit(154.109:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.712" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x7ffc0000 [ 154.664776][ T7459] syz.4.718 (pid 7459) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 154.724232][ T7441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.776055][ T7478] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 154.815842][ T7478] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 154.822528][ T7469] loop2: detected capacity change from 0 to 2048 [ 154.899499][ T7469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.071254][ T7441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.104579][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 155.268970][ T7441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.429159][ T1326] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.488678][ T7441] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.520997][ T7441] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.559510][ T7441] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.602362][ T7441] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.696357][ T7513] loop0: detected capacity change from 0 to 512 [ 155.760518][ T7513] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none. [ 155.836817][ T7513] EXT4-fs (loop0): shut down requested (0) [ 155.911702][ T7513] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.729: error -117 reading directory block [ 156.049581][ T1326] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 156.058652][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.089092][ T1326] usb 2-1: Product: syz [ 156.093336][ T1326] usb 2-1: Manufacturer: syz [ 156.097936][ T1326] usb 2-1: SerialNumber: syz [ 156.115939][ T1326] usb 2-1: config 0 descriptor?? [ 156.288063][ T7539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 156.375879][ T7543] loop2: detected capacity change from 0 to 128 [ 156.475066][ T7543] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.615749][ T7511] loop4: detected capacity change from 0 to 32768 [ 156.654864][ T7556] loop3: detected capacity change from 0 to 2048 [ 156.685549][ T7511] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 156.704809][ T7511] JBD2: Ignoring recovery information on journal [ 156.757000][ T7556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.920788][ T7511] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 157.121884][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 157.244345][ T1326] usb 2-1: ATUSB: AT86RF231 version 106 [ 157.453960][ T1326] usb 2-1: atusb_control_msg: req 0x00 val 0x0 idx 0x0, error -71 [ 157.482189][ T1326] usb 2-1: Firmware version (0.0) predates our first public release. [ 157.514534][ T1326] usb 2-1: Please update to version 0.2 or newer [ 157.559544][ T1326] usb 2-1: atusb_probe: initialization failed, error = -71 [ 157.572434][ T1326] atusb: probe of 2-1:0.0 failed with error -71 [ 157.610553][ T1326] usb 2-1: USB disconnect, device number 9 [ 157.672166][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 158.181737][ T7619] fuse: root generation should be zero [ 158.246005][ T7622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.396775][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 158.522916][ T7635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3088557071 (12354228284 ns) > initial count (5925470088 ns). Using initial count to start timer. [ 158.781858][ T7653] loop3: detected capacity change from 0 to 512 [ 158.847477][ T7653] EXT4-fs (loop3): Ignoring removed nobh option [ 158.915442][ T7653] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 159.034812][ T7676] xt_hashlimit: size too large, truncated to 1048576 [ 159.237111][ T7685] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 159.975430][ T7721] device batadv_slave_1 entered promiscuous mode [ 160.112711][ T7720] device batadv_slave_1 left promiscuous mode [ 160.429130][ T4827] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 160.799329][ T4827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.844925][ T4827] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 161.029491][ T4827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.045768][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.055318][ T4827] usb 3-1: Product: syz [ 161.087506][ T4827] usb 3-1: Manufacturer: syz [ 161.098666][ T4827] usb 3-1: SerialNumber: syz [ 161.180255][ T4827] cdc_mbim 3-1:1.0: skipping garbage [ 161.201848][ T7763] loop4: detected capacity change from 0 to 2048 [ 161.263805][ T7763] NILFS (loop4): invalid segment: Magic number mismatch [ 161.279196][ T7763] NILFS (loop4): trying rollback from an earlier position [ 161.325649][ T7763] NILFS (loop4): recovery complete [ 161.379304][ T4769] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.390344][ T7728] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.397413][ T7772] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.414463][ T7774] loop3: detected capacity change from 0 to 2048 [ 161.479127][ T7774] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 161.529475][ T7774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.649033][ T4769] usb 1-1: Using ep0 maxpacket: 32 [ 161.773381][ T4769] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 161.787296][ T4769] usb 1-1: config 0 has no interface number 0 [ 161.798966][ T4769] usb 1-1: config 0 interface 184 has no altsetting 0 [ 161.959348][ T4769] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 161.972998][ T4769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.001482][ T4769] usb 1-1: Product: syz [ 162.025631][ T4769] usb 1-1: Manufacturer: syz [ 162.048513][ T4769] usb 1-1: SerialNumber: syz [ 162.059860][ T7728] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.079242][ T4827] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 162.092208][ T4769] usb 1-1: config 0 descriptor?? [ 162.097723][ T4827] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 162.104965][ T7799] loop3: detected capacity change from 0 to 128 [ 162.130145][ T4769] smsc75xx v1.0.0 [ 162.153263][ T7799] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 162.162717][ T4827] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 46:b9:68:8d:b9:77 [ 162.178871][ T7799] hpfs: filesystem error: improperly stopped [ 162.190300][ T7799] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 162.225799][ T7799] hpfs: You really don't want any checks? You are crazy... [ 162.244315][ T7799] hpfs: hpfs_map_sector(): read error [ 162.255742][ T7799] hpfs: code page support is disabled [ 162.263176][ T7799] hpfs: hpfs_map_4sectors(): unaligned read [ 162.276011][ T7799] hpfs: hpfs_map_4sectors(): unaligned read [ 162.290323][ T7799] hpfs: filesystem error: unable to find root dir [ 162.323821][ T4827] usb 3-1: USB disconnect, device number 10 [ 162.346086][ T4827] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 162.677012][ T7820] netlink: 27 bytes leftover after parsing attributes in process `syz.4.806'. [ 162.963086][ T7830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.059178][ T6846] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 163.237638][ T7841] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 163.239264][ T4769] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 163.246094][ T7841] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 163.264671][ T4769] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.484373][ T6846] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 163.504643][ T6846] usb 5-1: config 1 has no interface number 0 [ 163.539347][ T4769] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 163.545664][ T6846] usb 5-1: config 1 interface 242 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.571959][ T6846] usb 5-1: config 1 interface 242 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.581045][ T4769] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 163.594158][ T6846] usb 5-1: config 1 interface 242 has no altsetting 0 [ 163.615446][ T7868] loop1: detected capacity change from 0 to 1024 [ 163.627249][ T4769] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 163.639998][ T4769] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 163.649618][ T4769] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 163.671364][ T4769] usb 1-1: USB disconnect, device number 4 [ 163.689574][ T6846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.696373][ T7868] EXT4-fs (loop1): Ignoring removed orlov option [ 163.728665][ T6846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.774458][ T6846] usb 5-1: SerialNumber: syz [ 163.784597][ T7868] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 163.833243][ T6846] hub 5-1:1.242: bad descriptor, ignoring hub [ 163.869977][ T6846] hub: probe of 5-1:1.242 failed with error -5 [ 164.040989][ T6846] cdc_acm 5-1:1.242: ttyACM0: USB ACM device [ 164.140769][ T6846] usb 5-1: USB disconnect, device number 12 [ 164.255652][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 164.294503][ T7907] loop3: detected capacity change from 0 to 16 [ 164.390648][ T7907] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 164.426131][ T7907] sock: sock_set_timeout: `syz.3.825' (pid 7907) tries to set negative timeout [ 165.748798][ T7984] loop1: detected capacity change from 0 to 1024 [ 165.794311][ T7984] EXT4-fs (loop1): Ignoring removed orlov option [ 165.848341][ T7984] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 166.552956][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 166.898617][ T8008] loop4: detected capacity change from 0 to 4096 [ 166.946271][ T7979] loop3: detected capacity change from 0 to 32768 [ 166.946371][ T8016] loop1: detected capacity change from 0 to 2048 [ 167.005995][ T8016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.133379][ T7979] XFS (loop3): Mounting V5 Filesystem [ 167.247171][ T7979] XFS (loop3): Ending clean mount [ 167.415655][ T6669] XFS (loop3): Unmounting Filesystem [ 167.549795][ T4190] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 167.564177][ T4190] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 167.731826][ T8048] Invalid ELF header magic: != ELF [ 167.793453][ T4203] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 1366: 0x4b != 0xa7 [ 167.874054][ T4203] UDF-fs: error (device loop1): udf_read_inode: (ino 1366) failed !bh [ 167.930355][ T4203] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 1366: 0x4b != 0xa7 [ 167.970626][ T4203] UDF-fs: error (device loop1): udf_read_inode: (ino 1366) failed !bh [ 168.049003][ T8028] loop0: detected capacity change from 0 to 40427 [ 168.150647][ T8028] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 168.157619][ T8028] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.244656][ T8028] F2FS-fs (loop0): invalid crc value [ 168.317955][ T8028] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.375645][ T8062] device gre1 entered promiscuous mode [ 168.443216][ T8028] F2FS-fs (loop0): Start checkpoint disabled! [ 168.516125][ T8028] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 168.544090][ T1280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.576539][ T8028] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 168.663476][ T1280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.676246][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 168.676259][ T25] audit: type=1800 audit(168.689:32): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.861" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 168.715969][ T8028] attempt to access beyond end of device [ 168.715969][ T8028] loop0: rw=2049, want=53376, limit=40427 [ 168.811078][ T1280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.891981][ T1280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.935272][ T8090] loop2: detected capacity change from 0 to 128 [ 169.025873][ T8090] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.107145][ T8064] loop4: detected capacity change from 0 to 32768 [ 169.253423][ T1280] tipc: Disabling bearer [ 169.258495][ T1280] tipc: Left network mode [ 169.493831][ T8064] XFS (loop4): Mounting V5 Filesystem [ 169.590346][ T8064] XFS (loop4): Ending clean mount [ 169.639684][ T8064] XFS (loop4): Quotacheck needed: Please wait. [ 169.652888][ T4480] attempt to access beyond end of device [ 169.652888][ T4480] loop0: rw=2049, want=40992, limit=40427 [ 169.710311][ T8064] XFS (loop4): Quotacheck: Done. [ 170.075078][ T1280] bond1: (slave gretap1): Releasing active interface [ 170.110335][ T4190] XFS (loop4): Unmounting Filesystem [ 170.324410][ T8110] chnl_net:caif_netlink_parms(): no params data found [ 170.615239][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.644196][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.710575][ T8110] device bridge_slave_0 entered promiscuous mode [ 170.807470][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.852115][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.871115][ T8110] device bridge_slave_1 entered promiscuous mode [ 171.114029][ T8110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.152242][ T8110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.357560][ T1280] device hsr_slave_0 left promiscuous mode [ 171.369509][ T8198] loop4: detected capacity change from 0 to 1024 [ 171.381551][ T1280] device hsr_slave_1 left promiscuous mode [ 171.405263][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.449658][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.514035][ T8198] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.586270][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.615182][ T6846] Bluetooth: hci4: command 0x0409 tx timeout [ 171.639875][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.665636][ T8198] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 171.686478][ T1280] device bridge_slave_1 left promiscuous mode [ 171.738919][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.810206][ T1280] device bridge_slave_0 left promiscuous mode [ 171.816421][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.992266][ T1280] device veth1_macvtap left promiscuous mode [ 171.998568][ T1280] device veth0_macvtap left promiscuous mode [ 172.035698][ T1280] device veth1_vlan left promiscuous mode [ 172.052923][ T1280] device veth0_vlan left promiscuous mode [ 172.376542][ T1280] bond1 (unregistering): Released all slaves [ 172.596377][ T1280] team0 (unregistering): Port device team_slave_1 removed [ 172.631027][ T1280] team0 (unregistering): Port device team_slave_0 removed [ 172.653915][ T1280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.667209][ T1280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.767789][ T1280] bond0 (unregistering): Released all slaves [ 172.807580][ T8251] Bluetooth: hci0: invalid len left 7, exp >= 108 [ 172.861488][ T8110] team0: Port device team_slave_0 added [ 172.873932][ T8110] team0: Port device team_slave_1 added [ 172.968631][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.012583][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.128395][ T8110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.245844][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.259277][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.354125][ T8110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.535221][ T8277] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 173.554990][ T8110] device hsr_slave_0 entered promiscuous mode [ 173.589890][ T8110] device hsr_slave_1 entered promiscuous mode [ 173.745601][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 173.913776][ T8258] loop3: detected capacity change from 0 to 40427 [ 173.993708][ T8258] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 174.025372][ T8258] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.084308][ T8258] F2FS-fs (loop3): invalid crc value [ 174.190498][ T8258] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.296280][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 174.431428][ T8258] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.438506][ T8258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.484289][ T8309] loop2: detected capacity change from 0 to 256 [ 174.612501][ T8312] loop4: detected capacity change from 0 to 512 [ 174.744644][ T6669] attempt to access beyond end of device [ 174.744644][ T6669] loop3: rw=2049, want=45104, limit=40427 [ 174.771484][ T8312] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 175.119213][ T4833] kernel write not supported for file /vcsa1 (pid: 4833 comm: kworker/1:18) [ 175.218991][ T8299] chnl_net:caif_netlink_parms(): no params data found [ 175.264580][ T8110] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.324704][ T8110] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.386127][ T8110] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.423682][ T8110] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.559142][ T4827] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.615219][ T6839] Bluetooth: hci0: command 0x0406 tx timeout [ 175.628726][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.636044][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.644437][ T8299] device bridge_slave_0 entered promiscuous mode [ 175.665350][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.672626][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.680844][ T8299] device bridge_slave_1 entered promiscuous mode [ 175.716403][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.748267][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.779280][ T6839] Bluetooth: hci4: command 0x040f tx timeout [ 175.789396][ T8110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.809265][ T4827] usb 5-1: Using ep0 maxpacket: 8 [ 175.835307][ T8299] team0: Port device team_slave_0 added [ 175.882480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.929422][ T4827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 175.938209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.960362][ T8110] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.969106][ T4827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.992807][ T8299] team0: Port device team_slave_1 added [ 176.029097][ T4827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.068756][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.076248][ T4827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 176.106939][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.138994][ T4827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 176.179475][ T4827] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 176.219180][ T4827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.232264][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.254233][ T8361] loop2: detected capacity change from 0 to 512 [ 176.264691][ T4827] usb 5-1: config 0 descriptor?? [ 176.283166][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.317208][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.379858][ T4200] Bluetooth: hci5: urb ffff888062bf8600 submission failed (90) [ 176.414645][ T8361] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.425424][ T4236] Bluetooth: hci2: command 0x0409 tx timeout [ 176.484994][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.549241][ T4236] usb 5-1: USB disconnect, device number 13 [ 176.549917][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.583840][ T8347] loop3: detected capacity change from 0 to 40427 [ 176.602052][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.612975][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.620082][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.648352][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.656817][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.666634][ T8347] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 176.677930][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.695193][ T8347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 176.697070][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.710471][ T4542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.749781][ T8347] F2FS-fs (loop3): invalid crc value [ 176.768245][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.824653][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.838635][ T8347] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.910465][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.939018][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.003163][ T8299] device hsr_slave_0 entered promiscuous mode [ 177.015166][ T8347] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 177.028727][ T8347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 177.041089][ T8299] device hsr_slave_1 entered promiscuous mode [ 177.066007][ T8299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.109093][ T8299] Cannot create hsr debugfs directory [ 177.115000][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.130195][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.157261][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.185946][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.204849][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.224610][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.234498][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.243632][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.580888][ T8394] netlink: 'syz.4.941': attribute type 4 has an invalid length. [ 177.685825][ T8396] netlink: 'syz.4.941': attribute type 4 has an invalid length. [ 177.807894][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.825330][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.849485][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 177.860816][ T8110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.020625][ T8406] loop4: detected capacity change from 0 to 1024 [ 178.375904][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.489578][ T6846] Bluetooth: hci2: command 0x041b tx timeout [ 178.497142][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.624393][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.647568][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.690394][ T8381] loop2: detected capacity change from 0 to 40427 [ 178.733527][ T8381] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 178.753574][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.780404][ T8381] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.798755][ T8110] device veth0_vlan entered promiscuous mode [ 178.821140][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.859564][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.882749][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.900162][ T8381] F2FS-fs (loop2): invalid crc value [ 178.923083][ T8381] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 178.937552][ T8110] device veth1_vlan entered promiscuous mode [ 178.951326][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.959404][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.973705][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.027377][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.037462][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.048151][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.059394][ T8110] device veth0_macvtap entered promiscuous mode [ 179.068992][ T8110] device veth1_macvtap entered promiscuous mode [ 179.074613][ T8381] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 179.142627][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.170223][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.213655][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.228714][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.247534][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.259277][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.269443][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.275547][ T8381] F2FS-fs (loop2): recover fsync data on readonly fs [ 179.280305][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.280327][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.297157][ T8381] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 179.297181][ T8381] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.344238][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.365790][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.377434][ T8299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 179.396025][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.425991][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.456789][ T8423] loop4: detected capacity change from 0 to 256 [ 179.473164][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.496654][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.522631][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.548350][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.565232][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.576302][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.590750][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.601733][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.613677][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.627923][ T8299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 179.695642][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.711242][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.761572][ T8299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 179.798183][ T8110] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.816152][ T8110] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.827706][ T8110] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.836640][ T8110] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.875876][ T8299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 179.976289][ T8428] bridge0: port 3(syz_tun) entered blocking state [ 179.999223][ T8428] bridge0: port 3(syz_tun) entered disabled state [ 180.029816][ T8428] device syz_tun entered promiscuous mode [ 180.035994][ T8428] bridge0: port 3(syz_tun) entered blocking state [ 180.042492][ T8428] bridge0: port 3(syz_tun) entered forwarding state [ 180.058839][ T8431] autofs4:pid:8431:autofs_fill_super: pipe file descriptor does not contain proper ops [ 180.177649][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 180.240620][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.263239][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.282223][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.305453][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.315125][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.328303][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.358026][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.397661][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.417453][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.430961][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.433504][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.479486][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.486532][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.522762][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.537209][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.588315][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.594000][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 180.606853][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.657146][ T8449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.660408][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.683023][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.741935][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.798236][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.829873][ T8456] netlink: 68 bytes leftover after parsing attributes in process `syz.6.960'. [ 180.904527][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.924881][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.937324][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.009556][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.036514][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.048404][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.057727][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.066684][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.083624][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.163435][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.327508][ T8476] netlink: 'syz.6.968': attribute type 1 has an invalid length. [ 181.340010][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.6.968'. [ 181.384701][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.392056][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.713114][ T154] device hsr_slave_0 left promiscuous mode [ 181.713491][ T154] device hsr_slave_1 left promiscuous mode [ 181.713867][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.713913][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.714335][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.714353][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.714677][ T154] device bridge_slave_1 left promiscuous mode [ 181.714751][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.715756][ T154] device bridge_slave_0 left promiscuous mode [ 181.715825][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.726180][ T154] device veth1_macvtap left promiscuous mode [ 181.726263][ T154] device veth0_macvtap left promiscuous mode [ 181.726348][ T154] device veth1_vlan left promiscuous mode [ 181.726409][ T154] device veth0_vlan left promiscuous mode [ 182.338433][ T154] team0 (unregistering): Port device team_slave_1 removed [ 182.366665][ T154] team0 (unregistering): Port device team_slave_0 removed [ 182.399620][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.440180][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.537913][ T154] bond0 (unregistering): Released all slaves [ 182.600554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.615207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.654927][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.669314][ T1326] Bluetooth: hci2: command 0x0419 tx timeout [ 182.776050][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 182.871252][ T8515] device ip6erspan0 entered promiscuous mode [ 183.478066][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.509873][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.611871][ T8299] device veth0_vlan entered promiscuous mode [ 183.652258][ T8299] device veth1_vlan entered promiscuous mode [ 183.794459][ T8299] device veth0_macvtap entered promiscuous mode [ 183.925925][ T8299] device veth1_macvtap entered promiscuous mode [ 184.048584][ T8559] input: syz1 as /devices/virtual/input/input10 [ 184.064360][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.145484][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.242593][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.340132][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.428563][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.477626][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.522126][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.549045][ C0] sched: RT throttling activated [ 184.572642][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.627900][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.551706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.560681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.569127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.577189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.605153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.637734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.678690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.730294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.749522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.769470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.794702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.803340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.844865][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.887070][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.901586][ T8607] loop4: detected capacity change from 0 to 512 [ 185.926050][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.956970][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.997309][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.028109][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.055777][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.079187][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.110054][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.118443][ T8607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 186.133027][ T8593] tipc: Started in network mode [ 186.138090][ T8593] tipc: Node identity ac1414aa, cluster identity 4711 [ 186.146291][ T8607] System zones: 1-2, 4-12, 8-8 [ 186.165428][ T8593] tipc: Enabled bearer , priority 10 [ 186.189027][ T8607] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1003: iget: bad i_size value: 38620345925642 [ 186.192171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.216594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.227820][ T8299] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.237031][ T8299] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.246892][ T8299] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.256243][ T8299] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.288458][ T8607] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1003: couldn't read orphan inode 15 (err -117) [ 186.358954][ T8618] loop3: detected capacity change from 0 to 16 [ 186.389508][ T8607] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 186.456396][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.474703][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.498244][ T8618] erofs: (device loop3): mounted with root inode @ nid 36. [ 186.519475][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.560367][ T8618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.588977][ T8607] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1003: bg 0: block 5: invalid block bitmap [ 186.614211][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.655717][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.679359][ T8607] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 186.721857][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.764864][ T8607] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.764864][ T8607] [ 186.862280][ T8607] EXT4-fs (loop4): Total free blocks count 0 [ 186.868306][ T8607] EXT4-fs (loop4): Free/Dirty block details [ 186.915127][ T8607] EXT4-fs (loop4): free_blocks=0 [ 186.950046][ T8607] EXT4-fs (loop4): dirty_blocks=2 [ 186.955105][ T8607] EXT4-fs (loop4): Block reservation details [ 187.009257][ T8607] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 187.290575][ T6839] tipc: Node number set to 2886997162 [ 187.506883][ T8622] loop6: detected capacity change from 0 to 32768 [ 187.571598][ T1326] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 187.693563][ T25] audit: type=1800 audit(187.709:33): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1006" name=03 dev="loop6" ino=7 res=0 errno=0 [ 188.009277][ T1326] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.017306][ T1326] usb 8-1: config 0 has no interface number 0 [ 188.049165][ T1326] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.127988][ T1326] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.149109][ T1326] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.202353][ T1326] usb 8-1: config 0 interface 1 has no altsetting 0 [ 188.219552][ T1326] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 188.257218][ T1326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.307739][ T1326] usb 8-1: config 0 descriptor?? [ 188.510011][ T8686] 9pnet: Insufficient options for proto=fd [ 188.951996][ T8671] loop3: detected capacity change from 0 to 32768 [ 188.959858][ T8703] overlayfs: failed to clone upperpath [ 189.029695][ T1326] hid (null): invalid report_size 41103 [ 189.054321][ T8671] XFS (loop3): Mounting V5 Filesystem [ 189.139137][ T4236] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 189.165288][ T8671] XFS (loop3): Ending clean mount [ 189.198965][ T8671] XFS (loop3): Quotacheck needed: Please wait. [ 189.239226][ T1326] uclogic 0003:145F:0212.000A: failed retrieving string descriptor #100: -71 [ 189.253215][ T1326] uclogic 0003:145F:0212.000A: failed retrieving pen parameters: -71 [ 189.279151][ T1326] uclogic 0003:145F:0212.000A: pen probing failed: -71 [ 189.289284][ T1326] uclogic 0003:145F:0212.000A: failed probing parameters: -71 [ 189.303825][ T8671] XFS (loop3): Quotacheck: Done. [ 189.324401][ T1326] uclogic: probe of 0003:145F:0212.000A failed with error -71 [ 189.364944][ T1326] usb 8-1: USB disconnect, device number 2 [ 189.416564][ T6669] XFS (loop3): Unmounting Filesystem [ 189.530806][ T4831] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 189.569556][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.586587][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.602166][ T4236] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.615826][ T4236] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.626005][ T4236] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.651825][ T4236] usb 7-1: config 0 descriptor?? [ 189.919519][ T4831] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.927543][ T4831] usb 5-1: config 0 has no interface number 0 [ 189.983731][ T8761] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 190.109473][ T4831] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 190.135956][ T4831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.137504][ T4236] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 190.165241][ T4831] usb 5-1: Product: syz [ 190.168947][ T4236] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 190.195580][ T4831] usb 5-1: Manufacturer: syz [ 190.208755][ T4236] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 190.223039][ T4831] usb 5-1: SerialNumber: syz [ 190.234716][ T4831] usb 5-1: config 0 descriptor?? [ 190.291260][ T4831] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 190.455051][ T4236] usb 7-1: USB disconnect, device number 5 [ 190.885334][ T8800] Set syz1 is full, maxelem 14 reached [ 191.073419][ T8813] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1051'. [ 191.369356][ T4831] gspca_spca1528: reg_w err -71 [ 191.374285][ T4831] spca1528: probe of 5-1:0.1 failed with error -71 [ 191.408068][ T4831] usb 5-1: USB disconnect, device number 14 [ 192.293781][ T8870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1069'. [ 192.362809][ T8876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1069'. [ 192.375769][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1071'. [ 192.391606][ T8879] loop6: detected capacity change from 0 to 128 [ 192.447496][ T8879] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 192.514990][ T8879] hpfs: filesystem error: improperly stopped [ 192.542746][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 192.553208][ T8879] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 192.575560][ T8879] hpfs: You really don't want any checks? You are crazy... [ 192.588413][ T8879] hpfs: Code page index out of array [ 192.637370][ T8879] hpfs: code page support is disabled [ 192.665430][ T8879] hpfs: hpfs_map_4sectors(): unaligned read [ 192.671531][ T8879] hpfs: hpfs_map_4sectors(): unaligned read [ 192.701214][ T8879] hpfs: filesystem error: unable to find root dir [ 192.989560][ T8916] loop6: detected capacity change from 0 to 512 [ 193.067080][ T8920] Bluetooth: (null): Too short H5 packet [ 193.154183][ T8916] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.218055][ T8916] EXT4-fs error (device loop6): ext4_group_add:1699: inode #7: comm syz.6.1080: iget: checksum invalid [ 193.254555][ T8916] EXT4-fs warning (device loop6): ext4_group_add:1701: Error opening resize inode [ 194.013819][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.020159][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.803114][ T8973] loop7: detected capacity change from 0 to 65536 [ 194.972612][ T9000] loop4: detected capacity change from 0 to 131072 [ 195.030945][ T9000] F2FS-fs (loop4): Test dummy encryption mode enabled [ 195.060172][ T8973] XFS (loop7): Mounting V5 Filesystem [ 195.082950][ T9000] F2FS-fs (loop4): invalid crc value [ 195.141106][ T9000] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.164574][ T8973] XFS (loop7): Ending clean mount [ 195.200749][ T9000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.274096][ T8973] XFS (loop7): Quotacheck needed: Please wait. [ 195.280263][ T9008] loop3: detected capacity change from 0 to 32768 [ 195.365962][ T9008] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1112 (9008) [ 195.393462][ T8973] XFS (loop7): Quotacheck: Done. [ 195.461753][ T9008] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 195.533560][ T9008] BTRFS info (device loop3): enabling disk space caching [ 195.564559][ T9008] BTRFS info (device loop3): force clearing of disk cache [ 195.619932][ T9008] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.694501][ T9008] BTRFS info (device loop3): use zstd compression, level 3 [ 195.752137][ T9008] BTRFS info (device loop3): disk space caching is enabled [ 195.809485][ T9045] loop4: detected capacity change from 0 to 128 [ 195.816178][ T9008] BTRFS info (device loop3): has skinny extents [ 195.967409][ T9045] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.092293][ T9045] FAT-fs (loop4): error, parent dir link count too low (2) [ 196.159174][ T9008] BTRFS info (device loop3): enabling ssd optimizations [ 196.163480][ T9035] ODEBUG: Out of memory. ODEBUG disabled [ 196.174333][ T9045] FAT-fs (loop4): Filesystem has been set read-only [ 196.185694][ T9008] BTRFS info (device loop3): clearing free space tree [ 196.219366][ T9008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.281242][ T9008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 197.086318][ T4190] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.130615][ T9035] syz.7.1102 (9035): drop_caches: 2 [ 197.509450][ T8299] XFS (loop7): Unmounting Filesystem [ 197.919729][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 197.930212][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 197.937769][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.947825][ T4200] Workqueue: hci1 hci_rx_work [ 197.952532][ T4200] Call Trace: [ 197.955804][ T4200] [ 197.958731][ T4200] dump_stack_lvl+0x188/0x250 [ 197.963430][ T4200] ? show_regs_print_info+0x20/0x20 [ 197.968638][ T4200] ? load_image+0x400/0x400 [ 197.973159][ T4200] sysfs_create_dir_ns+0x26a/0x290 [ 197.978275][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 197.982952][ T4200] ? process_one_work+0x85f/0x1010 [ 197.988070][ T4200] ? do_raw_spin_unlock+0x11d/0x230 [ 197.993272][ T4200] kobject_add_internal+0x6e0/0xd90 [ 197.998484][ T4200] kobject_add+0x160/0x230 [ 198.002907][ T4200] ? kobject_init+0x1d0/0x1d0 [ 198.007602][ T4200] ? klist_children_get+0x50/0x50 [ 198.012632][ T4200] ? get_device_parent+0x121/0x3f0 [ 198.017745][ T4200] device_add+0x483/0xfb0 [ 198.022087][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 198.027034][ T4200] le_conn_complete_evt+0xc48/0x15c0 [ 198.032332][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 198.037453][ T4200] ? __mutex_trylock_common+0x155/0x260 [ 198.043015][ T4200] hci_le_meta_evt+0x285/0x3c90 [ 198.047874][ T4200] ? hci_event_packet+0x37b/0x1370 [ 198.052986][ T4200] ? __lock_acquire+0x7d10/0x7d10 [ 198.058022][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 198.064092][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 198.069736][ T4200] ? mark_lock+0x94/0x320 [ 198.074074][ T4200] ? mutex_unlock+0x10/0x10 [ 198.078585][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 198.084572][ T4200] ? lock_chain_count+0x20/0x20 [ 198.089427][ T4200] ? __rwlock_init+0x140/0x140 [ 198.094203][ T4200] hci_event_packet+0xe48/0x1370 [ 198.099151][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 198.104365][ T4200] ? rcu_lock_release+0x20/0x20 [ 198.109226][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 198.114438][ T4200] hci_rx_work+0x255/0xa10 [ 198.118872][ T4200] process_one_work+0x85f/0x1010 [ 198.123826][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 198.129465][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 198.134754][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 198.139779][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 198.145330][ T4200] ? wq_worker_running+0x97/0x170 [ 198.150356][ T4200] worker_thread+0xaa6/0x1290 [ 198.155058][ T4200] kthread+0x436/0x520 [ 198.159128][ T4200] ? rcu_lock_release+0x20/0x20 [ 198.163977][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 198.168569][ T4200] ret_from_fork+0x1f/0x30 [ 198.173001][ T4200] [ 198.182892][ T4200] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 198.196270][ T4200] Bluetooth: hci1: failed to register connection device [ 198.384426][ T9119] loop4: detected capacity change from 0 to 131072 [ 198.518936][ T9119] F2FS-fs (loop4): invalid crc value [ 198.583540][ T9119] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.620239][ T9119] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 198.640972][ T9119] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 199.309623][ T9155] loop3: detected capacity change from 0 to 512 [ 199.680245][ T4236] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 199.712383][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 199.785865][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 199.854311][ T9175] loop3: detected capacity change from 0 to 2048 [ 199.904163][ T9175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.956024][ T9178] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.109346][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.127624][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.150509][ T4236] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.195780][ T4236] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.210838][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.253904][ T4236] usb 5-1: config 0 descriptor?? [ 200.731321][ T4236] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x5 [ 200.747316][ T4236] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 200.791183][ T4236] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 201.054795][ T1326] usb 5-1: USB disconnect, device number 15 [ 201.327455][ T9227] fido_id[9227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 202.019194][ T1326] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 202.033388][ T9259] loop7: detected capacity change from 0 to 512 [ 202.142532][ T9259] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 202.203146][ T9259] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1168: corrupted in-inode xattr [ 202.289095][ T1326] usb 7-1: Using ep0 maxpacket: 8 [ 202.339986][ T9259] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1168: couldn't read orphan inode 15 (err -117) [ 202.398032][ T9259] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 202.459435][ T1326] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 202.467678][ T1326] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.513714][ T1326] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.539504][ T1326] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.562015][ T9259] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.1168: Logical block already allocated [ 202.571146][ T1326] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.617137][ T1326] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.647055][ T1326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.959266][ T1326] usb 7-1: GET_CAPABILITIES returned 0 [ 202.964795][ T1326] usbtmc 7-1:16.0: can't read capabilities [ 203.096753][ T9270] loop4: detected capacity change from 0 to 32768 [ 203.197733][ T9270] XFS (loop4): Mounting V5 Filesystem [ 203.378681][ T9270] XFS (loop4): Ending clean mount [ 203.398845][ T9270] XFS (loop4): Quotacheck needed: Please wait. [ 203.468881][ T9270] XFS (loop4): Quotacheck: Done. [ 203.631292][ T4190] XFS (loop4): Unmounting Filesystem [ 203.666807][ T9326] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 203.700793][ T4236] usb 7-1: USB disconnect, device number 6 [ 203.881828][ T6845] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.966840][ T9305] loop7: detected capacity change from 0 to 40427 [ 204.039836][ T9305] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 204.058267][ T9305] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 204.116255][ T9305] F2FS-fs (loop7): invalid crc value [ 204.169218][ T6845] usb 4-1: Using ep0 maxpacket: 32 [ 204.188520][ T9305] F2FS-fs (loop7): Found nat_bits in checkpoint [ 204.319289][ T6845] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 204.347798][ T6845] usb 4-1: config 0 has no interface number 0 [ 204.363790][ T6845] usb 4-1: config 0 interface 184 has no altsetting 0 [ 204.382057][ T9305] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 204.392398][ T9352] loop4: detected capacity change from 0 to 64 [ 204.398851][ T9305] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 204.564642][ T4190] Trying to free block not in datazone [ 204.579290][ T6845] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 204.603975][ T6845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.620588][ T6845] usb 4-1: Product: syz [ 204.628410][ T9305] attempt to access beyond end of device [ 204.628410][ T9305] loop7: rw=2049, want=77960, limit=40427 [ 204.635007][ T6845] usb 4-1: Manufacturer: syz [ 204.644230][ T6845] usb 4-1: SerialNumber: syz [ 204.696222][ T6845] usb 4-1: config 0 descriptor?? [ 204.760985][ T6845] smsc75xx v1.0.0 [ 204.794851][ T9369] loop8: detected capacity change from 0 to 8 [ 204.821811][ T4325] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 204.828485][ T4325] loop8: partition table partially beyond EOD, truncated [ 204.837071][ T8299] attempt to access beyond end of device [ 204.837071][ T8299] loop7: rw=2049, want=45104, limit=40427 [ 204.861176][ T4325] loop8: p1 size 423592659 extends beyond EOD, truncated [ 204.885479][ T9371] overlayfs: failed to clone upperpath [ 204.903254][ T9369] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 204.908634][ T9369] loop8: partition table partially beyond EOD, truncated [ 204.949821][ T9369] loop8: p1 size 423592659 extends beyond EOD, truncated [ 205.051662][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 205.158119][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 205.419411][ T6845] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 205.431262][ C0] hrtimer: interrupt took 1002191 ns [ 205.457626][ T6845] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 205.779945][ T6845] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 205.825918][ T6845] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 205.880745][ T6845] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 205.915380][ T6845] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 205.958041][ T9402] loop7: detected capacity change from 0 to 1024 [ 205.968033][ T6845] usb 4-1: USB disconnect, device number 3 [ 206.179393][ T541] hfsplus: b-tree write err: -5, ino 25 [ 206.185202][ T541] hfsplus: b-tree write err: -5, ino 4 [ 206.221617][ T541] hfsplus: b-tree write err: -5, ino 2 [ 206.357900][ T9415] loop7: detected capacity change from 0 to 16 [ 206.415003][ T9415] erofs: (device loop7): mounted with root inode @ nid 36. [ 206.633294][ T9425] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1204'. [ 206.682151][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 207.030048][ T9445] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 207.236487][ T9456] device batadv_slave_1 entered promiscuous mode [ 207.276362][ T9454] device batadv_slave_1 left promiscuous mode [ 207.455997][ T4773] kernel read not supported for file /dsp (pid: 4773 comm: kworker/1:10) [ 207.466447][ T9465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1217'. [ 207.526401][ T9465] bridge0: port 3(team0) entered disabled state [ 207.533605][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.541565][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.699133][ T9469] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1217'. [ 208.149075][ T9481] device syzkaller1 entered promiscuous mode [ 208.914974][ T9500] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1228'. [ 208.989240][ T9500] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1228'. [ 209.450907][ T9531] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 209.535031][ T9533] loop3: detected capacity change from 0 to 128 [ 209.558137][ T9536] loop4: detected capacity change from 0 to 256 [ 209.731417][ T9533] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 209.804362][ T9533] hpfs: filesystem error: improperly stopped [ 209.838462][ T9533] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 209.900397][ T9533] hpfs: You really don't want any checks? You are crazy... [ 209.934826][ T9533] hpfs: Code page index out of array [ 209.950404][ T9533] hpfs: code page support is disabled [ 209.969604][ T9533] hpfs: hpfs_map_4sectors(): unaligned read [ 210.027304][ T9533] hpfs: hpfs_map_4sectors(): unaligned read [ 210.049739][ T9550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1245'. [ 210.054143][ T9533] hpfs: filesystem error: unable to find root dir [ 211.017316][ T9595] binder: 9593:9595 ioctl c0306201 2000000003c0 returned -14 [ 212.485017][ T9622] loop7: detected capacity change from 0 to 32768 [ 212.598384][ T9622] JBD2: Ignoring recovery information on journal [ 212.619815][ T9622] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 212.631720][ T9622] JBD2: bad block at offset 32 [ 212.655061][ T9622] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 213.092505][ T8299] ocfs2: Unmounting device (7,7) on (node local) [ 213.439959][ T9697] loop7: detected capacity change from 0 to 1024 [ 213.470950][ T4826] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 213.553794][ T9697] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 213.599421][ T9697] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 213.686703][ T9697] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 213.709076][ T4826] usb 5-1: Using ep0 maxpacket: 32 [ 213.748840][ T9697] EXT4-fs error (device loop7): ext4_get_journal_inode:5187: comm syz.7.1292: inode #1: comm syz.7.1292: iget: illegal inode # [ 213.849787][ T4773] Bluetooth: hci2: command 0x0411 tx timeout [ 213.858829][ T9697] EXT4-fs (loop7): no journal found [ 213.878443][ T9697] EXT4-fs (loop7): can't get journal size [ 213.915426][ T9697] EXT4-fs (loop7): failed to initialize system zone (-22) [ 213.947642][ T9697] EXT4-fs (loop7): mount failed [ 213.989296][ T4826] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 214.019328][ T4826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.047653][ T4826] usb 5-1: Product: syz [ 214.064003][ T4826] usb 5-1: Manufacturer: syz [ 214.084534][ T4826] usb 5-1: SerialNumber: syz [ 214.103934][ T4826] usb 5-1: config 0 descriptor?? [ 214.151029][ T4826] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 214.364135][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1305'. [ 214.566880][ T9733] loop2: detected capacity change from 0 to 3 [ 214.604276][ T9733] loop2: [ 214.607586][ T9733] loop2: partition table partially beyond EOD, truncated [ 214.796280][ T9693] udc-core: couldn't find an available UDC or it's busy [ 214.808950][ T9693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 214.869329][ T4826] gspca_ov534_9: reg_w failed -71 [ 215.269199][ T4826] gspca_ov534_9: Unknown sensor 0000 [ 215.269259][ T4826] ov534_9: probe of 5-1:0.0 failed with error -22 [ 215.302507][ T9758] loop3: detected capacity change from 0 to 256 [ 215.329307][ T4826] usb 5-1: USB disconnect, device number 16 [ 215.377238][ T9758] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.913063][ T4236] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 216.053293][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1315'. [ 216.119209][ T6845] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 216.370028][ T4236] usb 7-1: config 0 has no interfaces? [ 216.409576][ T6845] usb 5-1: Using ep0 maxpacket: 16 [ 216.506642][ T9799] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 216.530034][ T4236] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 216.540519][ T4236] usb 7-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 216.550685][ T4236] usb 7-1: Product: syz [ 216.566078][ T4236] usb 7-1: SerialNumber: syz [ 216.572335][ T6845] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.592070][ T6845] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.627368][ T4236] usb 7-1: config 0 descriptor?? [ 216.649540][ T6845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.669987][ T6845] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 216.742486][ T6845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.796421][ T6845] usb 5-1: config 0 descriptor?? [ 216.838823][ T4236] kernel write not supported for file /vcsa1 (pid: 4236 comm: kworker/0:7) [ 217.016612][ T4774] usb 7-1: USB disconnect, device number 7 [ 217.083284][ T9820] loop3: detected capacity change from 0 to 256 [ 217.307747][ T6845] hid-generic 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 217.572984][ T4774] usb 5-1: USB disconnect, device number 17 [ 217.656557][ T9831] fido_id[9831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 218.796762][ T9871] loop4: detected capacity change from 0 to 8192 [ 218.881594][ T9871] loop4: p2 p3 p4 [ 218.915500][ T9871] loop4: partition table partially beyond EOD, truncated [ 218.964272][ T9871] loop4: p2 size 588341 extends beyond EOD, truncated [ 219.037550][ T9871] loop4: p3 start 65280 is beyond EOD, truncated [ 219.067835][ T9871] loop4: p4 start 219873280 is beyond EOD, truncated [ 219.103559][ T3563] loop4: p2 p3 p4 [ 219.109348][ T3563] loop4: partition table partially beyond EOD, truncated [ 219.143329][ T3563] loop4: p2 size 588341 extends beyond EOD, truncated [ 219.198151][ T3563] loop4: p3 start 65280 is beyond EOD, truncated [ 219.233768][ T3563] loop4: p4 start 219873280 is beyond EOD, truncated [ 219.664554][ T9905] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1350'. [ 219.689334][ T4236] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 219.698977][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 219.907446][ T9909] Set syz1 is full, maxelem 14 reached [ 220.100454][ T4236] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.122793][ T4236] usb 4-1: config 0 has no interface number 0 [ 220.161666][ T4236] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.188403][ T4236] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.211051][ T4236] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.226219][ T4236] usb 4-1: config 0 interface 1 has no altsetting 0 [ 220.241839][ T4236] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 220.252753][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.323831][ T4236] usb 4-1: config 0 descriptor?? [ 220.564096][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1357'. [ 220.826087][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1359'. [ 220.904177][ T9945] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1359'. [ 221.520264][ T4236] hid (null): invalid report_size 41103 [ 221.546523][ T9967] overlayfs: failed to resolve './file0': -2 [ 221.739252][ T4236] uclogic 0003:145F:0212.000E: failed retrieving string descriptor #100: -71 [ 221.753975][ T4236] uclogic 0003:145F:0212.000E: failed retrieving pen parameters: -71 [ 221.794046][ T4236] uclogic 0003:145F:0212.000E: pen probing failed: -71 [ 221.809192][ T4236] uclogic 0003:145F:0212.000E: failed probing parameters: -71 [ 221.838901][ T4236] uclogic: probe of 0003:145F:0212.000E failed with error -71 [ 221.911947][ T4236] usb 4-1: USB disconnect, device number 4 [ 222.370283][ T9989] loop4: detected capacity change from 0 to 16 [ 222.460534][ T9989] erofs: Unknown parameter '' [ 223.698759][T10002] input: syz1 as /devices/virtual/input/input12 [ 224.284258][T10022] loop3: detected capacity change from 0 to 2048 [ 224.441419][T10029] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.811741][T10043] netlink: 'syz.3.1393': attribute type 4 has an invalid length. [ 224.878597][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 224.926065][T10046] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.935864][T10046] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.945899][T10046] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.955361][T10046] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.988441][T10048] netlink: 'syz.3.1393': attribute type 4 has an invalid length. [ 225.014118][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 225.163199][T10060] loop4: detected capacity change from 0 to 512 [ 225.270847][T10059] loop3: detected capacity change from 0 to 4096 [ 225.345909][T10060] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 225.449691][T10068] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.466393][T10060] EXT4-fs (loop4): shut down requested (0) [ 226.118174][T10096] loop7: detected capacity change from 0 to 1024 [ 226.779534][T10113] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 226.843523][T10113] SQUASHFS error: Failed to read block 0x0: -5 [ 226.899446][ T4236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 227.179467][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 227.329451][ T4236] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 227.338434][ T4236] usb 4-1: config 0 has no interface number 0 [ 227.389554][ T4236] usb 4-1: config 0 interface 184 has no altsetting 0 [ 227.610385][ T4236] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 227.639215][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.668572][ T4236] usb 4-1: Product: syz [ 227.678739][ T4236] usb 4-1: Manufacturer: syz [ 227.694530][ T4236] usb 4-1: SerialNumber: syz [ 227.725569][ T4236] usb 4-1: config 0 descriptor?? [ 227.791160][ T4236] smsc75xx v1.0.0 [ 228.215722][T10133] loop4: detected capacity change from 0 to 40427 [ 228.367947][T10133] F2FS-fs (loop4): invalid crc value [ 228.411612][T10133] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.577481][T10133] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 228.625923][T10133] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 228.767407][ T4190] attempt to access beyond end of device [ 228.767407][ T4190] loop4: rw=2049, want=45112, limit=40427 [ 228.795190][T10184] loop7: detected capacity change from 0 to 1024 [ 228.899541][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 229.118768][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.181253][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 229.234077][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 229.276091][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 229.317318][ T4236] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 229.399722][ T4236] usb 4-1: USB disconnect, device number 5 [ 230.233830][T10236] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 230.251307][T10236] netlink: 'syz.3.1444': attribute type 4 has an invalid length. [ 230.310760][T10236] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1444'. [ 231.902629][T10296] Invalid ELF header len 1 [ 232.064290][T10251] loop3: detected capacity change from 0 to 40427 [ 232.138231][T10305] loop7: detected capacity change from 0 to 256 [ 232.204092][T10251] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 232.232508][T10307] loop4: detected capacity change from 0 to 256 [ 232.256329][T10251] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 232.332177][T10251] F2FS-fs (loop3): invalid crc value [ 232.337844][T10307] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x397ce3e3, utbl_chksum : 0xe619d30d) [ 232.396527][T10251] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 232.415814][ T25] audit: type=1800 audit(232.427:34): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1462" name="file1" dev="loop4" ino=1048673 res=0 errno=0 [ 232.513447][T10251] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 232.786314][T10251] F2FS-fs (loop3): recover fsync data on readonly fs [ 232.829693][T10251] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 232.899121][T10251] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.517354][T10340] netlink: 'syz.2.1469': attribute type 4 has an invalid length. [ 233.709795][T10345] netlink: 'syz.2.1469': attribute type 4 has an invalid length. [ 234.303231][T10368] loop7: detected capacity change from 0 to 512 [ 234.566417][T10368] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 234.635044][T10368] EXT4-fs (loop7): shut down requested (0) [ 234.660465][T10377] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 234.764435][T10377] SQUASHFS error: Failed to read block 0x0: -5 [ 235.055388][T10389] loop7: detected capacity change from 0 to 512 [ 235.332100][T10389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 235.355330][T10389] System zones: 1-2, 4-12, 8-8 [ 235.450993][T10389] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1482: iget: bad i_size value: 38620345925642 [ 235.479821][T10389] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1482: couldn't read orphan inode 15 (err -117) [ 235.535649][T10389] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 235.683147][T10389] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1482: bg 0: block 5: invalid block bitmap [ 235.816995][T10389] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 235.847495][T10389] EXT4-fs (loop7): This should not happen!! Data will be lost [ 235.847495][T10389] [ 235.887453][T10389] EXT4-fs (loop7): Total free blocks count 0 [ 235.924220][T10389] EXT4-fs (loop7): Free/Dirty block details [ 235.930578][ T4826] Bluetooth: hci2: command 0x0405 tx timeout [ 235.966051][T10389] EXT4-fs (loop7): free_blocks=0 [ 235.992015][T10389] EXT4-fs (loop7): dirty_blocks=2 [ 236.011223][T10389] EXT4-fs (loop7): Block reservation details [ 236.047807][T10389] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 236.940979][T10434] netlink: 'syz.7.1487': attribute type 4 has an invalid length. [ 237.027248][T10435] netlink: 'syz.7.1487': attribute type 4 has an invalid length. [ 237.983114][T10417] loop4: detected capacity change from 0 to 40427 [ 238.084239][T10417] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 238.115615][T10417] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 238.182351][T10417] F2FS-fs (loop4): invalid crc value [ 238.236661][T10417] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 238.311213][T10417] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 238.618082][T10417] F2FS-fs (loop4): recover fsync data on readonly fs [ 238.937716][T10417] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 238.976400][T10417] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 239.039494][ T5901] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 239.429211][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.483917][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.522263][ T5901] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.555582][ T5901] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.575096][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.639503][ T5901] usb 8-1: config 0 descriptor?? [ 239.748489][T10538] device batadv_slave_1 entered promiscuous mode [ 239.932206][T10536] device batadv_slave_1 left promiscuous mode [ 240.142021][ T5901] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 240.156858][T10550] fuse: Bad value for 'fd' [ 240.167052][ T5901] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 240.240224][ T5901] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 240.463873][ T4833] usb 8-1: USB disconnect, device number 3 [ 240.476099][T10557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.550556][T10557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.701915][T10557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.739207][T10557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.869494][T10557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.889285][T10557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.087076][T10557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.159571][T10557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.202575][T10579] loop9: detected capacity change from 0 to 4096 [ 241.254727][ C0] blk_update_request: I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 241.271795][ C0] blk_update_request: I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.278498][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 241.283852][ C0] Buffer I/O error on dev loop9, logical block 496, async page read [ 241.328557][ C1] blk_update_request: I/O error, dev loop9, sector 1040 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 241.340412][ C1] blk_update_request: I/O error, dev loop9, sector 2072 op 0x0:(READ) flags 0x80700 phys_seg 33 prio class 0 [ 241.419876][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.430831][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 241.463920][T10557] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.473458][T10557] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.486898][T10557] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.495236][T10557] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.510031][T10557] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.518337][T10557] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.580998][T10557] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.640078][T10557] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.662931][T10590] overlayfs: statfs failed on './file0' [ 242.757943][T10622] netlink: 'syz.3.1522': attribute type 12 has an invalid length. [ 242.816247][T10622] netlink: 'syz.3.1522': attribute type 29 has an invalid length. [ 242.854796][T10622] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1522'. [ 242.899109][T10622] netlink: 'syz.3.1522': attribute type 3 has an invalid length. [ 243.711097][ T25] audit: type=1326 audit(243.727:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.4.1519" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feefe61be59 code=0x0 [ 245.792767][T10750] tipc: Started in network mode [ 245.798175][T10750] tipc: Node identity ac1414aa, cluster identity 4711 [ 245.854439][T10750] tipc: Enabled bearer , priority 10 [ 245.886151][T10755] netlink: 'syz.2.1563': attribute type 4 has an invalid length. [ 245.941008][T10761] overlayfs: failed to clone upperpath [ 246.114667][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1578'. [ 246.663352][T10793] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1574'. [ 246.733827][T10793] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1574'. [ 246.844920][T10801] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1579'. [ 246.860456][ T4232] tipc: Node number set to 2886997162 [ 247.659184][ T5901] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 247.909151][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 248.074309][ T5901] usb 7-1: unable to get BOS descriptor or descriptor too short [ 248.319318][ T5901] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 248.342734][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.384995][ T5901] usb 7-1: Product: syz [ 248.409850][ T5901] usb 7-1: Manufacturer: syz [ 248.433550][ T5901] usb 7-1: SerialNumber: syz [ 248.789388][ T5901] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 248.796914][ T5901] usb 7-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 248.857853][ T5901] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 248.929272][ T5901] usb 7-1: unit 3 not found! [ 249.023774][ T5901] usb 7-1: USB disconnect, device number 8 [ 249.407704][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1597'. [ 250.642291][T10917] netlink: 'syz.4.1609': attribute type 4 has an invalid length. [ 250.703748][T10919] netlink: 'syz.4.1609': attribute type 4 has an invalid length. [ 251.131112][T10932] autofs4:pid:10932:autofs_fill_super: pipe file descriptor does not contain proper ops [ 251.938573][T10949] device bridge1 entered promiscuous mode [ 251.966721][T10923] loop7: detected capacity change from 0 to 40427 [ 252.003370][T10949] team0: Port device bridge1 added [ 252.069017][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #06!!! [ 252.145964][T10949] bridge0: port 3(team0) entered blocking state [ 252.156169][T10949] bridge0: port 3(team0) entered disabled state [ 252.173590][T10923] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 252.208111][T10949] device team0 entered promiscuous mode [ 252.240431][T10949] device team_slave_0 entered promiscuous mode [ 252.258676][T10949] device team_slave_1 entered promiscuous mode [ 252.272575][T10949] bridge0: port 3(team0) entered blocking state [ 252.279251][T10949] bridge0: port 3(team0) entered forwarding state [ 252.293153][T10923] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 252.409472][ T4826] Bluetooth: hci3: command 0x0406 tx timeout [ 252.418181][T10923] F2FS-fs (loop7): invalid crc value [ 252.457764][T10923] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 252.546781][T10923] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 252.820603][T10923] F2FS-fs (loop7): recover fsync data on readonly fs [ 252.885807][T10923] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 252.917982][T10923] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 253.756097][T11005] netlink: 'syz.6.1622': attribute type 4 has an invalid length. [ 253.886842][T10999] netlink: 'syz.6.1622': attribute type 4 has an invalid length. [ 255.128239][T11056] netlink: 'syz.7.1641': attribute type 4 has an invalid length. [ 255.263073][T11058] netlink: 'syz.7.1641': attribute type 4 has an invalid length. [ 255.453479][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.459820][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.773179][T11106] netlink: 'syz.3.1650': attribute type 4 has an invalid length. [ 256.871415][T11107] netlink: 'syz.3.1650': attribute type 4 has an invalid length. [ 260.975594][T11213] overlayfs: failed to clone upperpath [ 266.058891][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1702'. [ 266.284702][T11374] device gre1 entered promiscuous mode [ 269.209783][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1717'. [ 269.269173][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 269.573422][T11450] device gre1 entered promiscuous mode [ 270.589841][T11467] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.705485][T11510] device gre2 entered promiscuous mode [ 273.489689][T11467] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.133103][T11546] device gre2 entered promiscuous mode [ 275.471404][ T25] audit: type=1326 audit(275.487:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.6.1750" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa81eabe59 code=0x0 [ 276.306183][T11559] overlayfs: failed to clone upperpath [ 276.520829][T11563] device veth0_macvtap left promiscuous mode [ 278.103352][T11575] fuse: Bad value for 'fd' [ 278.582484][T11467] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.658066][T11563] syz.6.1754 (11563) used greatest stack depth: 19632 bytes left [ 279.725547][T11612] "syz.6.1772" (11612) uses obsolete ecb(arc4) skcipher [ 280.073873][T11467] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.115204][T11628] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 281.137680][T11628] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 282.104950][T11647] overlayfs: failed to clone upperpath [ 282.835801][T11467] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.858617][T11467] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.878646][T11467] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.908344][T11467] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.618771][T11689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.626859][T11689] IPv6: NLM_F_CREATE should be set when creating new route [ 283.634117][T11689] IPv6: NLM_F_CREATE should be set when creating new route [ 283.768440][T11694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.786533][T11699] device batadv_slave_1 entered promiscuous mode [ 283.820907][T11698] device batadv_slave_1 left promiscuous mode [ 284.099631][T11721] fuse: Bad value for 'fd' [ 285.153341][T11765] device gretap0 entered promiscuous mode [ 285.335932][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 285.632254][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1830'. [ 285.712311][T11793] device bond0 entered promiscuous mode [ 285.745080][T11793] device bond_slave_0 entered promiscuous mode [ 285.790419][T11793] device bond_slave_1 entered promiscuous mode [ 285.847546][T11793] device wlan1 entered promiscuous mode [ 285.887269][T11793] device hsr1 entered promiscuous mode [ 288.231760][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1850'. [ 288.302553][T11861] xt_hashlimit: size too large, truncated to 1048576 [ 288.701467][T11876] tipc: Started in network mode [ 288.706366][T11876] tipc: Node identity 9, cluster identity 4711 [ 288.809251][T11876] tipc: Node number set to 9 [ 291.390950][T11973] overlayfs: failed to clone upperpath [ 293.369089][ T4769] Bluetooth: hci4: command 0x0406 tx timeout [ 294.158280][T12053] overlayfs: failed to clone upperpath [ 295.712954][T12129] overlayfs: failed to clone upperpath [ 295.871778][T12137] device batadv_slave_1 entered promiscuous mode [ 295.915069][T12137] device bridge0 entered promiscuous mode [ 295.933615][T12134] device bridge0 left promiscuous mode [ 295.949479][T12134] device batadv_slave_1 left promiscuous mode [ 296.207074][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1933'. [ 296.299943][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1933'. [ 296.916386][T12183] autofs4:pid:12183:autofs_fill_super: called with bogus options [ 297.839986][T12211] overlayfs: failed to clone upperpath [ 297.990722][T12220] overlayfs: failed to clone upperpath [ 298.057672][ T25] audit: type=1326 audit(298.067:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.165161][ T25] audit: type=1326 audit(298.067:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.279407][ T25] audit: type=1326 audit(298.087:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.408325][T12241] overlayfs: failed to clone upperpath [ 298.412689][ T25] audit: type=1326 audit(298.087:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.557657][ T25] audit: type=1326 audit(298.087:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.618226][ T25] audit: type=1326 audit(298.087:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.729171][ T25] audit: type=1326 audit(298.087:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.755255][T12251] IPVS: nq: FWM 3 0x00000003 - no destination available [ 298.833823][ T25] audit: type=1326 audit(298.087:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 298.939087][ T25] audit: type=1326 audit(298.087:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 299.039073][ T25] audit: type=1326 audit(298.087:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.3.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa3cdc6ce59 code=0x7ffc0000 [ 299.315564][T12271] overlayfs: failed to clone upperpath [ 299.653184][T12287] overlayfs: failed to clone upperpath [ 299.721111][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1976'. [ 299.766400][T12292] netlink: 'syz.6.1976': attribute type 12 has an invalid length. [ 299.809467][T12292] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.819353][T12292] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.828823][T12292] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.838406][T12292] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.849501][T12298] netlink: set zone limit has 8 unknown bytes [ 299.864705][T12298] netlink: del zone limit has 8 unknown bytes [ 299.939493][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1976'. [ 299.965639][T12292] netlink: 'syz.6.1976': attribute type 12 has an invalid length. [ 301.046336][T12367] overlayfs: failed to clone upperpath [ 302.303365][T12406] fuse: Bad value for 'fd' [ 304.080299][T12467] IPv6: addrconf: prefix option has invalid lifetime [ 307.471242][ T25] kauditd_printk_skb: 134 callbacks suppressed [ 307.471257][ T25] audit: type=1326 audit(307.487:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 307.626540][ T25] audit: type=1326 audit(307.537:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 307.747852][ T25] audit: type=1326 audit(307.537:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 307.857160][ T25] audit: type=1326 audit(307.537:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 307.936887][T12614] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2065'. [ 307.966237][ T25] audit: type=1326 audit(307.537:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 308.091347][ T25] audit: type=1326 audit(307.537:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 308.142622][T12624] netlink: 'syz.7.2067': attribute type 3 has an invalid length. [ 308.188019][ T25] audit: type=1326 audit(307.537:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 308.309148][ T25] audit: type=1326 audit(307.537:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 308.395471][ T25] audit: type=1326 audit(307.537:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 308.483521][ T25] audit: type=1326 audit(307.537:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.2.2058" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1dc3d71e59 code=0x7ffc0000 [ 308.729184][ T4769] Bluetooth: hci1: command 0x0406 tx timeout [ 309.415181][T12693] netlink: 'syz.6.2091': attribute type 1 has an invalid length. [ 309.513971][T12693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.660012][T12699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.667669][T12699] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 309.780371][T12699] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 311.403703][T12794] overlayfs: failed to clone upperpath [ 311.541026][T12799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2123'. [ 312.071511][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 312.543605][T12845] netlink: 440 bytes leftover after parsing attributes in process `syz.6.2136'. [ 312.704748][T12852] overlayfs: failed to clone upperpath [ 316.031752][T12962] overlayfs: failed to clone lowerpath [ 316.896510][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.902970][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.151737][T13019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.163931][T13026] overlayfs: failed to clone upperpath [ 317.198455][T13019] bond2: (slave bond0): making interface the new active one [ 317.207473][T13019] bond2: (slave bond0): Enslaving as an active interface with an up link [ 317.783989][T13066] overlayfs: failed to clone upperpath [ 318.264073][T13088] overlayfs: failed to clone upperpath [ 320.523251][T13177] infiniband syz1: set active [ 320.538822][T13177] infiniband syz1: added syz_tun [ 320.787096][T13177] RDS/IB: syz1: added [ 320.823281][T13177] smc: adding ib device syz1 with port count 1 [ 320.879527][T13177] smc: ib device syz1 port 1 has pnetid [ 321.073414][T13229] overlayfs: failed to clone upperpath [ 321.599780][T13251] overlayfs: failed to clone upperpath [ 321.840990][ T25] kauditd_printk_skb: 370 callbacks suppressed [ 321.841004][ T25] audit: type=1326 audit(321.857:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.7.2258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c9cb63e59 code=0x0 [ 326.513492][T13412] device veth0_to_team entered promiscuous mode [ 326.673170][T13411] device veth0_to_team left promiscuous mode [ 327.864558][T13456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.974467][T13456] bond1: (slave bond0): making interface the new active one [ 328.039914][T13456] bond1: (slave bond0): Enslaving as an active interface with an up link [ 328.089170][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2312'. [ 328.114868][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2312'. [ 328.150931][T13456] syz.4.2310 (13456) used greatest stack depth: 19224 bytes left [ 328.164703][T13460] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.173510][T13460] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.182151][T13460] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.190520][T13460] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.284393][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2312'. [ 328.324176][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2312'. [ 328.892624][T13501] overlayfs: failed to clone upperpath [ 328.937164][T13501] overlayfs: failed to clone upperpath [ 329.436148][T13521] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 330.934659][T13563] tipc: Started in network mode [ 330.984677][T13563] tipc: Node identity , cluster identity 4711 [ 332.242599][T13628] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2366'. [ 335.124572][T13748] netlink: 'syz.4.2404': attribute type 4 has an invalid length. [ 335.226738][T13752] netlink: 'syz.4.2404': attribute type 4 has an invalid length. [ 335.421657][T13760] netlink: 'syz.7.2407': attribute type 1 has an invalid length. [ 335.639952][T13773] netlink: 'syz.4.2414': attribute type 1 has an invalid length. [ 335.744083][T13773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.804352][T13777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.859958][T13777] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 335.938909][T13777] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 336.272181][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2420'. [ 336.311495][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2420'. [ 337.744414][T13850] netlink: 'syz.2.2438': attribute type 1 has an invalid length. [ 337.833473][T13850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.037430][T13856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.062004][T13856] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.091345][T13856] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 338.173692][ T3856] device veth0_macvtap entered promiscuous mode [ 338.384961][T13879] overlayfs: failed to clone upperpath [ 339.449122][ T4774] Bluetooth: hci2: command 0x0406 tx timeout [ 339.936726][T13943] netlink: 'syz.7.2463': attribute type 1 has an invalid length. [ 340.214508][T13960] overlayfs: failed to clone upperpath [ 340.292395][T13943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.652640][T13953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.700569][T13953] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 340.781271][T13953] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 342.851958][T14051] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 342.947078][T14051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.232420][T14056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.279566][T14056] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 343.340278][T14056] bond1: (slave vxcan1): Error -22 calling dev_set_mtu [ 345.555795][T14157] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2525'. [ 348.738072][T14270] 9pnet: p9_errstr2errno: server reported unknown error n¼·F’/¤Ótx¸öøwÆæ´<3;÷ø±™3§&k߈޴xÒÕŸ?Íî¶G“ùü7ÖžŽåÏŠ‹ç¥‡òçÆŸ”6Uóà [ 349.154599][T10504] bond0: (slave bond_slave_0): interface is now down [ 349.170239][T10504] bond0: (slave bond_slave_1): interface is now down [ 349.196785][T14291] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 349.231968][T10504] bond0: (slave bond_slave_0): interface is now down [ 349.249967][T10504] bond0: (slave bond_slave_1): interface is now down [ 349.266992][T14291] device syz_tun entered promiscuous mode [ 349.329417][ T4334] bond0: (slave bond_slave_0): interface is now down [ 349.336170][ T4334] bond0: (slave bond_slave_1): interface is now down [ 349.345394][T14291] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 349.389721][ T4334] bond0: (slave syz_tun): interface is now down [ 349.470036][ T4334] bond0: now running without any active interface! [ 349.580308][T14315] device veth0 entered promiscuous mode [ 349.587060][T14315] device bond0 entered promiscuous mode [ 349.631480][T14315] device bond_slave_0 entered promiscuous mode [ 349.644775][T14315] device bond_slave_1 entered promiscuous mode [ 349.670788][T14315] device bridge0 entered promiscuous mode [ 349.729565][T14314] device bond0 left promiscuous mode [ 349.734883][T14314] device bond_slave_0 left promiscuous mode [ 349.809476][T14314] device bond_slave_1 left promiscuous mode [ 349.836809][T14314] device bridge0 left promiscuous mode [ 349.877057][T14314] device veth0 left promiscuous mode [ 350.670003][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2588'. [ 350.704605][T14369] netlink: 'syz.7.2588': attribute type 15 has an invalid length. [ 350.734959][T14369] netlink: 'syz.7.2588': attribute type 18 has an invalid length. [ 350.836043][T14375] netlink: 'syz.6.2591': attribute type 29 has an invalid length. [ 350.887808][T14377] overlayfs: failed to clone upperpath [ 350.896741][T14375] netlink: 'syz.6.2591': attribute type 29 has an invalid length. [ 350.950048][T14378] netlink: 'syz.6.2591': attribute type 29 has an invalid length. [ 351.692123][ C1] ------------[ cut here ]------------ [ 351.697683][ C1] WARNING: CPU: 1 PID: 154 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 351.707079][ C1] Modules linked in: [ 351.711011][ C1] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 351.718476][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.728601][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 351.736572][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 351.742810][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 90 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 8d d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 351.762467][ C1] RSP: 0018:ffffc90000dd0a18 EFLAGS: 00010246 [ 351.768549][ C1] RAX: ffffffff81a0a910 RBX: 0000000000000000 RCX: ffff88801d875940 [ 351.776575][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.784621][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203ac18 [ 351.792660][ C1] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: ffff88801d8770c8 [ 351.800672][ C1] R13: dffffc0000000000 R14: ffffc90000dd0a78 R15: 0000000000000000 [ 351.808661][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 351.817656][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.824280][ C1] CR2: 000000110c2c15bc CR3: 0000000063227000 CR4: 00000000003506e0 [ 351.832305][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.840317][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.848297][ C1] Call Trace: [ 351.851627][ C1] [ 351.854483][ C1] bpf_probe_read_user+0x26/0x70 [ 351.859635][ C1] bpf_prog_690f12e098ef46de+0x32/0x490 [ 351.865191][ C1] bpf_prog_run_clear_cb+0x94/0x1a0 [ 351.870520][ C1] run_filter+0x12a/0x220 [ 351.874865][ C1] packet_rcv+0x388/0x1210 [ 351.879338][ C1] ? lock_chain_count+0x20/0x20 [ 351.884263][ C1] ? packet_sock_destruct+0x160/0x160 [ 351.889692][ C1] __netif_receive_skb+0xcc/0x290 [ 351.894819][ C1] process_backlog+0x370/0x790 [ 351.899648][ C1] ? rps_trigger_softirq+0x210/0x210 [ 351.904946][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 351.910981][ C1] ? lock_chain_count+0x20/0x20 [ 351.915855][ C1] __napi_poll+0xc0/0x430 [ 351.920242][ C1] ? net_rx_action+0x307/0xa10 [ 351.925017][ C1] net_rx_action+0x4d4/0xa10 [ 351.929665][ C1] ? net_tx_action+0x880/0x880 [ 351.934444][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 351.940477][ C1] ? lock_chain_count+0x20/0x20 [ 351.945337][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 351.951362][ C1] handle_softirqs+0x339/0x830 [ 351.956213][ C1] ? do_softirq+0x142/0x210 [ 351.960770][ C1] ? do_softirq+0x210/0x210 [ 351.965294][ C1] do_softirq+0x142/0x210 [ 351.969677][ C1] [ 351.972617][ C1] [ 351.975553][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 351.980981][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 351.986975][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 351.992316][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 351.997706][ C1] ? local_bh_enable+0x5/0x20 [ 352.002439][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 352.007674][ C1] ? _local_bh_enable+0xa0/0xa0 [ 352.012604][ C1] __dev_queue_xmit+0x1cbf/0x2f80 [ 352.017837][ C1] ? dev_queue_xmit+0x20/0x20 [ 352.022554][ C1] ? pskb_expand_head+0xb23/0x10f0 [ 352.027755][ C1] ? batadv_nc_skb_store_for_decoding+0x3e6/0x640 [ 352.034263][ C1] batadv_send_skb_packet+0x384/0x5f0 [ 352.039680][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x698/0x840 [ 352.046736][ C1] process_one_work+0x85f/0x1010 [ 352.051821][ C1] ? worker_detach_from_pool+0x240/0x240 [ 352.057464][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 352.062803][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 352.067904][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 352.073493][ C1] ? wq_worker_running+0x97/0x170 [ 352.078532][ C1] worker_thread+0xaa6/0x1290 [ 352.083273][ C1] kthread+0x436/0x520 [ 352.087350][ C1] ? rcu_lock_release+0x20/0x20 [ 352.092235][ C1] ? kthread_blkcg+0xd0/0xd0 [ 352.096834][ C1] ret_from_fork+0x1f/0x30 [ 352.101330][ C1] [ 352.104364][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 352.111641][ C1] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 352.119110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.129167][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 352.137077][ C1] Call Trace: [ 352.140365][ C1] [ 352.143209][ C1] dump_stack_lvl+0x188/0x250 [ 352.147933][ C1] ? show_regs_print_info+0x20/0x20 [ 352.153141][ C1] ? load_image+0x400/0x400 [ 352.157661][ C1] panic+0x2e5/0x810 [ 352.161694][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 352.166216][ C1] ? ret_from_fork+0x1f/0x30 [ 352.170818][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 352.176370][ C1] __warn+0x248/0x2b0 [ 352.180360][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 352.185913][ C1] report_bug+0x1b7/0x2e0 [ 352.190357][ C1] handle_bug+0x3a/0x70 [ 352.194518][ C1] exc_invalid_op+0x16/0x40 [ 352.199031][ C1] asm_exc_invalid_op+0x16/0x20 [ 352.203955][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 352.210122][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 90 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 8d d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 352.229732][ C1] RSP: 0018:ffffc90000dd0a18 EFLAGS: 00010246 [ 352.235809][ C1] RAX: ffffffff81a0a910 RBX: 0000000000000000 RCX: ffff88801d875940 [ 352.243787][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.251761][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203ac18 [ 352.259736][ C1] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: ffff88801d8770c8 [ 352.267711][ C1] R13: dffffc0000000000 R14: ffffc90000dd0a78 R15: 0000000000000000 [ 352.275693][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 352.281261][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 352.286818][ C1] bpf_probe_read_user+0x26/0x70 [ 352.291768][ C1] bpf_prog_690f12e098ef46de+0x32/0x490 [ 352.297322][ C1] bpf_prog_run_clear_cb+0x94/0x1a0 [ 352.302533][ C1] run_filter+0x12a/0x220 [ 352.306874][ C1] packet_rcv+0x388/0x1210 [ 352.311301][ C1] ? lock_chain_count+0x20/0x20 [ 352.316159][ C1] ? packet_sock_destruct+0x160/0x160 [ 352.321542][ C1] __netif_receive_skb+0xcc/0x290 [ 352.326584][ C1] process_backlog+0x370/0x790 [ 352.331373][ C1] ? rps_trigger_softirq+0x210/0x210 [ 352.336664][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 352.342653][ C1] ? lock_chain_count+0x20/0x20 [ 352.347517][ C1] __napi_poll+0xc0/0x430 [ 352.352101][ C1] ? net_rx_action+0x307/0xa10 [ 352.356885][ C1] net_rx_action+0x4d4/0xa10 [ 352.361493][ C1] ? net_tx_action+0x880/0x880 [ 352.366258][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 352.372250][ C1] ? lock_chain_count+0x20/0x20 [ 352.377120][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 352.383125][ C1] handle_softirqs+0x339/0x830 [ 352.387901][ C1] ? do_softirq+0x142/0x210 [ 352.392415][ C1] ? do_softirq+0x210/0x210 [ 352.396933][ C1] do_softirq+0x142/0x210 [ 352.401270][ C1] [ 352.404208][ C1] [ 352.407142][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 352.412524][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 352.418519][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 352.423814][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 352.429115][ C1] ? local_bh_enable+0x5/0x20 [ 352.433804][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 352.439011][ C1] ? _local_bh_enable+0xa0/0xa0 [ 352.443879][ C1] __dev_queue_xmit+0x1cbf/0x2f80 [ 352.448932][ C1] ? dev_queue_xmit+0x20/0x20 [ 352.453618][ C1] ? pskb_expand_head+0xb23/0x10f0 [ 352.458750][ C1] ? batadv_nc_skb_store_for_decoding+0x3e6/0x640 [ 352.465176][ C1] batadv_send_skb_packet+0x384/0x5f0 [ 352.470562][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x698/0x840 [ 352.477608][ C1] process_one_work+0x85f/0x1010 [ 352.482569][ C1] ? worker_detach_from_pool+0x240/0x240 [ 352.488220][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 352.493523][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 352.498557][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 352.504136][ C1] ? wq_worker_running+0x97/0x170 [ 352.509172][ C1] worker_thread+0xaa6/0x1290 [ 352.513883][ C1] kthread+0x436/0x520 [ 352.517960][ C1] ? rcu_lock_release+0x20/0x20 [ 352.522822][ C1] ? kthread_blkcg+0xd0/0xd0 [ 352.527421][ C1] ret_from_fork+0x1f/0x30 [ 352.531849][ C1] [ 352.535068][ C1] Kernel Offset: disabled [ 352.539459][ C1] Rebooting in 86400 seconds..