last executing test programs: 5m58.176185282s ago: executing program 4 (id=6): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x5f]}}, &(0x7f0000002cc0)=""/4104, 0x2f, 0x1008, 0x1}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x12, 0xb05, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x1fd, 0x0, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m57.870479317s ago: executing program 4 (id=7): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5m57.69838646s ago: executing program 4 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$can_bcm(r1, 0x0, 0x0) readv(r1, &(0x7f0000001780)=[{&(0x7f0000000480)=""/123, 0x7b}], 0x1) sendmsg$can_bcm(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@tcp6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x94, &(0x7f0000000380)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x8e, 0xf4, "d9", "f4c490fce371633c6d2eb3cd0674c37331fd1b343d9dc381f5132b8bd3c24e314d0305c04f75c994da1d945df89c9ff058129a0b98ff670a60c1a533741ea711fcf27579db6f394e58cea16a4eb30536c51b0658a4ae9c7ceab60ffb8a86d6cd680136c6723d9c37b4259d8e507d3f7003c1a0fd3a9c34f20f2db9d77c807127991c90"}}}}}, 0x0) 5m56.810258725s ago: executing program 4 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f00000006c0)={[{@dioread_lock}, {@dax_inode}, {@usrquota}, {@user_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@stripe={'stripe', 0x3d, 0x8}}, {@nolazytime}, {@noinit_itable}, {@grpid}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 5m55.271490341s ago: executing program 4 (id=15): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000004080)=""/4104, 0x1008}], 0x1}, 0x400}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480), 0xfffffffffffffed9}, 0xfffffffc}], 0x2, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@random="e5ff9bd18940", @multicast, @void, {@llc={0x4, {@snap={0x1, 0xaa, '5/', "70707f", 0x18, "d72b44fa8305b1b657cb85bdd8632e11c2cf0144addec38a34dbdb70091514a4e913d81f71a7c4185018f10176c18043e3754661bcbe6e866c498e5499836d6a0f1117c545e3a2d11e8ffff30e4c0a9c97993f"}}}}}, &(0x7f0000000280)={0x1, 0x2, [0x16b, 0x2ac, 0xe63, 0x2001de]}) syz_emit_ethernet(0x10c, &(0x7f00000002c0)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x7}, {0x5}, {0x56c2}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1c00}, {0x8001}, {0x3, 0x0, 0x1}], @generic="956ec9ec28efd3c9e5e685f3de895e9c16150559d90261cb44c8def02cfc0537133943b9004abcb6abfb990a3f221c1f24acc76f47e0f7e2b9089beea10af57f3fe63584805a6841af937cfa07666aa602f80ed065db8cfb9e606fa6304c499f2f86ad54ccc61dc4e4ff54e1a077bab49cb514633210cb35fb37181b1521951a574472641be7169e805bbe44c02154021754d196d2826b27a4031765933c775f00e45cb942bcb9e9a676f1a9340aba983cb7f7f75c8087e4f304ccb273ab1aac0adba6710df079c52ce341462a6d46d606dae97ce3f0dea43813"}}}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="8640e0e579c954bc4babbd41df0b05f40b571ea5f97118c06aab0540800683948a4b2250c980b5def211e5d3fb39bc963aaee5851cf01fb3d92830c867982ef425d8eb7814ccf0256ff6be7d5532218b08ac743e7e4a8e4c5ab824", 0x5b}, 0x1, 0x0, 0x0, 0x40800}, 0x4008090) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 5m52.93613669s ago: executing program 4 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0x4, 0x0, 0x7}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) 5m51.236231139s ago: executing program 32 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0x4, 0x0, 0x7}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) 5m21.838343166s ago: executing program 3 (id=111): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x20040041) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 5m20.349508432s ago: executing program 3 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0xe) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m17.545694909s ago: executing program 3 (id=121): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0xc1da, 0x804a080, 0x0, 0x2, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000}]) dup3(r2, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 5m16.055628394s ago: executing program 3 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mkdir(0x0, 0x60) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002d852f119f1c3007fc43a233dc8635ba513d7b1af8ff000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) 5m14.848256704s ago: executing program 3 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 5m13.590828976s ago: executing program 3 (id=136): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) accept$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 4m58.293171845s ago: executing program 33 (id=136): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) accept$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 3m50.315405115s ago: executing program 6 (id=373): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000000c0)="1a00000002000000", 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x900406, &(0x7f0000000400)={[{@init_itable_val}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@data_ordered}, {@minixdf}, {@quota}]}, 0x0, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(r2, &(0x7f0000000080)='./file1\x00', 0x6ec30da5edc8995b, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c00000002000000", @ANYRES32, @ANYRES8=0x0, @ANYRES16=r2, @ANYRES32, @ANYRES32=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) write(0xffffffffffffffff, 0x0, 0x0) utimes(&(0x7f0000001ac0)='./file1\x00', 0x0) 3m48.932235548s ago: executing program 6 (id=380): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000230001"], 0x1c}}, 0x0) 3m46.638533167s ago: executing program 6 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m45.584000364s ago: executing program 6 (id=389): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 3m44.517147572s ago: executing program 6 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 3m41.71069395s ago: executing program 6 (id=405): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 3m41.575012222s ago: executing program 34 (id=405): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 2m48.435442261s ago: executing program 0 (id=567): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r2], 0x40}}, 0x0) 2m48.244356704s ago: executing program 0 (id=569): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m45.973956343s ago: executing program 0 (id=573): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x8, 0x3, 0x1000, 0x5}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000fcb000), 0x4) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4044001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40094) 2m45.721792717s ago: executing program 0 (id=576): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$eJzs3MtrXFUYAPBv7mTSpM/4qNqHGl9YfDRN+rALN4qCCwVBF9VdTNNSm1ppIthSTBSpSym4F5eCf4Er3Yi6EtzqXgpBsml8gFfunXvzfk0yyUTn94MJ59x7Zu75zrlncu65MxNA2+rN/lQidkfEL1k6ybMz0qJQVm566vrQH1PXhyqRpq/9Xsn33Z66PlSWLZ+3u8gcSSKSjytxaInjjl69dnFwZGT4SpHvG7v0bt/o1WtPX7g0eH74/PA7A6dPnzje/8ypgZNNiXNPVteDH1w+fOClN26+MnTm5ls/fNVR1nVBHM3SG73z2nKux5p9sBbbMydd6WhhRWhINSKy7qrl439fVGO28/bFix+1tHLApkrTNN27/O6JFPgfq0SrawC0RvmP/vZUd3Rt0nXwdjb5XP0CKIt7unjU93REUpSpLbi+baauYt3kzMSfn0fe/jvaqv0BgK33TTb/eao+/ykf9T09cc+ccnvz9eBsa8QdEXFnRNwVEXdHxP6IvOy9EXFfg8fvXZBfPP9Mbq0rsDXK5n/PFve25s//itnfP2lPtcjtie7oiVrl3IWR4WNFmxyJ2o4s37/CMb594edPl9vXW8z9ykd2/HIuWNTjVseO+c85Ozg2uLGoZ01+mK8Bji+Of/bOVZY6EBEH1/H62bz5whNfHl5u/+rxr6AJ95nSLyIer/f/RKwQ/8L7k93FvlMDJ/u6YmT4WF95Viz24083Xl3u+BuKvwmy/t+55Pk/E39PZe792tHGj3Hj10+WvaZp4Px/s9ySnf+dldfzdGex7f3BsbEr/RGdlZcXbx+YfbUyX5af3L0/4pGlx3/2HpedY1n8hyIiO4nvj4gHIuLBou4PRcTDkb/EUsanI+L75x99ez3xJ6s1bBNk/X92Xv/HKv3feKJ68buv1xN/Xdb/J/LUkWLLWt7/1lrBjbQdAAAA/Fck+WfgK8nRmXSSHD0asStf292ZjFweHXvy3OX3/jpb/6x8T9SScqWrvh5cXw/tL9aGy/zAgvzxYt34s2p3nt9Z3PsGWmfX3PGfLzjWx3/mt2qLKwdsPt/XgvZl/EP7Mv6hfRn/0L7WOv7TTa4HsPWWGv/jLagHsPXM/6F9Gf/Qvox/aF/GP7SljXyvX2KVxHjDzdsVK5Xp3CZx5YlI8kQ63sJq/F38DMvaCm9efcpfy1i9cK0Yd9uhB1dOtO49CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJn+DQAA//85XdxN") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) mount(0x0, 0x0, 0x0, 0x1001000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x41) preadv2(r1, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 2m44.045372365s ago: executing program 0 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="019b1d35eb76c40f13002f"], 0x34}}, 0x0) 2m38.722035886s ago: executing program 0 (id=606): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200200b0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$get_persistent(0x16, 0x0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x6, 0x0, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x700, 0xba08}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) 2m38.152775785s ago: executing program 35 (id=606): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200200b0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$get_persistent(0x16, 0x0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x6, 0x0, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x700, 0xba08}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) 17.001212562s ago: executing program 8 (id=1034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x18, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x80) 13.456627222s ago: executing program 8 (id=1052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 12.302632232s ago: executing program 8 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) close(0x3) socket(0x40000000015, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 12.296565282s ago: executing program 7 (id=1046): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 11.529567435s ago: executing program 8 (id=1047): r0 = syz_open_dev$vivid(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000700)=@multiplanar_overlay={0x5, 0xc, 0x4, 0x10, 0x5, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0xff, 0x7, 0x7, "105dcef9"}, 0xffffffff, 0x3, {0x0}, 0xffffffff}) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x1}}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 11.448515846s ago: executing program 1 (id=1049): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.188325508s ago: executing program 8 (id=1051): r0 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dccc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000240), 0xff, 0x494, &(0x7f0000000840)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x163) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}]}}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x4, 0x1) setresuid(0x0, 0xee00, 0x0) stat(&(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24", @ANYRES8=r0], 0x0) 10.146111528s ago: executing program 7 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r4, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f0000009000), 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 9.984381271s ago: executing program 1 (id=1058): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e39352c696f636861727365743d63703836392c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703733372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636f6465706167653d3836312c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d6d61637475726b6973682c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c00e1d625f10b9ee0a39b75b922489840691b55fdd962d869c07e5720a738d425cd66a3c97ccd3f631568b5d6c3"], 0x6, 0x2d5, &(0x7f0000000680)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=") linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 9.668349116s ago: executing program 7 (id=1059): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 8.604220014s ago: executing program 1 (id=1060): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf00) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 8.601269434s ago: executing program 5 (id=1061): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 7.960296866s ago: executing program 5 (id=1063): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) 7.959841986s ago: executing program 7 (id=1064): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 7.768734178s ago: executing program 2 (id=1065): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtIuIqF4gLHl4C3PSGi76RIvEKEC+ASAlXlaAMGvucZDxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R+e6UXElV+kB45G/F8MIvoRi3W9HPXMpbz8MCKOxXpzPBcRg/mIev31f56JOB8RHx+JuP/g9kr98Nld9uPC6Vs3Pv3ut/7269/fPfbjN3/0Ybv9B/9/7qPf3Ik4+v3XPvr0zt5sOwAAAJSiqqqql97mH0/v7/tddwoAmIp8/K+S/LharVar97T+XX+2+qMutG6qxrvTLCJirblO/ZrB6XgAOGDW4pOuu0CH5F+0YUQ81XUngJnW67oD7Iv7D26v9FK+vebxYHmjPf+dclP+a72H93dsN52kfY3JtH6+7sYgnt2mP4tT6sMsyfn32/lf2WgfpeX2O/9p2S7/0catT8XJ+Q/a+bdsyv8PEXFg8++Pzb9UOf/h4+S/NjjA+7/8AQAAAAA4/PLf/492fP53/sk3ZVd2Ov+7PKU+AAAAAAAAAMBee9Lx/x4y/h8AAADMrPq9eu2PRx49tt1nsdWPX+5FPN1aHihMullmqet+AAAAAAAAAAAAAEBJhhvX8F7uRcxFxNNLS1VV1V9N7fpxPen6B13p2w8l6/qXPAAAbPj4SOte/l7EQkRcTp/1N7e0tFRVC4tL1VK1OJ9fz47mF6rFxvvaPK0fmx/t4gXxcFTV32yhsV7TpPfLk9rb369+rlE12EXHpqPDwAEgIjaORvcdkQ6Zqnomun6Vw8Fg/z987P/sRtc/pwAAAMD+q6qq6qWP8z6ezvn3u+4UADANC/n43z4voFar1Wq1+vDVTdV4d5pFRKw116lfMxiOHwAOmLX4pOsu0CH5F20YEce67gQw03pdd4B9cf/B7ZVeyrfXPB6k8d3ztSCb8l/rra+X1x83naR9jcm0fr7uxiCe3aY/z02pD7Mk599v539lo32Ultvv/Kdlu/zr7TzaQX+6lvMftPNvOTz598fmX6qc//Cx8h/IHwAAAAAAZlj++//Rcs//DnJ/lqfUBwAAAAAAAADYa/cf3F7J973m8/+fHbNcrznn/s9DI+ff23X+7v89THL+/Xb+rQtyBo35e288yv+fD26vfHjrH5/J05nPf24wqp97rtcfDNM1P9XcW3EtrsdqnN6y/HBT+5kt7XOb2s9OaD+3pX1Uty/m9pOxEj+N6/Hmw/b5CRdGLUxorya05/wH9v8i5fyHja86/6XU3mtNa/c+6G/Z75vTcc9z6c//fnHr3jV9d2PwcNua6u070UF/1v9PnhrFz2+u3jj5y6u3bt04E2my6dGzkSZ7LOc/l75y/i+9sNGef+8399d7H4weO/9ZcTeG2+b/QmO+3t6Xp9y3LuT8R+kr55+PQOP3/4Oc//b7/ysd9AcAAAAAAAAAAAAAAAB2UlXV+i2ilyLiYrr/p6t7MwGAqfrt99JMlYRarVar1epDWzdV473eLGJh8zoXI+JX474ZADDL/hMRf++6E3RG/gXLn/dXTz/XdWeAqbr53vs/uXr9+uqNm133BAAAAAAAAAD4X+XxP5cb4z+vXwfUGjd60/ivb8TygR3/sz8arI91njbo+dh5/O8TsfP438MJzzc3oX00oX1+QvvChPaxN3o05PyfTxnn/I+nDStp/NeXOuhP13L+J9JYzzn/L7SWa+Zf/ekg59/flP+pW+/87NTN995/9do7V99efXv13TOnL54/d+H8uQsXTr117frq6Y1/O+zx/sr557GvXQdalpx/zlz+Zcn5fz7V8i9Lzv/FVMu/LDn//HpP/mXJ+ef3PvIvS87/5VTLvyw5/y+mWv5lyfm/kmr5lyXn/6VUy78sOf9XUy3/suT8T6Za/mXJ+Z9KtfzLkvPPZ7jkX5acf76yQf5lyfmfTbX8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf8vp1r+Zcn5fyXV8i9Lzv+1VMu/LDn/r6Za/mXJ+X8t1fIvS87/66mWf1ly/t9ItfzLkvP/ZqrlX5ac/+upln9ZHn3+v5kpz/zrLxEz0A0zpc68+9edlun6NxMAAAAAAAAAAAAA0DaNK4273kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIVd5nAD/7Za8NCW4ghBAnrI0BA4t311/gEINJQkpJm1IS0qYlNY69Nk78Ve86AYTKUmhLFKQitRf0omkSpVGktgJFkZpKNEJqpPauXCXiJmolLiwVKgcllVIFtjpz3vfdmdnZmfXH4jnn/H4I/70zZ2beOXNmdp+1nhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLbhY9N/PpBlWf5/4491WXZp/vc12Z78y7mdF3uFAAAAwPl6q/HnP1yWTtizjAs1bfNvH/qP78/Pz89nX3jz9Nt/OT+fzhjLsqHVWdY4L/r3X/5ivnmb4KlsdGCw6evBHjc/1OP84R7nj/Q4f1WP81f3OH+0x/mLdsAia4rfxzSubFPjr+uKXZpdkY00ztvU4VJPDaweHIy/y2kYaFxmfuRgdjg7kk1nk4suM9D4L8te2pDf1j1ZvK3Bpttan2XZmZ89vj+uYSDs401Zy401ND92b9yVjb35s8f3f2f29fd3mj13w6KVZtnmjfk6n86yhV9XZQPZ6rRP4joHm9a5vsM6h1rWOdC4XP739nWeWeY64/0eDet8pcs614fTHrk2y7K5bMlt2j2VDWZr22417e/R4ojIryN/KN+TDZ/VcbJhGcdJfpnXrm09TtqPybj/N4R9MrzEGpofjjeeXLVov5/rcZLf6344VvPrvi+/0dHR5l+tthyr+TaPX7f0MdDxsetwDKRjuekY2NjrGBhcNdQ4BgYX1ryx5RiYWnSZwWygcVunr+t+DEzMHj0xMfPoY7ccPrrv0PSh6WNTkzu3b9uxfduOHRMHDx+Zniz+PLtdWiJrs8F0DG4MrzXxGLyhbdvmQ3L+mxfueTDaJ8+D/L5/5vp8QZcOZksc4/k2T28+/+dB+r7f9DwYbnoedHxN7fA8GF7G8yDf5szm5X3PHG76v9MaVuq1cF3TMXAxvx/mt/ngjUu/Fq4P63rmprP9fji06BiId2sgPPfyU9LPe6O3hf2y+Li4Oj/jklXZqZnpk1se2Tc7e3IqC+MdcXnTY9V+vKxtuk/ZouNl8KyPlz1//6vrr+5w+rqwr0Zv7v5Y5dtsH+/+WDVe3Vv356qs2J8tp27NwrjA3un92em7Wb4/U5bosj/zbZ6+5fx/Fky5pOn1b6TX69/QyHDx+jeU9sZIy+vf4odmqLGyLDtzy/Je/0bC/+/0698VffL6l++rB7d0PwbybZ6ZONtjYLjr69+1YQ6E9dwYEsNoU+5/u3H+XHGYNj2WPY+b4eGRcNwMx1tsPW62LbpMfm35bW+ePLfjZvO1rY9Vy88tFTxu8n31V5Pdj5t8m5enzv+1Y038a9Nrx6pex8DI0Kp8vSPpIChe7+bXxGNgS7Y/O54dyQ6ky+SPcn5b41uXdwysCv+/068dV/XJMZDvq+e3dj8G8m1+tO3C/uy0OZyStmn62an99wtLZf6rhxeur323XejMn6/z4z/+VDqtU4bIt3l9+9nmjO776eZwyiUd9lP782epY/pA9s7sp6vCOo/s6P67qXybK3Yu83jak2XZq1OvNn7fFX6/+71TP/5+y+99O/1O+dWpV++duP8nZ7N+AADO3duNP+dWFT9rNv2L9XL+/R8AAAAohZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/H75t1wtvPZGldwOcD+L5cTfcd0exXex4z4Wvx+YX5Kd/9NsjL3z1ieXd9mCWZb+69wMdt3/4jriuwom4zg+3nr7IVdcs6/YfemBhu+b3Tzizq7j+eH+WexjErvJLE1sb1zv26FRjvnxv1pj3zz3zVHH9xddx+9Pbiu3/JrxpyZ6DAy2X3xzWsynMsfCeMvftWdgP+YyXe2H9h/718s8u3F683MDGdzfu5vN/XFxvfI+o5y4vto/3e6n1/8vXvvtCvv0j13Ve/xODndd/Olzva2H+cnexffM+/2rT+v80rD/eXrzclm/9sOP6X3xfsf2L4bj4Rpjt67/rLz74VqfHK97OntuLy8Xbn/zf7Y3LxeuL19++/tEnplr2R/v1v/xmcT27v/zzoebt4+nxdqKHbm89vgfC49vSI8+y7Lt/lrXs5+wjxeX+uW398fpO3N55/Te3rfPEwDWNyy/cn3Ut9+vrf7e14/2N69nzj+ta7s9zd4f99+bEj/LrPX1/OB7D+f/3SnF97e9l+uLdra83cftvrCuet/H6JtrW/1zb+ueuyfdd7/Xf82ax/hfvXN2y/j2fCMfTPcXstf5Df3tZy+W/+Z3i8Tj5lfFjx2dOHT7QtFebn8erR9esveTSd737svBa2v713uOzD0+fHJscm8yysRK+ZeBKr/9bYf5PMeYu/C0UfvLz4rh79pPF960bflF8/Vw4/aHweMbvj1//65GW47X9cZ+7s5jnu/6bwjqW631f+69rlrXh6c+/dOqf/uT19p8L4v058d7Rxv17fsOVjfMGXi7Ob3+96uU/39v6vP7p8GRj/iDs1/nwzswbryxur/3643uTPPvp4vkbf5KLl8/a3k9k3VDr/Tjf9f80/Bzzw6taX//i8fGDJ9rezXldNpAvYS68PmRzxflxq7i/nz1zZcfbi+/Dk829/2yWuaSZR2cmjhw+duqRidnpmdmJmUcf23v0+Kljs3sb712694u9Lr/w/F7beH4fmN65PWs8248XY4Vd7PWfeGD/gVsnrz8wfXDfqYOzD5yYPnlo/8zM/ukDM9fvO3hw+iu9Ln/4wO6prbu23bp1/NDhA7tv27Vr267xw8eO58soFtXDzskvjR87ubdxkZnd23dN7dixfXL86PED07tvnZwcP9Xr8o3vTeP5pb88fnL6yL7Zw0enx2cOPza9e2rXzp1be77749ETB2fGJk6eOjZxamb65ERxX8ZmGyfn3/t6XZ56mDkeXu/aDISfzj938870/ri5bz+55FUVm7T+eJq9Ed4LKn5/6/V1zP0jYSY1yf8AAABQBzH3hzf+XzhD/gcAAIDKiLl/dZiJ/A8AAACVEXN/kfxH08e/1yX/X6j+/5P6/w36//r/mf5/ov+v/5/p/+v/96D/r/9f5vXr/+v/01u/9f9D7s/WZJl//wcAAICKirl/bZiJ/A8AAACVEXP/JWEm8j8AAABURsz9l4aZ1CT/+/x//X/9/279/7it/n+m/98P/f9N/63/v4j+v/5/pv9/zi52f77s6+/D/v8a/X/6Tb/1/2Puf1eYSU3yPwAAANRBzP3vDjOR/wEAAKAyYu6/LMxE/gcAAIDKiLl/XZhJTfK//r/+v/6/z//X/y9N/9/n/3eg/6//n+n/n7OL3Z8v+/r7sP/v8//pO/3W/4+5/9fCTGqS/wEAAKAOYu5/T5iJ/A8AAACVEXP/5WEm8j8AAABURsz9V4SZ1CT/17P//1qWZfr/mf6//n/bOvX/9f9Xgv6//n83+v/6/2Vev/6//j+99Vv/P+b+94aZ1CT/AwAAQB3E3H9lmIn8DwAAAJURc//7wkzkfwAAAKiMmPuvCjOpSf6vZ//f5//r/xf0/1vXqf+v/78S9P/1/7vR/9f/L/P69f/1/+mt3/r/Mfe/P8ykJvkfAAAA6iDm/qvDTOR/AAAAqIyY+z8QZiL/AwAAQGXE3L8+zKQm+V//X/9f/1//X/9f/38llav/P7jkOfr/Bf3/Vheu/z+3sAD9/9KsX/9f/5/e+q3/H3P/B8NMapL/AQAAoA5i7v9QmIn8DwAAAJURc/81YSbyPwAAAFRGzP1jYSY1yf/6//r/+v/6//r/+v8rqVz9/6Xp/xf0/1v5/H/9f/1//X+667f+f8z9G8JMapL/AQAAoA5i7t8YZiL/AwAAQGXE3H9tmIn8DwAAAJURc/+mMJOa5H/9f/1//X/9f/1//f+VpP+v/9+N/r/+f5nXr/+v/09v/db/j7n/ujCTmuR/AAAAqIOY+68PM5H/AQAAoDJi7r8hzET+BwAAgMqIuX9zmElN8r/+v/6//n+J+/9D+v+Z/n/f0//X/+9G/1//v8zr1//X/6e3fuv/x9x/Y5hJTfI/AAAA1EHM/TeFmcj/AAAAUBkx998cZiL/AwAAQGXE3D8eZlKT/K//r/+v/1/i/r/P/29Zv/5/f9L/L0v/f6T1S/3/ZdH/1//X/9f/p7t+6//H3H9LmElN8j8AAADUQcz9W8JM5H8AAACojJj7J8JM5H8AAACojJj7J8NMapL/9f/1//X/9f/1//X/V5L+f1n6/230/5dF/1//X/9f/5/u+q3/H3P/VJhJTfI/AAAA1EHM/VvDTOR/AAAAqIyY+7eFmcj/AAAAUBkx928PM6lJ/i9J/39LKkDp/+v/6//r/+v/l4r+v/5/N/r/+v9lXr/+v/4/rQY7nNZv/f+Y+3eEmdQk/wMAAEAdxNy/M8xE/gcAAIDKiLn/1jAT+R8AAAAqI+b+28JMapL/S9L/9/n/+v/6/030//X/y0T/X/+/G/1//f8yr1//X/+f3vqt/x9z/64wk5rkfwAAAKiDmPs/HGYi/wMAAEBlxNx/e5iJ/A8AAACl0ulzCKOY+z8SZlKT/K//X/X+//xq/X/9f/3/7uvX/19Z+v/6/93o/+v/l3n9+v/6//TWb/3/mPt3h5nUJP8DAABAHcTcf0eYifwPAAAAlRFz/51hJvI/AAAAVEbM/XvCTGqS//X/q97/9/n/+v/6/73Wr/+/svT/9f+70f8vZ/8//Nii/99H/f/8GNL/px/1W/8/5v67wkxqkv8BAACgDmLu/2iYifwPAAAAlRFz/8fCTOR/AAAAqIyY+z8eZlKT/K//r/+v/6//r/+v/7+S9P9XrP/feCnU/y/o/5+bi92fL/v6+6n/7/P/6Vf91v+Puf/uMJOa5H8AAACog5j7PxFmIv8DAABAZcTc/+thJvI/AAAAVEbM/feEmdQk/+v/6//r/+v/6//r/68k/X+f/9+N/r/+f5nXr/+v/09v/db/j7n/N8JMapL/AQAAoA5i7r83zET+BwAAgMqIuf+TYSbyPwAAAJTMqiXPibn/N8NMapL/y9f/Hytl/38wXb/+v/6//r/+v/7/haT/r/+f6f+fs4vdny/7+vX/9f/prd/6/zH3/1aYSU3yPwAAANRBzP2fCjOR/wEAAKAyYu7/7TAT+R8AAAAqI+b++8JMapL/L3T/v/3y3fj8f/3/TP9f/1//X///POn/6/9n+v/n7GL350u8/vijiP6//j899Fv/P+b+3wkzqUn+BwAAgDqIuf/+MBP5HwAAAPrUw2d9iZj7Px1mIv8DAABAZcTc/5kwk5rk//J9/r/+v/6//r/+v/5/mej/6/93o/+v/1/m9fv8f/1/euu3/n/M/Q+EmdQk/wMAAEAdxNz/2TAT+R8AAAAqI+b+3w0zkf8BAACgMmLu/70wk5rkf/1//X/9f/1//X/9/5Wk/7+4/5+/hun/F/T/9f/LvH79f/1/euu3/n/M/Z8LM6lJ/gcAAIA6iLn/98NM5H8AAACojJj7/yDMRP4HAACAyoi5/8Ewk5rkf/1//X/9f/1//X/9/5Wk/+/z/7vR/9f/L/P69f/1/+mt3/r/Mfd/PsykJvkfAAAA6iDm/j8MM5H/AQAAoDJi7t8bZiL/AwAAQGXE3P9QmElN8r/+v/6//r/+v/6//v9K0v/X/+9G/1//v8zr1//X/6e3fuv/x9y/L8xkT+vNAAAAAOUVc/8Xwkxq8u//AAAAUAcx9+8PM5H/AQAAoDJi7j8QZlKT/K//r/+v/6//r/+v/7+S9P/1/7vR/9f/L/P69f/1/+mt3/r/MfdPh5nUJP8DAABAHcTcfzDMRP4HAACAyoi5/1CYifwPAAAAlRFz/8NhJjXJ//r/+v/6/7Xt/7/yvbZ16v/r/68E/X/9/270//X/y7x+/X/9f3rrt/5/zP2Hw0xqkv8BAACgDmLu/2KYifwPAAAAlRFz/5fCTOR/AAAAqIyY+4+EmdQk/+v/6//r/9e2/7+8z/9fs3C7+v/6/+dC/1//vxv9f/3/Mq9f/1//n976rf8fc//RMJOa5H8AAACog5j7j4WZyP8AAABQGTH3Hw8zkf8BAACgMmLuPxFmUpP8r/9/dv3/gSW6gfr/ndev/1+B/n8T/X/9/3Oh/6//343+v/5/mdev/6//T2/91v+Puf+Pwkxqkv8BAACgDmLuPxlmIv8DAABAZcTcPxNmIv8DAABAZcTcPxtmUpP8r//v8//1//X/9f/1/1eS/r/+fzf6//r/ZV6//r/+P731W/8/5v5TYSY1yf8A8P/s3XeuXlfVx/HndV6Do4g5RMyAETAExoCEGAK9JPTQIfTeQm+hQ+i99x56b4HQqwTK9Vor2Nx7zrV9H3ufvT6fP7LCDSg7SpD4yXx1AAA6yN1/v7jF/gcAAIBp5O6/f9xi/wMAAMA0cvc/IG5psv/1//p//b/+X/+v/98n/b/+f4n+X/+/5ffr//X/rBut/8/d/8C4pcn+BwAAgA5y9z8obrH/AQAAYBq5+x8ct9j/AAAAMI3c/Q+JW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/c/NG5psv8BAACgg9z9D4tb7H8AAACYRu7+h8ct9j8AAABMI3f/dXFLk/2v/9f/6/832P//v/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7//q4pcn+BwAAgA5y9z8ibrH/AQAAYHPuft/Df567/5Fxi/0PAAAA08jd/6i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/9FxS5P9DwAAAB3k7n9M3GL/AwAAwDRy9z82brH/AQAAYOtO5+/k7n9c3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9Zt/f+/143HNzj9v+5+2+IW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6//v7P///X/6f/2//v/On+v/T4b+X/+/RP+v/9/y+/X/+n/W7b3/X+n9z//XufufFLc02f8AAADQQe7+J8ct9j8AAABMI3f/U+IW+x8AAACmkbv/qXFLk/2v/9f/+/6//l//r//fJ/3/sP3/+f/VO5f+/1j0//r/o/r/ex7j/fp/Ohit/8/d/7S4pcn+BwAAgA5y9z89brH/AQAAYBq5+2+MW+x/AAAAmEbu/mfELU32v/5f/6//1/+f2/+fatn/3/Ez/f9+6P+H7f+X6f+PRf+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6fv/V83R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Urnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/0vq/yf5/r/+f3/0//r/Jcft/3f6//pr0f+P8379v/6fdaP1/7n7Xxi3NNn/AAAA0EHu/hfFLfY/AAAATCN3/4vjFvsfAAAAppG7/yVxS5P9r//X/+v/9f/6f/3/Pun/9f9LfP9f/7/l9+v/9f+sG63/z93/0rilyf4HAACADnL3vyxusf8BAABgGrn7Xx632P8AAAAwjdz9r4hbzt//py7nqy4f/b/+X/+v/9f/6//3Sf+v/1+i/z+8/z9zxJ9P/z/W+/X/+n/Wjdb/5+6/KW7x6/8AAAAwjdz9r4xb7H8AAACYRu7+V8Ut9j8AAABMI3f/q+OWJvv/qP7/9mvO/nH9//Ho/w9/v/5f/6//1//r//X/S/T/vv+/5ffr//X/rBut/8/d/5q4pcn+BwAAgA5y9782brH/AQAAYBq5+18Xt9j/AAAAMI3c/a+PW5rs/5P//v+1+n/9v/4/rv5f/6//1//r/5fp//X/W36//l//z7rR+v/c/W+IW5rsfwAAAOggd/8b4xb7HwAAAKaRu/9NcYv9DwAAANPI3f/muKXJ/j/5/t/3//X/F9j/n9L/J/1//H3V/+v/L4D+X/+/0/9ftCvdz2/9/fp//T/rRuv/c/fffDD1+u1/AAAA6ODmg9+e2b0lbrH/AQAAYBq5+98at9j/AAAAMI3c/W+LW5rsf/2//v+K9/++/1/0//H3Vf+v/78A+n/9/07/f9GudD+/9ffr//X/rBut/8/d//a4pcn+BwAAgA5y978jbrH/AQAAYBqx+8/+n9/tfwAAAJjSOw9+e2b3rrilyf5v3P9fe6n9/9X/9fv6/8Pfr/8/kf7/5vP/2dP/6/+3RP+v/1+i/9f/b/n94/T/8YPr9P+MZ7T+P3f/u+OWJvsfAAAAOsjd/564xf4HAACAaeTuvyVusf8BAABgGrn73xu3NNn/jfv/Sb7/f+/b4gX6/3n7f9//j6v/1/8fRv8/Qf9/x//80v/Xn1//v533j9P/+/4/4xqt/8/d/764pcn+BwAAgA5y978/brH/AQAAYBq5+z8Qt9j/AAAAMI3c/R+MW5rsf/3/1vt/3//X/+v/9f9j0//r/5f4/r/+f8vv1//r/1k3Wv+fu/9DcUuT/Q8AAAAd5O7/cNxi/wMAAMA0cvd/JG6x/wEAAGAaufs/Grc02f/6f/3/vvr/O/4k+v8m/f/1+v+d/v9I+n/9/xL9v/5/y+/X/+v/WTda/5+7/2NxS5P9DwAAAB3k7v943GL/AwAAwDRy938ibrH/AQAAYBq5+z8ZN9zjblfuSSfr9BE/j95c/6//9/1//b/v/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/Km7x6/8AAAAwjdz9n45b7H8AAACYRu7+z8Qt9j8AAABMI3f/Z+OWJvtf/6//1/9vtv+/Wv9/7vv1/2PS/+v/l+j/9f9bfv+x+/9bD//P6//pYLT+P3f/5+KWJvsfAAAAOsjd//m4xf4HAACAaeTu/0LcYv8DAADANHL3fzFuabL/9f/6f/3/Zvt/3/8/7/36/zHp//X/S/T/+v8tv9/3//X/rBut/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBq5+78St9j/AAAAMI3c/V+NW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/LW5psv8BAACgg9z9X49b7H8AAACYRu7+b8Qt9j8AAABMI3f/N+OWJvt/5v5/6d+m/z9L/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/+tcYv9DwAAANPI3f+duKXJ/p+5/1+i/z9L/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3VXqP8/vTui/8/d/924pcn+BwAAgA5y938vbrH/AQAAYBq5+78ft9j/AAAAMI3c/T+IW+bZ//e5ZeEP6v9PvP8/+IdI/6//3+n/9f/6/wP6f/3/Ev2//n/L79f/6/9ZN9r3/3P3/zBumWf/AwAAQHu5+38Ut9j/AAAAMI3c/T+OW+x/AAAAmEbu/p/ELU32v/7f9//1/636/6t2+n/9/2Wm/9f/L9H/6/+3/H79v/6fdaP1/7n7fxq35PC75mL+KgEAAICR5O7/WdzS5Nf/AQAAoIPc/T+PW+x/AAAAmEbu/l/ELU32v/5f/6//b9X/+/6//v+y0//r/5fo//X/W35/9v/5z53+X//P/xqt/8/d/8u4pcn+BwAAgA5y9/8qbrH/AQAAYBq5+38dt9j/AAAAMI3c/b+JW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/b7/r/9n3Wj9f+7+2+KWJvsfAAAAOsjd/9u4xf4HAACAaeTu/13cYv8DAADANHL33x63NNn/+n/9/5T9/131//p//f8o9P/6/yX6f/3/lt+v/9f/s260/j93/+/jlib7HwAAADrI3f+HuMX+BwAAgGnk7v9j3GL/AwAAwDRy9/8pbmmy//X/+v8L7/9P11/3sP2/7//r//X/w5i3/7+L/v+w/v/Mhb2/e/9/401nf6z/3+b79f/6f9aN1v/n7v9z3NJk/wMAAEAHufv/ErfY/wAAADCN3P1/jVvsfwAAAJhG7v6/xS1N9r/+X/8/5ff/9f/6f/3/MObt/33/3/f/ff9f/6//1/+zZrT+P3f/3+OWJvsfAAAAOsjd/4+4xf4HAACAaeTu/2fcYv8DAADANHL3/ytuabL/9f/6f/2//l//r//fJ/2//n+J/l//v+X36//1/6wbrf/P3f+fAAAA///vXi84") r1 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) 7.418239444s ago: executing program 2 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7.396832865s ago: executing program 1 (id=1067): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}]}}]}, 0x94}}, 0x48004) 7.395997305s ago: executing program 7 (id=1068): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.898930793s ago: executing program 5 (id=1069): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 6.790653735s ago: executing program 2 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 6.021348308s ago: executing program 8 (id=1071): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 5.831015751s ago: executing program 5 (id=1072): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10003, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x69, 0x1000000003, 0x2, 0x2, 0x6, 0x27, 0x96, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x4, 0x8, 0x6, 0x6, 0x3, 0x0, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x40, 0x0, 0x9, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xfffffffffffffffc, 0x2, 0x7, 0x2, 0x5, 0x10fff, 0x6, 0x4, 0x6, 0x5, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0xb, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xdddd7000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7b, 0x20c}, {0x1, 0x7, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x9, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x4, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.990416126s ago: executing program 2 (id=1073): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 4.989269116s ago: executing program 1 (id=1074): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r3, 0x1) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(r0, 0x1) ftruncate(r1, 0x1) ftruncate(r4, 0x1) 2.752541564s ago: executing program 2 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 2.556607277s ago: executing program 5 (id=1076): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) add_key$keyring(0x0, 0x0, 0x1000000000000, 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a80480003"], 0x2c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 2.549703457s ago: executing program 1 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)={0x0, 0x3938700}}) io_uring_enter(r6, 0x1, 0x2, 0x1, 0x0, 0x0) 2.495986918s ago: executing program 7 (id=1078): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0xc4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0xffffffffddecbdcb, 0x0, 0x0, {0x5, 0x7, 0x0, 0x80000005, 0x40000000000003, 0x1, 0x9ec, 0x35741061, 0xb7, 0xa593e9c1ca988eda, 0x9e7, 0xffffffffffffffff, 0x0, 0x7, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x10}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10) 834.16µs ago: executing program 2 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r4], 0x3c}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 0s ago: executing program 5 (id=1080): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) kernel console output (not intermixed with test programs): recommended to keep mac addresses unique to avoid problems! [ 88.304510][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.318899][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.344605][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.359943][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.402191][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.416038][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.427681][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.446090][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.457088][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.488519][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.519564][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.654660][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.733523][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.763557][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.657087][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.682390][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.725381][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.742028][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.763092][ T4377] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.800234][ T4377] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.891410][ T4377] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.901032][ T4377] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.476056][ T7] vhci_hcd: vhci_device speed not set [ 90.747370][ T4744] block device autoloading is deprecated and will be removed. [ 90.956593][ T4744] md2: error: bitmap file must be a regular file [ 91.092830][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.267150][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.539621][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.571654][ T4427] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 91.579405][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.582070][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.601112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.869441][ T4427] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 92.879655][ T4427] usb usb40-port1: attempt power cycle [ 93.133358][ T4780] tipc: Started in network mode [ 93.140831][ T4780] tipc: Node identity 66cde838ec05, cluster identity 4711 [ 93.148757][ T4780] tipc: Enabled bearer , priority 0 [ 93.167494][ T4780] device syzkaller0 entered promiscuous mode [ 93.223300][ T4780] syzkaller0: MTU too low for tipc bearer [ 93.245795][ T4780] tipc: Disabling bearer [ 93.426547][ T4427] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 93.769220][ T4427] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 93.779516][ T4427] usb usb40-port1: unable to enumerate USB device [ 95.479496][ T4822] loop1: detected capacity change from 0 to 512 [ 95.677378][ T4822] EXT4-fs (loop1): Ignoring removed nobh option [ 95.683763][ T4822] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.257673][ T4822] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #3: comm syz.1.108: corrupted inode contents [ 97.330404][ T4822] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #3: comm syz.1.108: mark_inode_dirty error [ 97.344969][ T4847] tipc: Started in network mode [ 97.349990][ T4847] tipc: Node identity b2396fa2a163, cluster identity 4711 [ 97.358407][ T4847] tipc: Enabled bearer , priority 0 [ 97.390058][ T4822] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #3: comm syz.1.108: corrupted inode contents [ 97.403842][ T4847] device syzkaller0 entered promiscuous mode [ 97.445629][ T4822] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.108: mark_inode_dirty error [ 97.484585][ T4847] tipc: Resetting bearer [ 97.510020][ T4822] __quota_error: 18 callbacks suppressed [ 97.510037][ T4822] Quota error (device loop1): write_blk: dquota write failed [ 97.538382][ T4844] tipc: Resetting bearer [ 97.540795][ T4822] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 97.566804][ T4844] tipc: Disabling bearer [ 97.760133][ T4822] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.108: Failed to acquire dquot type 0 [ 97.793725][ T4822] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.108: corrupted inode contents [ 98.857037][ T4822] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.108: mark_inode_dirty error [ 98.909935][ T4822] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.108: corrupted inode contents [ 99.045930][ T4871] kAFS: unparsable volume name [ 99.133086][ T4822] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.108: mark_inode_dirty error [ 100.118697][ T4822] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.108: corrupted inode contents [ 100.147795][ T4872] syz.5.117 (4872): drop_caches: 2 [ 100.276715][ T4822] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 100.296180][ T4822] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.108: corrupted inode contents [ 100.308879][ T4822] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.108: mark_inode_dirty error [ 100.363455][ T4822] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 100.487594][ T4822] EXT4-fs (loop1): 1 truncate cleaned up [ 100.616939][ T4822] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x000000000002d353,nobh,,errors=continue. Quota mode: writeback. [ 100.789851][ T4822] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.017350][ T4894] loop3: detected capacity change from 0 to 8192 [ 102.302231][ T4902] loop2: detected capacity change from 0 to 32768 [ 102.334779][ T4902] XFS: ikeep mount option is deprecated. [ 102.442829][ T4902] XFS (loop2): Mounting V5 Filesystem [ 102.708483][ T4902] XFS (loop2): Ending clean mount [ 102.720466][ T4902] XFS (loop2): Quotacheck needed: Please wait. [ 102.786318][ T4923] loop1: detected capacity change from 0 to 8 [ 102.836412][ T4902] XFS (loop2): Quotacheck: Done. [ 103.100395][ T4923] SQUASHFS error: Unable to read directory block [249:c] [ 104.017767][ T4184] XFS (loop2): Unmounting Filesystem [ 104.097030][ T4923] process 'syz.1.129' launched './file2' with NULL argv: empty string added [ 104.299765][ T4945] netlink: 92 bytes leftover after parsing attributes in process `syz.5.135'. [ 104.674740][ T4951] loop5: detected capacity change from 0 to 4096 [ 104.730489][ T4951] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 106.626224][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 106.688839][ T4965] device bridge_slave_1 left promiscuous mode [ 106.697746][ T4965] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.852833][ T4965] device bridge_slave_0 left promiscuous mode [ 106.954571][ T4965] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.785557][ T4993] loop5: detected capacity change from 0 to 32768 [ 108.944783][ T4993] XFS: ikeep mount option is deprecated. [ 110.451063][ T4993] XFS (loop5): Mounting V5 Filesystem [ 110.561229][ T5015] netlink: 92 bytes leftover after parsing attributes in process `syz.0.148'. [ 110.673857][ T4993] XFS (loop5): Ending clean mount [ 110.695715][ T4993] XFS (loop5): Quotacheck needed: Please wait. [ 110.734827][ T4993] XFS (loop5): Quotacheck: Done. [ 112.476468][ T4377] XFS (loop5): Unmounting Filesystem [ 112.672583][ T5042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.866558][ T26] audit: type=1326 audit(1753410847.215:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 112.957307][ T26] audit: type=1326 audit(1753410847.235:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.035495][ T26] audit: type=1326 audit(1753410847.235:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.062615][ T5059] loop1: detected capacity change from 0 to 512 [ 113.104228][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.111975][ T26] audit: type=1326 audit(1753410847.235:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.229492][ T5059] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.244624][ T26] audit: type=1326 audit(1753410847.235:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.267629][ T26] audit: type=1326 audit(1753410847.235:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.290897][ T26] audit: type=1326 audit(1753410847.235:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.336765][ T5059] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.378363][ T26] audit: type=1326 audit(1753410847.235:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.467837][ T26] audit: type=1326 audit(1753410847.235:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.569796][ T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.592096][ T26] audit: type=1326 audit(1753410847.235:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f90c78cd9a9 code=0x7ffc0000 [ 113.601964][ T23] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 113.651358][ T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.672357][ T23] usb 1-1: config 220 has no interface number 2 [ 113.717275][ T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.750141][ T23] usb 1-1: config 220 interface 0 has no altsetting 0 [ 113.764292][ T23] usb 1-1: config 220 interface 76 has no altsetting 0 [ 113.779514][ T5090] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 113.781725][ T23] usb 1-1: config 220 interface 1 has no altsetting 0 [ 113.974359][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.010770][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.046585][ T23] usb 1-1: Product: syz [ 114.050788][ T23] usb 1-1: Manufacturer: syz [ 114.061070][ T23] usb 1-1: SerialNumber: syz [ 114.445425][ T23] usb 1-1: selecting invalid altsetting 0 [ 114.452930][ T23] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 114.477175][ T5103] loop1: detected capacity change from 0 to 32768 [ 114.496307][ T23] usb 1-1: No valid video chain found. [ 114.515091][ T5103] XFS: ikeep mount option is deprecated. [ 114.530892][ T5107] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.555977][ T5107] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.624967][ T5103] XFS (loop1): Mounting V5 Filesystem [ 114.638968][ T23] usb 1-1: selecting invalid altsetting 0 [ 114.644934][ T23] usbtest: probe of 1-1:220.1 failed with error -22 [ 114.656446][ T23] usb 1-1: USB disconnect, device number 4 [ 114.713805][ T5115] loop2: detected capacity change from 0 to 1024 [ 114.991066][ T5103] XFS (loop1): Ending clean mount [ 114.997878][ T5103] XFS (loop1): Quotacheck needed: Please wait. [ 114.997902][ T5115] EXT4-fs (loop2): filesystem is read-only [ 115.723988][ T5103] XFS (loop1): Quotacheck: Done. [ 117.131927][ T5125] loop0: detected capacity change from 0 to 4096 [ 117.504059][ T4183] XFS (loop1): Unmounting Filesystem [ 119.263599][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 119.263614][ T26] audit: type=1107 audit(1753410853.605:45): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 119.551452][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.569236][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.130550][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.312212][ T5156] bond0: (slave bond_slave_0): Releasing backup interface [ 120.396854][ T5156] bond0: (slave bond_slave_1): Releasing backup interface [ 120.545934][ T5156] team0: Port device team_slave_0 removed [ 120.601296][ T5156] team0: Port device team_slave_1 removed [ 120.617120][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.641926][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.666290][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.678205][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.952887][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 121.210186][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.310717][ T4339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.526060][ T4339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.610732][ T5172] chnl_net:caif_netlink_parms(): no params data found [ 121.627510][ T4233] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 121.653580][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.820340][ T4339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.325260][ T4339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.454418][ T4233] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 122.688834][ T5217] loop0: detected capacity change from 0 to 32768 [ 122.697872][ T4233] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 122.705941][ T4233] usb 2-1: Manufacturer: syz [ 122.710145][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.734423][ T4247] Bluetooth: hci0: command 0x0409 tx timeout [ 122.893299][ T5172] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.067099][ T5172] device bridge_slave_0 entered promiscuous mode [ 123.318974][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 123.331748][ T4233] usb 2-1: config 0 descriptor?? [ 123.337790][ T5217] XFS: ikeep mount option is deprecated. [ 123.415066][ T4339] tipc: Left network mode [ 123.437224][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.473202][ T5172] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.492000][ T4233] rc_core: IR keymap rc-hauppauge not found [ 123.498416][ T4233] Registered IR keymap rc-empty [ 123.519873][ T5172] device bridge_slave_1 entered promiscuous mode [ 123.543034][ T5218] netlink: 80 bytes leftover after parsing attributes in process `syz.2.186'. [ 123.557801][ T4233] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 123.574711][ T4233] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 123.597094][ T5217] XFS (loop0): Mounting V5 Filesystem [ 123.684225][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 123.746945][ T5217] XFS (loop0): Ending clean mount [ 123.784267][ T5172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.800891][ T5217] XFS (loop0): Quotacheck needed: Please wait. [ 123.810710][ T5172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.864535][ T5217] XFS (loop0): Quotacheck: Done. [ 124.003928][ T5172] team0: Port device team_slave_0 added [ 124.050890][ T5172] team0: Port device team_slave_1 added [ 124.766494][ T4233] usb 2-1: USB disconnect, device number 2 [ 124.883482][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 124.931588][ T4185] XFS (loop0): Unmounting Filesystem [ 124.952287][ T5172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.974572][ T5172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.043805][ T5172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.102541][ T5172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.114585][ T5172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.182947][ T5172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.322984][ T5172] device hsr_slave_0 entered promiscuous mode [ 125.350217][ T5172] device hsr_slave_1 entered promiscuous mode [ 125.451013][ T5172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.653859][ T5172] Cannot create hsr debugfs directory [ 126.894308][ T1319] Bluetooth: hci0: command 0x040f tx timeout [ 127.399204][ T4339] device hsr_slave_0 left promiscuous mode [ 127.407944][ T4339] device hsr_slave_1 left promiscuous mode [ 127.417098][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.424736][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.454559][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.535940][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.630988][ T4339] bridge0: port 3(dummy0) entered disabled state [ 127.728907][ T4339] device bridge_slave_1 left promiscuous mode [ 127.758710][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.820199][ T4339] device bridge_slave_0 left promiscuous mode [ 127.858456][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.181464][ T4339] device veth1_macvtap left promiscuous mode [ 128.352509][ T4339] device veth0_macvtap left promiscuous mode [ 128.378653][ T4339] device veth1_vlan left promiscuous mode [ 128.384960][ T4339] device veth0_vlan left promiscuous mode [ 129.939531][ T1319] Bluetooth: hci0: command 0x0419 tx timeout [ 130.285949][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 130.300647][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 130.314613][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.331637][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.444560][ T4339] bond0 (unregistering): Released all slaves [ 131.167943][ T5328] syz.0.209 (5328) used greatest stack depth: 20776 bytes left [ 131.335493][ T5344] loop0: detected capacity change from 0 to 1024 [ 131.346608][ T5172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.594907][ T5346] loop5: detected capacity change from 0 to 40427 [ 131.682949][ T5172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.730520][ T5346] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 131.738560][ T5346] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 131.765237][ T5346] F2FS-fs (loop5): invalid crc value [ 131.767585][ T5344] EXT4-fs (loop0): Ignoring removed orlov option [ 131.893056][ T5346] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.060218][ T5172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 132.300373][ T5172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.315490][ T5344] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 132.385380][ T5346] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 132.392477][ T5346] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 132.794223][ T5371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.943729][ T5370] attempt to access beyond end of device [ 133.943729][ T5370] loop5: rw=2049, want=78344, limit=40427 [ 134.511378][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.517954][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.696250][ T26] audit: type=1804 audit(1753410869.045:46): pid=5377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.211" name="/newroot/39/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 135.775913][ T5390] 9pnet: Insufficient options for proto=fd [ 136.222584][ T5172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.380800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.389193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.401394][ T5172] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.135158][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.283883][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.339852][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.347018][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.496427][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.572604][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.587549][ T5412] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 137.611984][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.667983][ T5413] netlink: 'syz.5.217': attribute type 16 has an invalid length. [ 137.731473][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.738629][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.768585][ T5413] netlink: 'syz.5.217': attribute type 3 has an invalid length. [ 138.314422][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.434153][ T5413] netlink: 132 bytes leftover after parsing attributes in process `syz.5.217'. [ 138.501194][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.550004][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.589572][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.657860][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.783123][ T5430] loop0: detected capacity change from 0 to 512 [ 138.801593][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.868203][ T5423] netlink: 'syz.2.225': attribute type 12 has an invalid length. [ 138.884367][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 139.463914][ T5430] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.584816][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.599517][ T5172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.615684][ T5172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.673104][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.725546][ T5430] EXT4-fs (loop0): 1 truncate cleaned up [ 139.731215][ T5430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.884712][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.907753][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.908401][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.965365][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.660789][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 140.990160][ T5460] loop1: detected capacity change from 0 to 128 [ 141.142020][ T5460] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 141.147326][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.176789][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.209985][ T5172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.249453][ T5460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.418753][ T5491] loop5: detected capacity change from 0 to 2048 [ 142.624295][ T5502] netlink: 'syz.0.241': attribute type 21 has an invalid length. [ 142.729974][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 143.455574][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.465132][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.470759][ T5491] EXT4-fs (loop5): failed to initialize system zone (-117) [ 143.474245][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.489382][ T5491] EXT4-fs (loop5): mount failed [ 143.491889][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.626796][ T5172] device veth0_vlan entered promiscuous mode [ 143.658733][ T5172] device veth1_vlan entered promiscuous mode [ 143.689643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.325000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.421744][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.099550][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.114514][ T5172] device veth0_macvtap entered promiscuous mode [ 145.470500][ T5172] device veth1_macvtap entered promiscuous mode [ 145.977420][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.992202][ T5533] loop1: detected capacity change from 0 to 512 [ 146.014942][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.062831][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.122168][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.140448][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.152676][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.252025][ T5172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.400331][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.977158][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.044079][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.062408][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.085184][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.091876][ T5547] loop0: detected capacity change from 0 to 512 [ 147.121211][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.263142][ T5172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.298234][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.310496][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.322067][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.342122][ T5547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.597721][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.691386][ T5533] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.246: inline data xattr refers to an external xattr inode [ 147.714778][ T5547] EXT4-fs (loop0): 1 truncate cleaned up [ 147.799450][ T5547] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.047418][ T5552] lo speed is unknown, defaulting to 1000 [ 148.061370][ T26] audit: type=1800 audit(1753413460.403:47): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.250" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 148.098460][ T5172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.108958][ T5533] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.246: couldn't read orphan inode 12 (err -117) [ 148.157586][ T5533] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 148.181438][ T5172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.181593][ T5172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.181619][ T5172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.187327][ T5552] lo speed is unknown, defaulting to 1000 [ 148.190156][ T5552] lo speed is unknown, defaulting to 1000 [ 148.198716][ T5552] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.247463][ T5552] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.372773][ T5552] lo speed is unknown, defaulting to 1000 [ 148.449403][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.449459][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.488906][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.490217][ T5552] lo speed is unknown, defaulting to 1000 [ 148.492397][ T5552] lo speed is unknown, defaulting to 1000 [ 148.493204][ T5552] lo speed is unknown, defaulting to 1000 [ 148.502556][ T5552] lo speed is unknown, defaulting to 1000 [ 148.675937][ T5573] loop2: detected capacity change from 0 to 64 [ 148.712861][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.739947][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.763696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.901910][ T5577] bridge0: port 3(batadv1) entered blocking state [ 148.979661][ T5405] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.990679][ T5577] bridge0: port 3(batadv1) entered disabled state [ 148.998828][ T5577] device batadv1 entered promiscuous mode [ 149.244348][ T26] audit: type=1800 audit(1753413461.533:48): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.255" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 149.632077][ T9] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 149.642176][ T9] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 149.728475][ T5590] loop5: detected capacity change from 0 to 2048 [ 149.805647][ T5590] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 150.113487][ T5405] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 150.140666][ T5405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.625736][ T5620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.674511][ T5405] usb 2-1: Product: syz [ 150.679041][ T5405] usb 2-1: Manufacturer: syz [ 150.684676][ T5405] usb 2-1: SerialNumber: syz [ 151.334017][ T5405] usb 2-1: config 0 descriptor?? [ 151.384538][ T5405] ch341 2-1:0.0: ch341-uart converter detected [ 152.174372][ T5405] usb 2-1: failed to receive control message: -71 [ 152.180913][ T5405] ch341-uart: probe of ttyUSB0 failed with error -71 [ 152.279693][ T5405] usb 2-1: USB disconnect, device number 3 [ 152.365253][ T5405] ch341 2-1:0.0: device disconnected [ 152.688402][ T5661] loop1: detected capacity change from 0 to 512 [ 152.744949][ T5661] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 153.938306][ T5661] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.270: invalid block [ 154.197343][ T5661] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.270: invalid indirect mapped block 10 (level 1) [ 154.968037][ T5661] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.270: invalid indirect mapped block 8 (level 1) [ 155.234526][ T5661] EXT4-fs (loop1): 1 truncate cleaned up [ 155.301149][ T5661] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 155.497210][ T5691] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.867651][ T5706] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 156.874206][ T5706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.893624][ T5706] vhci_hcd vhci_hcd.0: Device attached [ 157.098833][ T5700] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.798010][ T4232] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 158.108929][ T5707] vhci_hcd: connection reset by peer [ 158.115399][ T9] vhci_hcd: stop threads [ 158.119875][ T9] vhci_hcd: release socket [ 158.135329][ T9] vhci_hcd: disconnect device [ 159.025777][ T5700] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.191237][ T5743] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 159.942637][ T5746] usb usb1: usbfs: process 5746 (syz.1.291) did not claim interface 6 before use [ 159.949198][ T5700] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.008860][ T5746] loop1: detected capacity change from 0 to 256 [ 160.043117][ T5700] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.817221][ T5755] loop0: detected capacity change from 0 to 128 [ 161.039150][ T5755] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 161.074351][ T5755] nftables ruleset with unbound chain [ 161.077262][ T5700] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.254966][ T5700] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.597775][ T5700] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.816245][ T5700] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.161707][ T4232] vhci_hcd: vhci_device speed not set [ 165.268009][ T5816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 165.334782][ T5816] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 165.380796][ T5816] netlink: 'syz.2.305': attribute type 2 has an invalid length. [ 166.493868][ T5819] loop0: detected capacity change from 0 to 512 [ 166.949115][ T5819] FAT-fs (loop0): Directory bread(block 542) failed [ 167.011416][ T5819] FAT-fs (loop0): Directory bread(block 543) failed [ 167.021403][ T5819] FAT-fs (loop0): Directory bread(block 544) failed [ 167.057471][ T5819] FAT-fs (loop0): Directory bread(block 545) failed [ 167.067450][ T5819] FAT-fs (loop0): Directory bread(block 546) failed [ 167.076373][ T5819] FAT-fs (loop0): Directory bread(block 547) failed [ 167.089812][ T5819] FAT-fs (loop0): Directory bread(block 548) failed [ 167.104708][ T5819] FAT-fs (loop0): Directory bread(block 549) failed [ 167.119346][ T5819] FAT-fs (loop0): Directory bread(block 550) failed [ 167.133960][ T5819] FAT-fs (loop0): Directory bread(block 551) failed [ 167.226872][ T5819] binfmt_misc: register: failed to install interpreter file ./file0 [ 167.302968][ T5844] loop2: detected capacity change from 0 to 128 [ 167.523724][ T4248] Process accounting resumed [ 167.536263][ T4248] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 167.559152][ T4248] FAT-fs (loop2): Filesystem has been set read-only [ 167.949122][ T26] audit: type=1804 audit(1753413480.285:49): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.311" name="/newroot/13/bus/file0" dev="overlay" ino=93 res=1 errno=0 [ 168.683324][ T5864] overlayfs: failed to clone upperpath [ 169.141783][ T5874] netlink: 'syz.1.316': attribute type 39 has an invalid length. [ 169.796694][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.318'. [ 172.203426][ T5923] loop0: detected capacity change from 0 to 2048 [ 172.275373][ T5926] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.326'. [ 172.509668][ T5923] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 172.937077][ T5932] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.939028][ T5923] attempt to access beyond end of device [ 172.939028][ T5923] loop0: rw=524288, want=33554432, limit=2048 [ 173.091644][ T5938] netdevsim netdevsim1: Direct firmware load for ¼JÈöníñÆgkNšÄq>ä*x(Oˆ@Ä“Æ™¬aîWóÿfV!Œˆ « _—)µAD‘I†µw•C7;¹gB›|hÂV`f”?:VmÐUWX:SZ;žË©6h?AeÙÿ³iÛámç/Øî‘ÆS–Á6­Ò_C?ÚF failed with error -2 [ 173.111022][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.117427][ T5938] netdevsim netdevsim1: Falling back to sysfs fallback for: ¼JÈöníñÆgkNšÄq>ä*x(Oˆ@Ä“Æ™¬aîWóÿfV!Œˆ « _—)µAD‘I†µw•C7;¹gB›|hÂV`f”?:VmÐUWX:SZ;žË©6h?AeÙÿ³iÛámç/Øî‘ÆS–Á6­Ò_C?ÚF [ 174.330613][ T5945] ODEBUG: Out of memory. ODEBUG disabled [ 175.148293][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 175.310728][ T5954] netlink: 'syz.0.334': attribute type 5 has an invalid length. [ 175.509301][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 175.855521][ T5405] Bluetooth: hci2: command 0x0406 tx timeout [ 175.862039][ T5405] Bluetooth: hci1: command 0x0406 tx timeout [ 175.870445][ T5405] Bluetooth: hci3: command 0x0406 tx timeout [ 175.878031][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 175.887424][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 175.910718][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 175.936533][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 175.960435][ T5954] device geneve2 entered promiscuous mode [ 176.045436][ T5966] loop5: detected capacity change from 0 to 512 [ 176.275096][ T5966] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 176.322996][ T5966] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #13: comm syz.5.338: iget: bad i_size value: 12154757448730 [ 176.426917][ T5966] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.338: couldn't read orphan inode 13 (err -117) [ 176.495044][ T5966] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 179.380335][ T5991] syz.2.345 (5991) used greatest stack depth: 20584 bytes left [ 179.995981][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.290563][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.015193][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.074224][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.250355][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.257743][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.271347][ T6036] loop0: detected capacity change from 0 to 40427 [ 182.312099][ T6036] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 182.320065][ T6036] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.339196][ T6036] F2FS-fs (loop0): invalid crc value [ 182.973167][ T6038] xt_CT: No such helper "snmp" [ 183.461450][ T6036] F2FS-fs (loop0): Found nat_bits in checkpoint [ 183.518383][ T6036] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 183.525572][ T6036] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.721471][ T6055] loop5: detected capacity change from 0 to 512 [ 184.416681][ T6055] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.479277][ T6055] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (800) [ 184.593599][ T6065] loop6: detected capacity change from 0 to 128 [ 184.681614][ T6065] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.774612][ T6065] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.849742][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.865266][ T6065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.963486][ T6073] loop5: detected capacity change from 0 to 1024 [ 185.034167][ T26] audit: type=1326 audit(1753413497.377:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 185.839309][ T26] audit: type=1326 audit(1753413497.377:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 185.868600][ T26] audit: type=1326 audit(1753413497.377:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 185.984016][ T26] audit: type=1326 audit(1753413497.377:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 186.077408][ T26] audit: type=1326 audit(1753413497.377:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 186.170801][ T6087] netlink: zone id is out of range [ 186.371565][ T26] audit: type=1326 audit(1753413497.377:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 187.020222][ T26] audit: type=1326 audit(1753413497.377:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 187.060848][ T26] audit: type=1326 audit(1753413497.377:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 187.135481][ T26] audit: type=1326 audit(1753413497.377:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 187.163101][ T26] audit: type=1326 audit(1753413497.377:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70937499a9 code=0x7fc00000 [ 188.051662][ T6118] loop6: detected capacity change from 0 to 512 [ 188.402956][ T6130] tipc: Failed to remove unknown binding: 66,1,1/0:2048535128/2048535130 [ 188.438445][ T6130] tipc: Failed to remove unknown binding: 66,1,1/0:2048535128/2048535130 [ 188.464287][ T6130] tipc: Failed to remove unknown binding: 66,1,1/0:2048535128/2048535130 [ 189.297125][ T6144] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.497270][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.380'. [ 191.221145][ T4248] Bluetooth: hci4: command 0x0406 tx timeout [ 192.053085][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 192.053098][ T26] audit: type=1326 audit(1753413504.408:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.217649][ T26] audit: type=1326 audit(1753413504.448:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.241622][ T6192] cgroup: Unknown subsys name 'obj_role' [ 192.253097][ T6184] loop6: detected capacity change from 0 to 2048 [ 192.296658][ T26] audit: type=1326 audit(1753413504.448:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.303401][ T6184] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 192.320289][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.391'. [ 192.370952][ T26] audit: type=1326 audit(1753413504.448:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.389863][ T6184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.393264][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.433422][ T26] audit: type=1326 audit(1753413504.468:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.463923][ T26] audit: type=1326 audit(1753413504.468:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.486832][ T26] audit: type=1326 audit(1753413504.468:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.509030][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.562490][ T26] audit: type=1326 audit(1753413504.478:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.616687][ T26] audit: type=1326 audit(1753413504.478:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.664838][ T26] audit: type=1326 audit(1753413504.488:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1b5d789a9 code=0x7ffc0000 [ 192.986860][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 193.116524][ T5172] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 193.330149][ T5172] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 193.481594][ T6218] o2cb: This node has not been configured. [ 193.487871][ T6218] o2cb: Cluster check failed. Fix errors before retrying. [ 193.495220][ T6218] (syz.1.397,6218,1):user_dlm_register:675 ERROR: status = -22 [ 193.502877][ T6218] (syz.1.397,6218,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 194.173130][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179584][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.435746][ T6224] loop5: detected capacity change from 0 to 4096 [ 195.096457][ T6224] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 195.212679][ T4365] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.997236][ T6224] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22. [ 196.085955][ T4365] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.117425][ T4377] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22. [ 196.141192][ T4377] ntfs3: loop5: ntfs_evict_inode r=9 failed, -22. [ 196.181739][ T6243] loop0: detected capacity change from 0 to 512 [ 196.245185][ T4365] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.350969][ T4365] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.363676][ T6247] tipc: Failed to remove unknown binding: 66,1,1/0:1821802614/1821802616 [ 196.412317][ T6247] tipc: Failed to remove unknown binding: 66,1,1/0:1821802614/1821802616 [ 196.436713][ T6247] tipc: Failed to remove unknown binding: 66,1,1/0:1821802614/1821802616 [ 196.517452][ T6256] loop1: detected capacity change from 0 to 256 [ 196.618820][ T6256] FAT-fs (loop1): Directory bread(block 64) failed [ 196.629507][ T6256] FAT-fs (loop1): Directory bread(block 65) failed [ 196.659454][ T6256] FAT-fs (loop1): Directory bread(block 66) failed [ 196.680438][ T6256] FAT-fs (loop1): Directory bread(block 67) failed [ 196.697392][ T6256] FAT-fs (loop1): Directory bread(block 68) failed [ 196.708269][ T6251] lo speed is unknown, defaulting to 1000 [ 196.715641][ T6256] FAT-fs (loop1): Directory bread(block 69) failed [ 196.730708][ T6256] FAT-fs (loop1): Directory bread(block 70) failed [ 196.760662][ T6256] FAT-fs (loop1): Directory bread(block 71) failed [ 196.782444][ T6256] FAT-fs (loop1): Directory bread(block 72) failed [ 196.817689][ T6256] FAT-fs (loop1): Directory bread(block 73) failed [ 197.006784][ T6256] loop1: detected capacity change from 0 to 256 [ 197.129437][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.149345][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.156172][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.162830][ T6256] FAT-fs (loop1): Directory bread(block 64) failed [ 197.185443][ T6276] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 197.187677][ T6256] FAT-fs (loop1): Directory bread(block 65) failed [ 197.217857][ T6256] FAT-fs (loop1): Directory bread(block 66) failed [ 197.234284][ T6256] FAT-fs (loop1): Directory bread(block 67) failed [ 197.270571][ T6256] FAT-fs (loop1): Directory bread(block 68) failed [ 197.280562][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.292661][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 197.300116][ T6256] FAT-fs (loop1): Directory bread(block 69) failed [ 197.323496][ T6256] FAT-fs (loop1): Directory bread(block 70) failed [ 197.331090][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.357290][ T6256] FAT-fs (loop1): Directory bread(block 71) failed [ 197.379039][ T6256] FAT-fs (loop1): Directory bread(block 72) failed [ 197.392035][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.403736][ T6256] FAT-fs (loop1): Directory bread(block 73) failed [ 197.496623][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.601678][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 197.624865][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.661230][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.680818][ T6251] device bridge_slave_0 entered promiscuous mode [ 198.248402][ T6276] wlan0 speed is unknown, defaulting to 1000 [ 198.349748][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.356865][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.452136][ T6251] device bridge_slave_1 entered promiscuous mode [ 198.579816][ T4248] Bluetooth: hci0: command 0x0409 tx timeout [ 199.127180][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 199.150395][ T6307] device bridge2 entered promiscuous mode [ 199.162021][ T6307] team0: Port device bridge2 added [ 199.170840][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.223137][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.353508][ T4365] device hsr_slave_0 left promiscuous mode [ 199.386271][ T4365] device hsr_slave_1 left promiscuous mode [ 199.444952][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.497443][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.542089][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.268110][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.524025][ T4365] device bridge_slave_1 left promiscuous mode [ 200.531356][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.540121][ T4365] device bridge_slave_0 left promiscuous mode [ 200.546572][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.560112][ T4365] device veth1_macvtap left promiscuous mode [ 200.566236][ T4365] device veth0_macvtap left promiscuous mode [ 200.572522][ T4365] device veth1_vlan left promiscuous mode [ 200.579552][ T4365] device veth0_vlan left promiscuous mode [ 200.663435][ T5405] Bluetooth: hci0: command 0x041b tx timeout [ 201.552780][ T6358] netlink: 'syz.1.430': attribute type 29 has an invalid length. [ 201.598485][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 201.624955][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 201.643306][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.705281][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.802986][ T4365] bond0 (unregistering): Released all slaves [ 201.870604][ T6251] team0: Port device team_slave_0 added [ 201.879363][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 201.895786][ T6358] netlink: 'syz.1.430': attribute type 29 has an invalid length. [ 201.934744][ T6251] team0: Port device team_slave_1 added [ 202.095426][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.136679][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.164019][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.177268][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.184329][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.210987][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.747727][ T5405] Bluetooth: hci0: command 0x040f tx timeout [ 202.954654][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 203.179713][ T6251] device hsr_slave_0 entered promiscuous mode [ 204.000257][ T6251] device hsr_slave_1 entered promiscuous mode [ 204.033145][ T6251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.053458][ T6251] Cannot create hsr debugfs directory [ 204.287044][ T6251] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.324726][ T6251] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.500675][ T6251] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.519395][ T6251] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.571608][ T6404] loop0: detected capacity change from 0 to 1024 [ 204.827134][ T6404] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.839327][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 205.612943][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.630625][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.641085][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.710709][ T6432] capability: warning: `syz.1.442' uses deprecated v2 capabilities in a way that may be insecure [ 206.338728][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.361491][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.386867][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.395540][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.402869][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.411576][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.493720][ T6435] MPTCP: addr_signal error, add_addr=1, echo=0 [ 206.494482][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.554677][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.591409][ T6442] siw: device registration error -23 [ 206.606992][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.614224][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.642184][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.696909][ T6445] device syzkaller1 entered promiscuous mode [ 206.887205][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.918207][ T6455] netlink: 'syz.2.449': attribute type 10 has an invalid length. [ 207.073743][ T6455] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 207.424686][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.554930][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.563678][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.687359][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.847828][ T6474] loop0: detected capacity change from 0 to 512 [ 209.584877][ T6474] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.452: invalid block [ 209.602000][ T6474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.452: invalid indirect mapped block 10 (level 1) [ 209.618336][ T6474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.452: invalid indirect mapped block 8 (level 1) [ 209.637579][ T6474] EXT4-fs (loop0): 1 truncate cleaned up [ 209.643394][ T6474] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 209.781518][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.901068][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.986734][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.045003][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.172972][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.749526][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.760971][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.972602][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.202424][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.462'. [ 218.167918][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 218.249454][ T6542] netlink: 80 bytes leftover after parsing attributes in process `syz.0.465'. [ 218.419863][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 220.271829][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.402903][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.434351][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.703684][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.797997][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.910429][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.064200][ T6251] device veth0_vlan entered promiscuous mode [ 221.485759][ T6251] device veth1_vlan entered promiscuous mode [ 222.696439][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.728737][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.748130][ T6583] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 223.896048][ T6588] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 224.353590][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.492764][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.689555][ T6251] device veth0_macvtap entered promiscuous mode [ 224.731339][ T6251] device veth1_macvtap entered promiscuous mode [ 226.467824][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.910089][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.985839][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.996390][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.007455][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.017696][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.028157][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.041560][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.050436][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.067937][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.217124][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 227.275252][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.304271][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.608855][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.805344][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.913269][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.028210][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.060619][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.098676][ T6251] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.153560][ T6251] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.212367][ T6656] loop5: detected capacity change from 0 to 1024 [ 228.216480][ T6251] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.237571][ T6251] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.241688][ T6660] loop1: detected capacity change from 0 to 512 [ 228.260256][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.281146][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.296455][ T6656] EXT4-fs (loop5): filesystem is read-only [ 228.376408][ T6660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.488618][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.532864][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.571812][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.584777][ T6674] loop0: detected capacity change from 0 to 256 [ 228.662481][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.673205][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.695520][ T6660] EXT4-fs (loop1): 1 truncate cleaned up [ 228.701714][ T6660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.744224][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.575951][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 229.601126][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 229.726804][ T6688] loop0: detected capacity change from 0 to 128 [ 229.783007][ T6688] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 229.866521][ T6688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.943860][ T4248] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 231.385511][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.497'. [ 231.823815][ T4248] usb 8-1: not running at top speed; connect to a high speed hub [ 232.495953][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.499'. [ 232.505086][ T4248] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.514975][ T4248] usb 8-1: config 1 has no interface number 1 [ 232.524433][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.542544][ T6717] device bridge_slave_1 left promiscuous mode [ 232.552667][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.733728][ T4248] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.762883][ T4248] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.945006][ T4248] usb 8-1: Product: syz [ 233.187227][ T4248] usb 8-1: can't set config #1, error -71 [ 233.292363][ T4248] usb 8-1: USB disconnect, device number 2 [ 233.795334][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 233.795795][ T26] audit: type=1326 audit(1753413546.123:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 234.670457][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.7.500'. [ 235.116704][ T26] audit: type=1326 audit(1753413546.123:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 236.131656][ T6761] xt_time: unknown flags 0xc [ 236.556700][ T26] audit: type=1326 audit(1753413546.193:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 236.745118][ T26] audit: type=1326 audit(1753413547.003:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 236.782209][ T26] audit: type=1326 audit(1753413547.003:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 236.858378][ T26] audit: type=1326 audit(1753413547.023:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 238.216071][ T26] audit: type=1326 audit(1753413547.023:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 238.250034][ T6782] loop7: detected capacity change from 0 to 128 [ 238.327063][ T6782] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.351593][ T26] audit: type=1326 audit(1753413547.043:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 238.415891][ T6782] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.470201][ T26] audit: type=1326 audit(1753413547.063:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 238.595267][ T6782] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.612293][ T26] audit: type=1326 audit(1753413547.073:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 238.662749][ T4232] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 239.122969][ T4232] usb 6-1: not running at top speed; connect to a high speed hub [ 239.244274][ T4232] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 239.262613][ T26] audit: type=1326 audit(1753413547.103:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 239.289494][ T4232] usb 6-1: config 1 has no interface number 1 [ 239.440387][ T26] audit: type=1326 audit(1753413547.123:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 239.512793][ T4232] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.540063][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.540690][ T26] audit: type=1326 audit(1753413547.163:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 239.571084][ T4232] usb 6-1: Product: syz [ 239.592375][ T4232] usb 6-1: Manufacturer: syz [ 239.622325][ T4232] usb 6-1: SerialNumber: syz [ 239.839258][ T26] audit: type=1326 audit(1753413547.163:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 240.169680][ T26] audit: type=1326 audit(1753413547.163:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 240.263555][ T6824] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 240.297829][ T26] audit: type=1326 audit(1753413547.163:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 240.321676][ T26] audit: type=1326 audit(1753413547.163:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 240.344104][ T6824] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 240.353146][ T6829] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 240.365584][ T6824] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 240.373983][ T26] audit: type=1326 audit(1753413547.203:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 240.410922][ T6824] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 240.433385][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 240.447873][ T26] audit: type=1326 audit(1753413547.203:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 240.533519][ T6824] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 240.571730][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 240.718746][ T26] audit: type=1326 audit(1753413547.203:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.5.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7ffc0000 [ 241.078353][ T6824] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 241.104924][ T6824] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 241.125702][ T6837] HTB: quantum of class 8005000C is small. Consider r2q change. [ 241.242487][ T4232] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 241.318752][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 241.439249][ T4232] usb 6-1: USB disconnect, device number 2 [ 242.295222][ T4443] udevd[4443]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.321820][ T6872] loop1: detected capacity change from 0 to 512 [ 242.329232][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 242.411120][ T6872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.580732][ T6872] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 242.704375][ T6872] EXT4-fs (loop1): 1 truncate cleaned up [ 242.710377][ T6872] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 244.681229][ T6901] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 244.891061][ T6908] usb usb1: usbfs: process 6908 (syz.7.549) did not claim interface 6 before use [ 245.148341][ T6908] loop7: detected capacity change from 0 to 256 [ 245.930151][ T6927] bridge0: port 3(batadv1) entered blocking state [ 245.983111][ T6927] bridge0: port 3(batadv1) entered disabled state [ 246.011585][ T6927] device batadv1 entered promiscuous mode [ 246.083682][ T6941] netlink: 'syz.2.556': attribute type 3 has an invalid length. [ 246.148157][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 246.717645][ T4363] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 246.727516][ T4363] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 247.785111][ T23] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 247.979901][ T6950] siw: device registration error -23 [ 247.986539][ T6957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.993420][ T6957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.009097][ T6957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.015562][ T6957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.050421][ T23] Bluetooth: hci3: Injecting HCI hardware error event [ 248.092982][ T6957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.099456][ T6957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.106141][ T6957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.108799][ T4195] Bluetooth: hci3: hardware error 0x00 [ 248.112572][ T6957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.112822][ T6957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.131174][ T6957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.310092][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 249.471501][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.487520][ T7] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 250.010737][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.049167][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 250.060562][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 250.311486][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.367111][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.375376][ T7] usb 2-1: Product: syz [ 251.379533][ T7] usb 2-1: Manufacturer: syz [ 251.731120][ T7] usb 2-1: can't set config #1, error -71 [ 251.753410][ T7] usb 2-1: USB disconnect, device number 4 [ 251.781712][ T7016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.574'. [ 251.862315][ T7021] netlink: 'syz.2.574': attribute type 11 has an invalid length. [ 251.883560][ T7020] loop1: detected capacity change from 0 to 128 [ 251.958425][ T7021] netlink: 428 bytes leftover after parsing attributes in process `syz.2.574'. [ 252.006329][ T7026] loop5: detected capacity change from 0 to 128 [ 252.023633][ T7024] loop0: detected capacity change from 0 to 512 [ 252.064381][ T7026] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 252.084875][ T7024] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 252.126428][ T4247] Process accounting resumed [ 252.140137][ T7026] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.149812][ T4247] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 252.170178][ T7024] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.576: invalid indirect mapped block 10 (level 1) [ 252.211217][ T4247] FAT-fs (loop1): Filesystem has been set read-only [ 252.238408][ T7024] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.576: invalid indirect mapped block 8 (level 1) [ 252.254643][ T7024] EXT4-fs (loop0): 1 truncate cleaned up [ 252.260752][ T7024] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 252.399638][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 252.399653][ T26] audit: type=1326 audit(1753413564.755:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.433817][ T26] audit: type=1326 audit(1753413564.755:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.458076][ T26] audit: type=1326 audit(1753413564.755:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.483227][ T26] audit: type=1326 audit(1753413564.755:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.513299][ T26] audit: type=1326 audit(1753413564.755:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.543209][ T26] audit: type=1326 audit(1753413564.755:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.579080][ T26] audit: type=1326 audit(1753413564.755:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.604519][ T26] audit: type=1326 audit(1753413564.755:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.627378][ T26] audit: type=1326 audit(1753413564.755:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 252.651681][ T26] audit: type=1326 audit(1753413564.755:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84585209a9 code=0x7fc00000 [ 253.591635][ T4185] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=262143, rec_len=65535, size=1024 fake=0 [ 253.646552][ T7055] overlayfs: statfs failed on './file0' [ 253.719079][ T4185] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 3924211046 in block_group 0 [ 253.736900][ T4185] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 253.824515][ T4185] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #2: comm syz-executor: mark_inode_dirty error [ 253.859370][ T144] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm kworker/u4:1: Invalid inode table block 3924211046 in block_group 0 [ 253.984683][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.587'. [ 254.128709][ T7072] loop7: detected capacity change from 0 to 1024 [ 254.195494][ T7072] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 254.249906][ T7072] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 254.298906][ T7072] JBD2: no valid journal superblock found [ 254.308084][ T7072] EXT4-fs (loop7): error loading journal [ 254.507714][ T7077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.325870][ T7077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.567750][ T7095] syz.7.590[7095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.567839][ T7095] syz.7.590[7095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.616856][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.648784][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.643149][ T7077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.282427][ T7077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.551118][ T7077] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.634774][ T7077] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.807837][ T7077] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.868697][ T7077] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.771178][ T7176] loop5: detected capacity change from 0 to 256 [ 259.869322][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.598'. [ 259.926545][ T7176] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 259.951879][ T7176] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 260.000755][ T7185] MPTCP: addr_signal error, add_addr=1, echo=0 [ 260.905243][ T7193] lo speed is unknown, defaulting to 1000 [ 260.982969][ T7193] wlan0 speed is unknown, defaulting to 1000 [ 261.119604][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 261.362648][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 261.608708][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.619866][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.649216][ T7193] device bridge_slave_0 entered promiscuous mode [ 261.673852][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.716711][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.773231][ T7193] device bridge_slave_1 entered promiscuous mode [ 262.454638][ T7247] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.464143][ T7247] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.472894][ T7247] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.482055][ T7247] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.881541][ T5405] Bluetooth: hci3: command 0x0409 tx timeout [ 263.092386][ T7247] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 263.154711][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.217655][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.249399][ T7260] loop5: detected capacity change from 0 to 2048 [ 263.327470][ T7260] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.409645][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 263.446938][ T7265] input: syz0 as /devices/virtual/input/input7 [ 264.004141][ T7193] team0: Port device team_slave_0 added [ 264.832957][ T7193] team0: Port device team_slave_1 added [ 264.969636][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.017276][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.149785][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.372021][ T4247] Bluetooth: hci3: command 0x041b tx timeout [ 265.386840][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.771906][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.798494][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.006432][ T7193] device hsr_slave_0 entered promiscuous mode [ 266.077746][ T7193] device hsr_slave_1 entered promiscuous mode [ 266.106068][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.127741][ T7193] Cannot create hsr debugfs directory [ 266.272649][ T7283] syz.7.623 (7283): drop_caches: 2 [ 266.883428][ T7308] netlink: 64 bytes leftover after parsing attributes in process `syz.7.629'. [ 267.011889][ T7308] netlink: 'syz.7.629': attribute type 11 has an invalid length. [ 267.019816][ T7308] netlink: 428 bytes leftover after parsing attributes in process `syz.7.629'. [ 267.072479][ T7193] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 267.090179][ T7193] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.141190][ T7193] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.167409][ T7193] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.923209][ T5405] Bluetooth: hci3: command 0x040f tx timeout [ 268.014361][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.152598][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.223911][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.277583][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.304445][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.938487][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.979829][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.986914][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.060472][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.090336][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.100792][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.107895][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.124271][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.167609][ T7193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.197086][ T7193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.257219][ T7363] netlink: 64 bytes leftover after parsing attributes in process `syz.1.640'. [ 269.270520][ T7363] netlink: 'syz.1.640': attribute type 11 has an invalid length. [ 269.278621][ T7363] netlink: 428 bytes leftover after parsing attributes in process `syz.1.640'. [ 269.279451][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.306575][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.518164][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.727989][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.859920][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.949955][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.958612][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.971026][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.987383][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.006287][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.014821][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 270.037421][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.053124][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.211771][ T7369] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.221036][ T7369] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.230049][ T7369] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.244820][ T7369] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.305800][ T4225] lo speed is unknown, defaulting to 1000 [ 273.318890][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.643'. [ 273.368034][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.386772][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.412395][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.458283][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 273.458298][ T26] audit: type=1326 audit(1753413585.818:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b64c559a9 code=0x7ffc0000 [ 273.607945][ T26] audit: type=1326 audit(1753413585.868:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b64c559a9 code=0x7ffc0000 [ 273.632883][ T7417] loop5: detected capacity change from 0 to 64 [ 273.640532][ T26] audit: type=1326 audit(1753413585.868:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b64c559e3 code=0x7ffc0000 [ 273.672590][ T26] audit: type=1326 audit(1753413585.878:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b64c5445f code=0x7ffc0000 [ 273.695670][ T26] audit: type=1326 audit(1753413585.878:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8b64c55a37 code=0x7ffc0000 [ 273.728545][ T26] audit: type=1326 audit(1753413585.878:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b64c54310 code=0x7ffc0000 [ 273.755957][ T26] audit: type=1326 audit(1753413585.878:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b64c5460a code=0x7ffc0000 [ 273.973067][ T7422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.090358][ T26] audit: type=1326 audit(1753413585.888:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b64c559a9 code=0x7ffc0000 [ 275.117742][ T26] audit: type=1326 audit(1753413585.888:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b64c559a9 code=0x7ffc0000 [ 275.761783][ T26] audit: type=1326 audit(1753413585.888:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b64c559e3 code=0x7ffc0000 [ 276.015700][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.036975][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.105163][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.115987][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.144228][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.166387][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.188613][ T7193] device veth0_vlan entered promiscuous mode [ 276.206314][ T7193] device veth1_vlan entered promiscuous mode [ 276.288359][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.302468][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.314482][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.324332][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.364926][ T7193] device veth0_macvtap entered promiscuous mode [ 276.571499][ T7193] device veth1_macvtap entered promiscuous mode [ 277.046428][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.077111][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.174192][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.192024][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.203079][ T7468] syz.2.661[7468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.203162][ T7468] syz.2.661[7468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.223031][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.608140][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.668427][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.943096][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.984924][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.993776][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.002410][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.048926][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.109679][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.129696][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.174118][ T7483] loop5: detected capacity change from 0 to 128 [ 278.184678][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.220812][ T7483] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 278.245350][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.267317][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.285513][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.301870][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.319349][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.340351][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.358196][ T7487] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 278.359954][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.392606][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.405697][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.439928][ T7193] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.485310][ T7193] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.541784][ T7193] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.552887][ T7193] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.619787][ T7512] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 279.638157][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.651242][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.702719][ T7514] xt_time: unknown flags 0xc [ 280.153267][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.406476][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.471602][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.064816][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.141152][ T7557] syz.8.595 (7557): drop_caches: 2 [ 285.232376][ T7591] loop7: detected capacity change from 0 to 1024 [ 285.403299][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 285.403313][ T26] audit: type=1804 audit(1753413597.769:315): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.688" name="file1" dev="ramfs" ino=44209 res=1 errno=0 [ 285.471539][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.7.687'. [ 285.491962][ T7597] MPTCP: addr_signal error, add_addr=1, echo=0 [ 286.271241][ T7615] input: syz0 as /devices/virtual/input/input8 [ 286.364446][ T7610] bridge0: port 1(batadv1) entered blocking state [ 286.388589][ T7610] bridge0: port 1(batadv1) entered disabled state [ 286.407196][ T7610] device batadv1 entered promiscuous mode [ 287.784745][ T4420] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 287.794090][ T4420] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 288.949438][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.5.704'. [ 289.424807][ T7666] loop5: detected capacity change from 0 to 2048 [ 289.949583][ T4443] loop5: p1 < > p3 [ 289.973931][ T4443] loop5: p3 size 134217728 extends beyond EOD, truncated [ 290.019754][ T7666] loop5: p1 < > p3 [ 290.042178][ T7666] loop5: p3 size 134217728 extends beyond EOD, truncated [ 290.216733][ T7683] bridge0: port 3(batadv1) entered blocking state [ 290.223323][ T7683] bridge0: port 3(batadv1) entered disabled state [ 290.232990][ T7683] device batadv1 entered promiscuous mode [ 291.064608][ T4232] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 291.080533][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 291.090503][ T4232] Bluetooth: hci4: Injecting HCI hardware error event [ 291.100247][ T4193] Bluetooth: hci4: hardware error 0x00 [ 291.107943][ T4443] udevd[4443]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 291.128955][ T7666] kvm: emulating exchange as write [ 291.131704][ T4339] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 291.144143][ T4339] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 291.278053][ T4443] udevd[4443]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 291.291748][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 291.312310][ T7702] loop7: detected capacity change from 0 to 256 [ 291.409986][ T7702] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 291.488721][ T7702] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 294.605379][ T7761] netlink: 'syz.5.727': attribute type 10 has an invalid length. [ 294.728992][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.5.727'. [ 294.738894][ T7761] netlink: 'syz.5.727': attribute type 10 has an invalid length. [ 294.751718][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.5.727'. [ 295.759415][ T7786] loop5: detected capacity change from 0 to 256 [ 295.907326][ T7788] netlink: 'syz.7.734': attribute type 32 has an invalid length. [ 295.957540][ T7791] bond0: (slave wlan1): Releasing backup interface [ 295.988877][ T7791] device batadv1 left promiscuous mode [ 295.994895][ T7791] bridge0: port 1(batadv1) entered disabled state [ 296.840831][ T7804] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 296.918306][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.995364][ T7804] device bridge_slave_1 left promiscuous mode [ 297.002371][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.034845][ T7804] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 298.001869][ T7810] netlink: 14 bytes leftover after parsing attributes in process `syz.1.737'. [ 298.050175][ T7810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.102246][ T7810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.118558][ T7810] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 298.232313][ T7829] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 298.280997][ T7810] bond0 (unregistering): Released all slaves [ 298.984968][ T7836] loop5: detected capacity change from 0 to 2048 [ 299.257176][ T7836] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 300.464668][ T7836] attempt to access beyond end of device [ 300.464668][ T7836] loop5: rw=524288, want=33554432, limit=2048 [ 300.478219][ T7856] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.497741][ T4225] libceph: connect (1)[c::]:6789 error -101 [ 305.506450][ T4225] libceph: mon0 (1)[c::]:6789 connect error [ 305.515627][ T7902] ceph: No mds server is up or the cluster is laggy [ 305.525167][ T4225] libceph: connect (1)[c::]:6789 error -101 [ 305.531258][ T4225] libceph: mon0 (1)[c::]:6789 connect error [ 305.708343][ T7921] input: syz0 as /devices/virtual/input/input9 [ 305.935195][ T7935] IPVS: Error connecting to the multicast addr [ 306.122327][ T4225] libceph: connect (1)[c::]:6789 error -101 [ 306.189400][ T4225] libceph: mon0 (1)[c::]:6789 connect error [ 307.063296][ T4443] udevd[4443]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 309.194863][ T7970] tipc: Started in network mode [ 309.202298][ T7970] tipc: Node identity 080211000001, cluster identity 4711 [ 309.210134][ T7970] tipc: Enabled bearer , priority 0 [ 310.781706][ T1319] tipc: Node number set to 134418688 [ 312.194145][ T4427] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 312.614248][ T4427] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 312.755024][ T4427] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 312.864566][ T7994] xt_connbytes: Forcing CT accounting to be enabled [ 312.871858][ T7994] set match dimension is over the limit! [ 314.343814][ T4427] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 315.146213][ T4427] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.224300][ T4427] usb 9-1: Product: syz [ 315.228489][ T4427] usb 9-1: Manufacturer: syz [ 315.374359][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 315.387846][ T4427] usb 9-1: SerialNumber: syz [ 315.405687][ T4427] usb 9-1: config 0 descriptor?? [ 315.423638][ T4427] usb 9-1: can't set config #0, error -71 [ 315.450554][ T4427] usb 9-1: USB disconnect, device number 2 [ 316.207682][ T26] audit: type=1326 audit(1753413628.573:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 316.301726][ T8025] loop7: detected capacity change from 0 to 1024 [ 316.579265][ T26] audit: type=1326 audit(1753413628.613:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 317.083499][ T26] audit: type=1326 audit(1753413628.633:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 317.139154][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.148863][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.164176][ T26] audit: type=1326 audit(1753413628.633:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 317.584760][ T26] audit: type=1326 audit(1753413628.633:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 317.954687][ T26] audit: type=1326 audit(1753413628.633:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 318.052654][ T26] audit: type=1326 audit(1753413628.633:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 318.261965][ T26] audit: type=1326 audit(1753413628.633:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 319.331582][ T4248] Bluetooth: hci0: command 0x0406 tx timeout [ 319.637274][ T26] audit: type=1326 audit(1753413628.633:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 319.659760][ T26] audit: type=1326 audit(1753413628.633:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.7.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a049b59a9 code=0x7ffc0000 [ 319.927184][ T8025] hfsplus: xattr searching failed [ 320.223262][ T8061] loop5: detected capacity change from 0 to 16 [ 320.383474][ T8061] erofs: (device loop5): mounted with root inode @ nid 36. [ 322.432946][ T4271] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 323.702871][ T4271] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 323.774305][ T4271] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 324.123641][ T4271] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 324.152381][ T4271] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.812623][ T4271] usb 8-1: Product: syz [ 324.961653][ T4271] usb 8-1: Manufacturer: syz [ 325.721671][ T4271] usb 8-1: SerialNumber: syz [ 325.764663][ T4271] usb 8-1: config 0 descriptor?? [ 325.792401][ T4271] usb 8-1: can't set config #0, error -71 [ 325.955202][ T4271] usb 8-1: USB disconnect, device number 3 [ 325.989771][ T4377] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 46 [ 327.063466][ T4377] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 327.116384][ T4377] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 327.778803][ T8132] loop8: detected capacity change from 0 to 16 [ 327.863159][ T8132] erofs: (device loop8): mounted with root inode @ nid 36. [ 331.810740][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 332.091611][ T7] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 332.213254][ T7193] erofs: (device loop8): erofs_fill_dentries: bogus dirent @ nid 46 [ 332.337678][ T7193] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 332.531694][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 332.806587][ T7193] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 333.294165][ T7] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 334.392012][ T7] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 334.436472][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.110187][ T8175] delete_channel: no stack [ 335.130783][ T7] usb 6-1: Product: syz [ 335.576742][ T7] usb 6-1: config 0 descriptor?? [ 335.602043][ T7] usb 6-1: can't set config #0, error -71 [ 335.620389][ T7] usb 6-1: USB disconnect, device number 3 [ 337.651570][ T8202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.837'. [ 337.660535][ T8202] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 339.029722][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.271617][ T9] batman_adv: batadv1: IGMP Querier appeared [ 339.277773][ T9] batman_adv: batadv1: MLD Querier appeared [ 341.187295][ T8202] syz.1.837 (8202) used greatest stack depth: 19968 bytes left [ 342.360022][ T8261] loop7: detected capacity change from 0 to 512 [ 342.437636][ T8261] EXT4-fs (loop7): Ignoring removed nobh option [ 342.461173][ T8261] EXT4-fs (loop7): Unrecognized mount option "" or missing value [ 342.501239][ T8266] io-wq is not configured for unbound workers [ 346.729314][ T8290] loop5: detected capacity change from 0 to 1024 [ 347.973261][ T8325] loop7: detected capacity change from 0 to 164 [ 348.081602][ T8325] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 350.275446][ T8349] loop7: detected capacity change from 0 to 16 [ 350.424988][ T8349] erofs: (device loop7): mounted with root inode @ nid 36. [ 350.698981][ T8351] autofs4:pid:8351:autofs_fill_super: called with bogus options [ 353.433595][ T8386] loop5: detected capacity change from 0 to 40427 [ 354.082773][ T8386] F2FS-fs (loop5): invalid crc value [ 354.237711][ T6251] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46 [ 354.245196][ T8386] F2FS-fs (loop5): Found nat_bits in checkpoint [ 354.268757][ T6251] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 354.459918][ T8386] F2FS-fs (loop5): Start checkpoint disabled! [ 354.476989][ T6251] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 354.896308][ T8386] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 355.786058][ T8406] loop8: detected capacity change from 0 to 512 [ 356.549137][ T8406] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 356.753227][ T4365] attempt to access beyond end of device [ 356.753227][ T4365] loop5: rw=1, want=45104, limit=40427 [ 356.759975][ T8406] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.072907][ T4340] attempt to access beyond end of device [ 358.072907][ T4340] loop5: rw=2049, want=40992, limit=40427 [ 359.828539][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.906'. [ 359.961748][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 360.154419][ T8445] netlink: 'syz.2.906': attribute type 10 has an invalid length. [ 360.487091][ T8445] bridge2: port 1(team0) entered blocking state [ 360.519344][ T8445] bridge2: port 1(team0) entered disabled state [ 360.946567][ T8450] tipc: Started in network mode [ 360.967454][ T8450] tipc: Node identity 92864b079191, cluster identity 4711 [ 361.012779][ T8450] tipc: Enabled bearer , priority 0 [ 361.050044][ T8453] device syzkaller0 entered promiscuous mode [ 361.079314][ T8453] tipc: Resetting bearer [ 361.113849][ T8459] IPVS: Scheduler module ip_vs_sip not found [ 361.146301][ T8453] tipc: Disabling bearer [ 361.164630][ T8462] device bridge_slave_0 entered promiscuous mode [ 361.251254][ T8466] mmap: syz.1.911 (8466) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 368.435051][ T8568] device vlan2 entered promiscuous mode [ 368.845373][ T8568] device bridge0 entered promiscuous mode [ 370.344718][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.428787][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.457919][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.466624][ T8569] device bridge_slave_0 left promiscuous mode [ 370.515972][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.984344][ T8569] team0: Port device team_slave_0 removed [ 372.283114][ T8569] team0: Port device team_slave_1 removed [ 372.317620][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.325871][ T8569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.349914][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.357669][ T8569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.373022][ T8569] bond1: (slave ip6gretap1): Releasing backup interface [ 372.397934][ T8569] device batadv1 left promiscuous mode [ 372.424517][ T8569] bridge0: port 3(batadv1) entered disabled state [ 372.585124][ T8598] batman_adv: batadv0: Adding interface: dummy0 [ 372.595448][ T8602] xt_limit: Overflow, try lower: 65536/2147483648 [ 372.678215][ T8598] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.749243][ T8598] batman_adv: batadv0: Interface activated: dummy0 [ 373.656936][ T8606] net_ratelimit: 66 callbacks suppressed [ 373.656950][ T8606] batadv0: mtu less than device minimum [ 373.689000][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.702079][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.714479][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.726883][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.738749][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.750166][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.761502][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.772919][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.784429][ T8606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.033386][ T8619] tipc: Enabled bearer , priority 0 [ 375.260017][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 375.275647][ T8633] device syzkaller0 entered promiscuous mode [ 375.369093][ T7] tipc: Node number set to 2328422456 [ 376.314484][ T8646] tipc: Enabled bearer , priority 0 [ 376.327096][ T8646] device syzkaller0 entered promiscuous mode [ 377.099683][ T8646] tipc: Resetting bearer [ 377.217544][ T8645] tipc: Resetting bearer [ 377.246990][ T8645] tipc: Disabling bearer [ 377.316941][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 377.890668][ T8670] netlink: 'syz.8.964': attribute type 1 has an invalid length. [ 378.034636][ T8670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.055353][ T8670] device vlan2 entered promiscuous mode [ 378.061183][ T8670] device bond1 entered promiscuous mode [ 378.080999][ T8670] bond1: (slave gretap1): making interface the new active one [ 378.106082][ T8670] device gretap1 entered promiscuous mode [ 378.142849][ T8670] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 378.189145][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 378.226940][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 378.229079][ T8670] syz.8.964 (8670) used greatest stack depth: 19936 bytes left [ 378.468593][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.486485][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.978663][ T8743] delete_channel: no stack [ 384.351709][ T8759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 384.978497][ T8766] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 386.240201][ T8779] loop5: detected capacity change from 0 to 32768 [ 388.337800][ T8779] XFS (loop5): Mounting V5 Filesystem [ 388.448158][ T8779] XFS (loop5): log mount failed [ 388.490128][ T8803] delete_channel: no stack [ 389.165700][ T8800] orangefs_mount: mount request failed with -4 [ 389.414259][ T8812] netlink: 'syz.7.996': attribute type 1 has an invalid length. [ 389.558744][ T8812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.584687][ T8821] device vlan2 entered promiscuous mode [ 389.613571][ T8821] device bond1 entered promiscuous mode [ 389.865007][ T8822] bond1: (slave gretap1): making interface the new active one [ 389.899097][ T8822] device gretap1 entered promiscuous mode [ 389.934580][ T8822] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 389.978495][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 389.997987][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 390.240042][ T8835] vivid-008: ================= START STATUS ================= [ 390.250118][ T8835] vivid-008: Enable Output Cropping: true [ 390.257140][ T8835] vivid-008: Enable Output Composing: true [ 390.263188][ T8835] vivid-008: Enable Output Scaler: true [ 390.269291][ T8835] vivid-008: Tx RGB Quantization Range: Automatic [ 390.277100][ T8835] vivid-008: Transmit Mode: HDMI [ 390.282337][ T8835] vivid-008: Display Present: true inactive [ 390.288586][ T8835] vivid-008: Hotplug Present: 0x00000001 [ 390.411706][ T8835] vivid-008: RxSense Present: 0x00000001 [ 390.419002][ T8835] vivid-008: EDID Present: 0x00000001 [ 390.424691][ T8835] vivid-008: ================== END STATUS ================== [ 390.571442][ T8841] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.581168][ T8841] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.590078][ T8841] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.599051][ T8841] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.199018][ T8841] team0: Port device vxlan0 added [ 392.931360][ T8865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1009'. [ 393.686998][ T8879] loop5: detected capacity change from 0 to 512 [ 393.833475][ T8879] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 394.526082][ T8879] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 394.534018][ T8879] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 394.584630][ T8879] System zones: 0-3, 34-34 [ 394.605846][ T8879] EXT4-fs (loop5): orphan cleanup on readonly fs [ 394.638013][ T8879] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1015: bad orphan inode 1039 [ 394.669202][ T8879] EXT4-fs (loop5): Remounting filesystem read-only [ 394.677012][ T8879] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 398.887923][ T8922] device vlan3 entered promiscuous mode [ 399.002514][ T8922] device bridge0 entered promiscuous mode [ 399.106482][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 399.438528][ T8936] loop5: detected capacity change from 0 to 40427 [ 399.518110][ T8936] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 399.525990][ T8936] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 399.537438][ T8936] F2FS-fs (loop5): invalid crc value [ 400.679993][ T8936] F2FS-fs (loop5): Found nat_bits in checkpoint [ 400.776082][ T8936] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 400.783206][ T8936] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 400.950646][ T8956] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 400.977728][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.303116][ T8956] CIFS: Unable to determine destination address [ 402.385641][ T8964] tipc: Enabling of bearer rejected, already enabled [ 403.277109][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1034'. [ 405.372911][ T8986] device vlan2 entered promiscuous mode [ 405.378707][ T8986] device bridge0 entered promiscuous mode [ 406.108144][ T9000] netlink: 'syz.7.1046': attribute type 10 has an invalid length. [ 406.151362][ T9000] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 406.503441][ T9016] loop5: detected capacity change from 0 to 32768 [ 407.530865][ T9028] loop8: detected capacity change from 0 to 512 [ 407.662330][ T9028] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.1051: casefold flag without casefold feature [ 407.880614][ T9028] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1051: couldn't read orphan inode 15 (err -117) [ 407.910628][ T9043] netlink: 'syz.5.1053': attribute type 62 has an invalid length. [ 408.447617][ T9028] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.070543][ T9115] netlink: 'syz.5.1076': attribute type 16 has an invalid length. [ 416.079361][ T9115] netlink: 'syz.5.1076': attribute type 3 has an invalid length. [ 416.087419][ T9115] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.1076'. [ 417.959596][ T9122] ------------[ cut here ]------------ [ 417.971798][ T9122] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 417.989647][ T9122] WARNING: CPU: 1 PID: 9122 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 418.089494][ T9126] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1080'. [ 418.114792][ T9122] Modules linked in: [ 418.167013][ T9122] CPU: 0 PID: 9122 Comm: syz.2.1079 Not tainted 5.15.189-syzkaller #0 [ 418.312721][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.435179][ T9122] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 418.505822][ T9122] Code: 88 8e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 80 64 18 8b 4c 89 e6 89 ea e8 95 c8 6f 00 <0f> 0b e9 07 fd ff ff e8 b9 24 4a f8 0f 0b e9 b1 fe ff ff e8 ad 24 [ 418.527225][ T9122] RSP: 0018:ffffc9000421f248 EFLAGS: 00010246 [ 418.534825][ T9122] RAX: d38688ca631f6000 RBX: 0000000000400000 RCX: 0000000000080000 [ 418.543251][ T9122] RDX: ffffc90005919000 RSI: 0000000000005d04 RDI: 0000000000005d05 [ 418.551306][ T9122] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172267a8 [ 418.559664][ T9122] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88805e9c8000 [ 418.571485][ T9122] R13: ffff88805e9c9290 R14: ffff88802b668da0 R15: ffff88805e9ca298 [ 418.591000][ T9122] FS: 00007f8b62abd6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 418.619530][ T9122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.648741][ T9122] CR2: 0000001b31512ff8 CR3: 00000000650aa000 CR4: 00000000003506e0 [ 418.663889][ T9122] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.699212][ T9122] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.707297][ T9122] Call Trace: [ 418.710665][ T9122] [ 418.720788][ T9122] ? netif_carrier_on+0xc1/0x120 [ 418.728411][ T9122] ieee80211_ocb_leave+0x26f/0x320 [ 418.733867][ T9122] __cfg80211_leave_ocb+0x219/0x3f0 [ 418.739424][ T9122] cfg80211_leave_ocb+0x53/0x70 [ 418.744400][ T9122] cfg80211_change_iface+0x4f1/0xeb0 [ 418.749717][ T9122] nl80211_set_interface+0x598/0x7d0 [ 418.755141][ T9122] ? nl80211_dump_interface+0x5c0/0x5c0 [ 418.760730][ T9122] ? mutex_lock_nested+0x17/0x20 [ 418.765795][ T9122] genl_rcv_msg+0xbc6/0xf40 [ 418.770332][ T9122] ? genl_bind+0x370/0x370 [ 418.774823][ T9122] ? verify_lock_unused+0x140/0x140 [ 418.780162][ T9122] ? verify_lock_unused+0x140/0x140 [ 418.785773][ T9122] ? nl80211_dump_interface+0x5c0/0x5c0 [ 418.791525][ T9122] netlink_rcv_skb+0x1e0/0x430 [ 418.796468][ T9122] ? genl_bind+0x370/0x370 [ 418.800923][ T9122] ? netlink_ack+0xb60/0xb60 [ 418.805765][ T9122] ? __lock_acquire+0x7c60/0x7c60 [ 418.811000][ T9122] ? preempt_count_add+0x8d/0x190 [ 418.816627][ T9122] ? down_read+0x1aa/0x2e0 [ 418.821261][ T9122] genl_rcv+0x24/0x40 [ 418.825402][ T9122] netlink_unicast+0x774/0x920 [ 418.830269][ T9122] netlink_sendmsg+0x8ab/0xbc0 [ 418.837383][ T9122] ? netlink_getsockopt+0x560/0x560 [ 418.849224][ T9122] ? aa_sock_msg_perm+0x94/0x150 [ 418.855680][ T9122] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 418.867714][ T9122] ? security_socket_sendmsg+0x7c/0xa0 [ 418.881247][ T9122] ? netlink_getsockopt+0x560/0x560 [ 418.893542][ T9122] ____sys_sendmsg+0x5a2/0x8c0 [ 418.901585][ T9122] ? memset+0x1e/0x40 [ 418.905700][ T9122] ? __sys_sendmsg_sock+0x30/0x30 [ 418.910805][ T9122] ? import_iovec+0x6f/0xa0 [ 418.915466][ T9122] ___sys_sendmsg+0x1f0/0x260 [ 418.920848][ T9122] ? __sys_sendmsg+0x250/0x250 [ 418.925872][ T9122] ? __fdget+0x18b/0x210 [ 418.930138][ T9122] __se_sys_sendmsg+0x190/0x250 [ 418.935568][ T9122] ? __x64_sys_sendmsg+0x80/0x80 [ 418.941080][ T9122] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 418.949669][ T9122] ? lockdep_hardirqs_on+0x94/0x140 [ 418.955704][ T9122] do_syscall_64+0x4c/0xa0 [ 418.960219][ T9122] ? clear_bhb_loop+0x30/0x80 [ 418.965802][ T9122] ? clear_bhb_loop+0x30/0x80 [ 418.970504][ T9122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.976671][ T9122] RIP: 0033:0x7f8b64c559a9 [ 418.981104][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.000967][ T9122] RSP: 002b:00007f8b62abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.009585][ T9122] RAX: ffffffffffffffda RBX: 00007f8b64e7cfa0 RCX: 00007f8b64c559a9 [ 419.017716][ T9122] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 419.026289][ T9122] RBP: 00007f8b64cd7d69 R08: 0000000000000000 R09: 0000000000000000 [ 419.034437][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.042921][ T9122] R13: 0000000000000000 R14: 00007f8b64e7cfa0 R15: 00007ffd71c7dab8 [ 419.050980][ T9122] [ 419.078946][ T9122] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 419.086253][ T9122] CPU: 1 PID: 9122 Comm: syz.2.1079 Not tainted 5.15.189-syzkaller #0 [ 419.094531][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.104593][ T9122] Call Trace: [ 419.107909][ T9122] [ 419.110834][ T9122] dump_stack_lvl+0x168/0x230 [ 419.115611][ T9122] ? show_regs_print_info+0x20/0x20 [ 419.120805][ T9122] ? load_image+0x3b0/0x3b0 [ 419.125319][ T9122] panic+0x2c9/0x7f0 [ 419.129218][ T9122] ? bpf_jit_dump+0xd0/0xd0 [ 419.133734][ T9122] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 419.140151][ T9122] __warn+0x248/0x2b0 [ 419.144128][ T9122] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 419.150544][ T9122] report_bug+0x1b7/0x2e0 [ 419.154990][ T9122] handle_bug+0x3a/0x70 [ 419.159314][ T9122] exc_invalid_op+0x16/0x40 [ 419.163813][ T9122] asm_exc_invalid_op+0x16/0x20 [ 419.168741][ T9122] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 419.176403][ T9122] Code: 88 8e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 80 64 18 8b 4c 89 e6 89 ea e8 95 c8 6f 00 <0f> 0b e9 07 fd ff ff e8 b9 24 4a f8 0f 0b e9 b1 fe ff ff e8 ad 24 [ 419.196482][ T9122] RSP: 0018:ffffc9000421f248 EFLAGS: 00010246 [ 419.202562][ T9122] RAX: d38688ca631f6000 RBX: 0000000000400000 RCX: 0000000000080000 [ 419.210530][ T9122] RDX: ffffc90005919000 RSI: 0000000000005d04 RDI: 0000000000005d05 [ 419.218508][ T9122] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172267a8 [ 419.226479][ T9122] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88805e9c8000 [ 419.234457][ T9122] R13: ffff88805e9c9290 R14: ffff88802b668da0 R15: ffff88805e9ca298 [ 419.242449][ T9122] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 419.248867][ T9122] ? netif_carrier_on+0xc1/0x120 [ 419.253814][ T9122] ieee80211_ocb_leave+0x26f/0x320 [ 419.258939][ T9122] __cfg80211_leave_ocb+0x219/0x3f0 [ 419.264402][ T9122] cfg80211_leave_ocb+0x53/0x70 [ 419.269273][ T9122] cfg80211_change_iface+0x4f1/0xeb0 [ 419.274676][ T9122] nl80211_set_interface+0x598/0x7d0 [ 419.280063][ T9122] ? nl80211_dump_interface+0x5c0/0x5c0 [ 419.285630][ T9122] ? mutex_lock_nested+0x17/0x20 [ 419.290673][ T9122] genl_rcv_msg+0xbc6/0xf40 [ 419.295280][ T9122] ? genl_bind+0x370/0x370 [ 419.299722][ T9122] ? verify_lock_unused+0x140/0x140 [ 419.304937][ T9122] ? verify_lock_unused+0x140/0x140 [ 419.310158][ T9122] ? nl80211_dump_interface+0x5c0/0x5c0 [ 419.315729][ T9122] netlink_rcv_skb+0x1e0/0x430 [ 419.320507][ T9122] ? genl_bind+0x370/0x370 [ 419.324921][ T9122] ? netlink_ack+0xb60/0xb60 [ 419.329504][ T9122] ? __lock_acquire+0x7c60/0x7c60 [ 419.336705][ T9122] ? preempt_count_add+0x8d/0x190 [ 419.343105][ T9122] ? down_read+0x1aa/0x2e0 [ 419.348581][ T9122] genl_rcv+0x24/0x40 [ 419.353959][ T9122] netlink_unicast+0x774/0x920 [ 419.358768][ T9122] netlink_sendmsg+0x8ab/0xbc0 [ 419.363724][ T9122] ? netlink_getsockopt+0x560/0x560 [ 419.368946][ T9122] ? aa_sock_msg_perm+0x94/0x150 [ 419.373995][ T9122] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 419.379355][ T9122] ? security_socket_sendmsg+0x7c/0xa0 [ 419.385259][ T9122] ? netlink_getsockopt+0x560/0x560 [ 419.390552][ T9122] ____sys_sendmsg+0x5a2/0x8c0 [ 419.395871][ T9122] ? memset+0x1e/0x40 [ 419.399852][ T9122] ? __sys_sendmsg_sock+0x30/0x30 [ 419.404874][ T9122] ? import_iovec+0x6f/0xa0 [ 419.409377][ T9122] ___sys_sendmsg+0x1f0/0x260 [ 419.414125][ T9122] ? __sys_sendmsg+0x250/0x250 [ 419.419380][ T9122] ? __fdget+0x18b/0x210 [ 419.423633][ T9122] __se_sys_sendmsg+0x190/0x250 [ 419.428484][ T9122] ? __x64_sys_sendmsg+0x80/0x80 [ 419.433420][ T9122] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 419.439490][ T9122] ? lockdep_hardirqs_on+0x94/0x140 [ 419.444679][ T9122] do_syscall_64+0x4c/0xa0 [ 419.449175][ T9122] ? clear_bhb_loop+0x30/0x80 [ 419.453966][ T9122] ? clear_bhb_loop+0x30/0x80 [ 419.458642][ T9122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.464675][ T9122] RIP: 0033:0x7f8b64c559a9 [ 419.469109][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.489201][ T9122] RSP: 002b:00007f8b62abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.497697][ T9122] RAX: ffffffffffffffda RBX: 00007f8b64e7cfa0 RCX: 00007f8b64c559a9 [ 419.505845][ T9122] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 419.513820][ T9122] RBP: 00007f8b64cd7d69 R08: 0000000000000000 R09: 0000000000000000 [ 419.521922][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.529903][ T9122] R13: 0000000000000000 R14: 00007f8b64e7cfa0 R15: 00007ffd71c7dab8 [ 419.538068][ T9122] [ 419.541388][ T9122] Kernel Offset: disabled [ 419.546018][ T9122] Rebooting in 86400 seconds..